Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/WIiqYBMicffdaDGfXNEqVifxGw8.roa
File: WIiqYBMicffdaDGfXNEqVifxGw8.roa (raw, json)
Hash identifier: Bem/8DC0+/4TKfU86R9nwh2NYlU/RLz+ZgIFGu9T0VQ=
Subject key identifier: 58:88:AA:60:13:22:71:F7:DD:68:31:9F:5C:D1:2A:56:27:F1:1B:0F
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 0192DF2D9D62F389E7F4C0773DAF7B776D5D
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/WIiqYBMicffdaDGfXNEqVifxGw8.roa
Signing time: Wed 30 Oct 2024 20:46:01 +0000
ROA not before: Wed 30 Oct 2024 20:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213216
IP address blocks: 194.61.0.0/24 maxlen: 32
2a13:7fc0:4201::/48 maxlen: 48
2a13:7fc0:a42a::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:df:2d:9d:62:f3:89:e7:f4:c0:77:3d:af:7b:77:6d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Oct 30 20:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5888aa60132271f7dd68319f5cd12a5627f11b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:e9:e2:2e:86:9c:3b:8e:62:4a:ba:a3:d8:
e8:01:76:a5:b3:d0:e6:43:12:e7:5f:78:b5:db:5c:
b2:c0:61:64:55:99:f6:d1:c1:b2:6e:19:4a:a2:39:
e0:58:c4:e4:2f:27:92:e0:73:3f:f8:8d:a2:29:09:
91:24:40:6c:f9:27:61:d2:c7:8a:ba:2a:b8:83:95:
ef:7d:e7:c6:6e:36:de:ea:d7:11:09:6b:e7:17:0a:
15:31:15:76:c0:b5:63:1b:40:96:7b:6e:46:b7:d9:
b0:3b:78:42:a6:b9:d0:cc:9e:71:f1:35:ff:2d:cf:
44:e1:fc:eb:91:32:67:f7:8f:a5:f1:77:e0:da:d8:
31:3e:48:f2:29:31:57:3a:c7:97:33:af:1b:49:4d:
58:22:b4:fe:9f:ac:de:f9:9a:bd:75:82:9b:08:6e:
29:b6:cb:6b:1a:34:dd:1b:95:45:80:bb:fc:9a:1b:
43:02:fd:8c:d3:b0:c6:0d:ca:97:f8:bf:8d:59:a8:
07:d8:48:c9:06:62:a3:a9:7d:1a:d7:e3:9f:9e:85:
38:04:92:36:39:d7:4e:71:34:a0:bd:97:69:c6:33:
6f:96:74:5c:b9:c3:6e:9f:51:28:a1:98:cb:5e:85:
c3:1e:94:74:fd:f1:3b:dd:60:62:4b:6c:6f:cf:20:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:88:AA:60:13:22:71:F7:DD:68:31:9F:5C:D1:2A:56:27:F1:1B:0F
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/WIiqYBMicffdaDGfXNEqVifxGw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.0.0/24
IPv6:
2a13:7fc0:4201::/48
2a13:7fc0:a42a::/48
Signature Algorithm: sha256WithRSAEncryption
17:52:ce:9a:d8:10:b4:6f:df:13:58:92:23:b1:52:81:cf:ec:
15:7c:ef:f5:1f:df:e0:d9:16:ca:2b:52:4c:1c:be:d6:f7:de:
1a:dd:cc:3f:a6:c3:ef:d2:6e:0f:e7:ff:5c:3e:5d:2b:b2:a8:
1e:b7:d2:a9:d9:cb:ac:a5:c8:14:28:a1:ba:fb:fd:ff:4d:80:
b8:4e:80:e0:f6:5d:1d:96:ee:96:02:30:7e:9a:1e:f6:c0:6c:
e6:26:60:3e:f2:8b:ab:16:c6:05:ab:44:8e:57:86:3b:4b:d3:
6c:6a:ee:5b:f1:95:f4:80:02:88:ee:1c:d9:a4:2a:f6:0e:50:
28:e5:4b:f3:3c:0e:1a:48:69:19:ad:3a:6e:5c:a2:a9:e7:72:
90:c2:f4:9a:9c:76:f0:70:5e:46:11:af:46:7d:d4:e7:5a:74:
21:b2:f7:c2:2f:02:cc:f3:54:f3:01:f7:3a:0d:4d:f6:8b:de:
32:09:54:c6:e3:bc:d2:ba:12:e3:f0:b3:aa:1b:1c:ce:4b:86:
c4:28:cb:18:8b:a1:96:bf:41:3f:60:f2:56:fc:45:fd:04:11:
cc:2d:ab:5c:27:24:95:e2:50:6b:0d:83:e2:f2:2a:6b:6b:ef:
e2:06:bc:c3:c4:26:b5:d2:d5:fb:b4:17:93:da:65:54:4f:4a:
d2:cc:18:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:21 2024 by rpki-client on console-fra.rpki-client.org