Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/WN9pD3oJxPgMuaTxa9Bk-dDo37k.roa
File: WN9pD3oJxPgMuaTxa9Bk-dDo37k.roa (raw, json)
Hash identifier: upZ+IKyvMRIfhfJSehgoPOC4vMdtS3Qrdew7y09DAjA=
Subject key identifier: 58:DF:69:0F:7A:09:C4:F8:0C:B9:A4:F1:6B:D0:64:F9:D0:E8:DF:B9
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF91323BEA40E800D5C60FE42D4DF
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/WN9pD3oJxPgMuaTxa9Bk-dDo37k.roa
Signing time: Tue 02 Jan 2024 04:30:30 +0000
ROA not before: Tue 02 Jan 2024 04:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211634
IP address blocks: 85.153.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f9:13:23:be:a4:0e:80:0d:5c:60:fe:42:d4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58df690f7a09c4f80cb9a4f16bd064f9d0e8dfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:01:d2:27:68:54:64:b2:39:95:d6:fe:13:
f4:2b:5c:74:e2:c7:24:aa:14:49:f4:9a:81:1e:8d:
24:69:be:53:92:94:5b:18:7f:2b:28:fb:67:52:26:
6c:2a:73:42:cb:8d:15:70:38:85:8e:6f:ea:7b:ed:
a0:41:06:c3:c0:36:cc:98:19:12:fa:61:c5:b6:73:
7c:a7:df:01:fb:cb:57:f4:19:14:50:02:3c:67:d9:
54:41:4b:e7:47:5e:9f:87:f3:8e:cd:4f:5f:e1:3f:
74:27:8f:bb:cc:3d:eb:aa:82:59:cf:ec:51:ef:6a:
fe:91:db:b0:23:71:57:e4:41:42:20:50:4b:4e:e4:
4d:62:93:54:e3:5d:f5:0c:3e:af:20:f7:f7:25:56:
6f:22:9f:a5:55:9e:98:c2:e0:6d:88:2b:61:0f:fc:
90:c4:81:2f:84:e9:39:af:65:4e:c7:6b:e7:67:08:
bc:07:92:41:4f:ad:16:17:4b:e1:a7:a1:6d:56:1c:
0f:7a:09:a4:c8:50:a1:af:76:15:60:f5:2a:85:d7:
bf:05:69:13:30:96:97:40:f3:9b:e5:44:c1:21:a8:
5f:96:bf:7e:a0:e1:22:f0:92:7e:a1:28:af:42:6b:
c7:d3:64:16:36:d3:e2:7e:13:9c:6b:99:06:f4:4a:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:69:0F:7A:09:C4:F8:0C:B9:A4:F1:6B:D0:64:F9:D0:E8:DF:B9
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/WN9pD3oJxPgMuaTxa9Bk-dDo37k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.159.0/24
Signature Algorithm: sha256WithRSAEncryption
20:91:2d:fd:d0:3d:51:54:00:91:75:08:e6:a1:a1:3c:c5:36:
81:d0:b0:ca:a6:bc:b9:1d:01:38:97:92:8f:03:64:d3:ce:e3:
cd:bc:07:1e:44:21:52:f4:57:d3:e3:d9:ea:89:e0:38:ba:04:
12:22:a0:53:6e:97:df:3a:db:58:cc:98:30:e7:25:ca:06:c0:
c5:d6:fc:69:0a:c2:b4:78:26:c0:a8:11:dc:1d:04:ec:6d:92:
f4:4c:cd:92:da:7a:c8:ed:f3:c5:10:c5:dc:53:d3:40:6d:2e:
a6:2f:2d:38:eb:e3:47:29:60:22:5b:fa:23:08:24:1a:72:ca:
a2:ca:72:25:8c:95:8e:b5:42:47:c0:fa:90:69:0a:a2:b7:4e:
0a:4b:ab:ad:db:c9:ff:a3:42:a9:b1:de:65:51:9e:7f:5f:57:
e8:c7:b5:8c:73:5f:96:bb:0b:6b:98:55:14:b9:33:ef:c0:d3:
de:ac:74:1c:75:79:35:a3:f1:37:48:8d:71:45:ee:51:6c:1f:
06:c4:dd:0f:6d:29:25:2f:df:7c:4d:65:2b:07:65:fc:ef:d0:
5a:8b:bc:d1:33:6f:e9:f5:d8:f1:77:ca:4c:a1:1e:67:19:bc:
92:30:f6:69:7d:c9:9a:de:ee:5e:e1:e0:31:16:de:0e:0c:74:
3e:d7:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:15:09 2024 by rpki-client on console-fra.rpki-client.org