Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/WlexZI9HfgbsdmMCeQPpTefTMao.roa
File: WlexZI9HfgbsdmMCeQPpTefTMao.roa (raw, json)
Hash identifier: c0DjiwxT0XmzycOy0gdf2/nxp28/74OpC67WqR9X6fM=
Subject key identifier: 5A:57:B1:64:8F:47:7E:06:EC:76:63:02:79:03:E9:4D:E7:D3:31:AA
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018E65C7EE4F20C4E3F4614A26103C6B764A
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/WlexZI9HfgbsdmMCeQPpTefTMao.roa
Signing time: Fri 22 Mar 2024 10:49:45 +0000
ROA not before: Fri 22 Mar 2024 10:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133944
IP address blocks: 64.137.17.0/24 maxlen: 24
64.137.38.0/24 maxlen: 24
64.137.66.0/24 maxlen: 24
64.137.86.0/24 maxlen: 24
64.137.88.0/24 maxlen: 24
64.137.91.0/24 maxlen: 24
64.137.103.0/24 maxlen: 24
64.137.104.0/24 maxlen: 24
64.137.106.0/24 maxlen: 24
64.137.108.0/24 maxlen: 24
64.137.112.0/24 maxlen: 24
64.137.118.0/24 maxlen: 24
64.137.124.0/24 maxlen: 24
104.143.229.0/24 maxlen: 24
104.239.86.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
138.128.145.0/24 maxlen: 24
216.173.84.0/24 maxlen: 24
216.173.103.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:c7:ee:4f:20:c4:e3:f4:61:4a:26:10:3c:6b:76:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 22 10:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a57b1648f477e06ec7663027903e94de7d331aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:f6:5f:1c:91:15:f6:28:b0:ec:4c:9e:11:
cf:bd:4e:d7:9d:9c:08:29:5a:c2:ea:1c:d7:10:e4:
7e:70:5f:8c:67:8d:11:bd:34:17:5d:af:a3:20:56:
92:03:86:a6:9a:1b:1e:ea:72:5e:b7:c3:58:f2:2d:
c3:da:79:11:89:1b:4f:e8:18:88:11:33:6f:d2:02:
96:21:0c:ea:7a:e0:fe:63:1b:4b:8b:48:f8:88:5c:
19:b1:f1:d0:b8:80:1c:7b:07:95:c9:95:db:e7:0b:
3b:d7:58:ed:e0:78:02:e9:cd:78:d1:1f:2c:9b:02:
30:f4:a8:55:cf:90:2e:02:5c:53:92:52:76:c9:8c:
22:0e:e6:71:65:25:52:8e:2f:61:f7:4e:8c:66:96:
58:27:ad:9a:0e:56:c3:50:b4:f9:3c:61:62:49:8d:
5e:65:fe:ff:1c:1d:8e:a9:c0:49:ab:61:0f:94:6d:
2c:23:7c:51:5f:7b:d7:79:31:48:43:0e:00:61:62:
4d:71:d4:f7:39:03:ba:7f:e5:b3:5a:f7:89:86:da:
2c:25:90:b2:9c:b6:d1:d9:bc:78:e1:20:86:1b:25:
40:74:2d:0f:9f:39:d5:da:8a:60:5c:a4:d0:e4:c0:
33:54:77:f0:d0:5b:f2:14:13:65:9b:bf:58:53:f2:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:57:B1:64:8F:47:7E:06:EC:76:63:02:79:03:E9:4D:E7:D3:31:AA
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/WlexZI9HfgbsdmMCeQPpTefTMao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.17.0/24
64.137.38.0/24
64.137.66.0/24
64.137.86.0/24
64.137.88.0/24
64.137.91.0/24
64.137.103.0-64.137.104.255
64.137.106.0/24
64.137.108.0/24
64.137.112.0/24
64.137.118.0/24
64.137.124.0/24
104.143.229.0/24
104.239.86.0/24
104.239.101.0/24
104.239.108.0/24
138.128.145.0/24
216.173.84.0/24
216.173.103.0/24
216.173.109.0/24
Signature Algorithm: sha256WithRSAEncryption
89:64:b8:d7:34:6e:e0:79:bb:f3:8a:81:a8:8d:8f:76:a4:8a:
be:56:b8:de:c6:ae:9a:da:12:49:cf:2c:5e:58:59:a5:00:d6:
f7:6c:c0:32:8b:75:52:f1:cd:cf:d2:6a:87:01:6e:d3:d1:22:
04:20:38:3c:63:c9:a5:03:db:94:69:8a:8a:df:3a:b6:8d:e7:
0c:7c:71:cc:7c:b3:91:c8:13:b7:ec:b5:40:39:cc:fb:ce:43:
5f:13:46:99:2d:5f:8d:26:dc:28:db:71:70:8b:f3:9b:f5:3e:
49:9e:f9:40:16:56:67:0c:82:fd:0a:b0:8e:52:34:90:e6:67:
f8:b3:79:b2:02:3b:e8:eb:77:f2:92:2a:f5:ea:4d:f3:58:43:
20:5d:0c:53:d2:33:36:ac:54:c0:6f:40:c5:3a:04:39:f7:11:
6f:ca:df:74:11:45:e4:d7:4b:a1:c9:a4:0c:8d:4e:de:72:b3:
2b:c6:3c:0c:f0:d9:52:9b:d0:f2:7a:55:54:c3:bf:21:bf:8b:
73:76:59:41:00:c9:5a:3f:11:39:02:0d:01:28:a4:21:c3:dc:
b2:3c:a6:d8:9e:87:41:14:07:4a:88:68:64:d9:72:f3:a5:0b:
23:af:e2:0a:e4:a2:81:b0:9d:83:ba:8c:c6:0d:b6:08:3b:ef:
8d:bf:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:45:14 2024 by rpki-client on console-ams.rpki-client.org