Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/wkRiWlSMkwEGcBGG012a8sS2SS4.roa
File: wkRiWlSMkwEGcBGG012a8sS2SS4.roa (raw, json)
Hash identifier: LccaPFDklrxTvgyjU8BEwwbolrW7TucDxQwG+J/CtGw=
Subject key identifier: C2:44:62:5A:54:8C:93:01:06:70:11:86:D3:5D:9A:F2:C4:B6:49:2E
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019049C6E7ADDC681A0F36375D77829491BC
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/wkRiWlSMkwEGcBGG012a8sS2SS4.roa
Signing time: Mon 24 Jun 2024 10:24:50 +0000
ROA not before: Mon 24 Jun 2024 10:24:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34837
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
212.16.64.0/24 maxlen: 24
212.16.65.0/24 maxlen: 24
212.16.67.0/24 maxlen: 24
212.16.75.0/24 maxlen: 24
212.16.82.0/24 maxlen: 24
212.16.83.0/24 maxlen: 24
212.16.88.0/24 maxlen: 24
212.16.90.0/24 maxlen: 24
212.16.91.0/24 maxlen: 24
212.80.0.0/19 maxlen: 19
212.80.1.0/24 maxlen: 24
212.80.3.0/24 maxlen: 24
212.80.5.0/24 maxlen: 24
212.80.11.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
212.80.16.0/24 maxlen: 24
212.80.28.0/24 maxlen: 24
212.80.30.0/24 maxlen: 24
212.80.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:c6:e7:ad:dc:68:1a:0f:36:37:5d:77:82:94:91:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 24 10:24:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c244625a548c930106701186d35d9af2c4b6492e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:cb:cd:ad:46:b9:fb:06:4c:70:67:f2:66:
20:21:d1:86:44:d4:a7:ed:70:8f:f6:26:86:12:75:
d7:13:7c:26:cb:cb:01:4c:b1:ea:0e:a5:47:d5:d0:
03:7c:d8:69:a4:b5:38:47:f3:16:7c:39:31:7f:a8:
3a:fd:00:b8:ef:29:14:3a:20:ad:1a:17:76:31:aa:
95:f7:66:5b:fb:12:d3:6c:70:ca:d6:b5:8c:c4:89:
08:eb:c2:fa:58:0a:20:87:26:66:cb:73:65:fb:7b:
b9:74:67:bf:ec:48:c0:15:b2:cb:22:52:1f:38:d9:
74:40:be:24:1b:17:41:e3:b3:cd:03:6c:b1:5f:94:
ff:37:95:2a:67:ec:11:5f:b7:38:78:99:47:55:18:
06:2e:1b:e3:a1:08:e9:d8:9f:4e:bc:7a:ea:fa:d9:
fd:ed:79:48:81:ac:82:fd:ae:52:50:76:6d:70:04:
24:14:2a:34:a4:a2:1f:c0:7f:56:8b:b2:36:1e:c2:
87:a5:30:4f:f6:80:21:c2:57:f9:cf:2c:59:ba:fc:
8e:33:ba:07:28:26:ad:9d:f0:0c:eb:27:09:23:6e:
41:34:aa:72:ab:3c:43:ca:bb:14:8f:d6:a7:80:48:
89:94:ca:ac:67:e3:37:be:af:70:46:20:f9:48:41:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:62:5A:54:8C:93:01:06:70:11:86:D3:5D:9A:F2:C4:B6:49:2E
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/wkRiWlSMkwEGcBGG012a8sS2SS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/24
212.16.64.0/23
212.16.67.0/24
212.16.75.0/24
212.16.82.0/23
212.16.88.0/24
212.16.90.0/23
212.80.0.0/19
Signature Algorithm: sha256WithRSAEncryption
44:ac:5a:8a:c9:49:ef:22:55:4b:0c:80:0e:db:b2:ac:70:74:
e6:19:11:42:33:e1:9f:34:d6:1d:09:84:0f:81:5b:80:13:be:
b5:61:e3:bb:a1:db:f7:ff:b8:45:15:db:98:99:b3:94:da:68:
4a:ae:46:e8:7e:0c:78:dd:ae:39:0c:04:9c:be:08:e7:aa:db:
60:2d:7c:03:a6:d4:b0:23:55:61:d7:e6:27:21:d3:ef:12:9c:
41:87:72:e2:49:fe:1b:cb:7c:e4:81:68:99:11:ca:8e:70:86:
fa:61:d7:98:98:6c:82:7c:83:f0:64:b6:4a:60:0d:d7:12:db:
50:09:80:45:4f:a7:c0:2b:70:e5:74:29:35:31:3e:36:6d:cc:
ca:27:0f:c1:90:86:16:99:65:1a:71:10:af:bc:20:d8:38:87:
d0:47:5c:2f:0e:1c:db:73:df:1a:e6:84:e5:ad:e8:1c:92:d6:
ad:ca:a3:df:e1:4b:bb:35:f9:0d:a5:1f:b1:ac:79:1c:de:6d:
a9:65:e0:ba:15:76:0a:0e:8c:85:d6:26:fe:ed:af:0d:cd:8d:
7d:e0:69:46:86:87:ae:8c:1e:ac:41:58:52:01:8c:69:2e:95:
e8:6f:87:de:47:93:b3:56:a9:43:2a:26:cd:d8:bc:0c:39:be:
20:7e:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:47:06 2024 by rpki-client on console-fra.rpki-client.org