Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/WMbSM4FaheLpF2EtBwn0CLZDsV8.roa
File: WMbSM4FaheLpF2EtBwn0CLZDsV8.roa (raw, json)
Hash identifier: XPVUYfHebgV5SqO5f/qhOV6aYtXZRvCHc/CXg+Q0QJo=
Subject key identifier: 58:C6:D2:33:81:5A:85:E2:E9:17:61:2D:07:09:F4:08:B6:43:B1:5F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A6B6646A8C0374C8FB9574A81DAC0
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/WMbSM4FaheLpF2EtBwn0CLZDsV8.roa
Signing time: Tue 02 Jan 2024 12:33:46 +0000
ROA not before: Tue 02 Jan 2024 12:33:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41378
IP address blocks: 185.148.12.0/22 maxlen: 24
185.218.4.0/22 maxlen: 24
37.123.192.0/21 maxlen: 24
185.212.60.0/22 maxlen: 24
31.25.88.0/23 maxlen: 24
185.217.108.0/23 maxlen: 24
185.217.110.0/23 maxlen: 24
82.115.30.0/23 maxlen: 24
212.107.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6b:66:46:a8:c0:37:4c:8f:b9:57:4a:81:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58c6d233815a85e2e917612d0709f408b643b15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:01:be:c0:e4:dc:9a:c9:d6:a9:f1:0f:44:b3:
7f:e4:8c:3c:57:92:91:08:bc:3e:00:18:20:60:70:
cd:14:f6:6c:a3:3a:77:ec:fc:bf:5b:d3:e4:3b:a6:
04:14:1b:72:1d:f9:af:b1:18:9c:28:f1:c0:6e:8a:
b0:2c:e3:fa:d6:38:37:33:3c:be:2d:57:4f:59:cb:
53:64:6f:11:c5:69:fa:df:d8:91:84:cf:9c:e1:e7:
a1:b2:83:35:59:27:9c:9c:df:49:9b:63:ca:a5:c8:
1d:8d:6d:97:1a:88:bb:93:8e:ad:1d:c7:a9:c9:c9:
c6:82:3d:93:b1:90:98:25:06:98:0c:7f:7c:60:b9:
e0:7d:92:e2:62:2c:56:30:79:dd:fa:a9:93:2a:66:
23:9f:ab:80:8b:59:3c:f3:0b:72:65:29:7f:e7:4e:
1b:54:cc:3f:05:26:d5:c9:a3:ac:ea:21:f0:6e:cd:
5b:d1:a4:5f:4c:22:c5:9f:4d:da:3c:59:01:72:bb:
f4:a1:0e:1e:30:a2:38:04:47:55:0d:3f:ec:3d:cb:
20:02:f9:52:49:3c:0a:34:de:9f:34:4f:79:a4:3a:
69:66:48:52:f8:62:76:e2:04:08:8c:62:6e:d8:86:
68:13:f1:6f:de:ce:9f:55:cc:f1:aa:1a:87:a5:1c:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C6:D2:33:81:5A:85:E2:E9:17:61:2D:07:09:F4:08:B6:43:B1:5F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/WMbSM4FaheLpF2EtBwn0CLZDsV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.88.0/23
37.123.192.0/21
82.115.30.0/23
185.148.12.0/22
185.212.60.0/22
185.217.108.0/22
185.218.4.0/22
212.107.28.0/22
Signature Algorithm: sha256WithRSAEncryption
77:64:ef:dd:46:f7:f3:37:d3:28:f9:f2:b6:e5:7e:9c:60:6b:
54:68:07:4a:1b:d4:ae:ef:2c:13:f9:1f:19:4b:19:b2:60:19:
11:66:82:70:90:58:99:55:7a:a1:64:7d:96:8e:13:2f:14:c2:
48:00:4a:fd:3c:00:34:46:4e:3d:4e:8b:1f:a0:78:69:ae:21:
45:a3:99:71:18:01:b5:96:ef:20:36:9d:0b:44:05:37:44:eb:
e9:77:e9:16:0f:56:76:fc:50:25:f5:d0:de:29:67:e2:dc:87:
70:11:ed:c2:83:d5:9a:dc:8a:6b:e0:d1:de:fc:d5:2f:7c:e7:
17:b6:75:44:26:8d:f0:ef:a7:29:dc:5c:3b:4f:5d:99:17:8d:
e4:00:8a:20:8d:d8:95:16:cb:f3:d7:4b:57:1d:07:89:b8:8b:
e5:5b:78:cc:b2:68:81:ca:11:8d:b1:36:a5:af:76:74:a2:66:
cb:0e:33:2b:c5:a8:40:d6:49:37:f7:cb:3f:1a:f7:3f:d8:ca:
54:5b:23:6c:f3:10:61:7a:23:48:3d:2b:15:b3:0d:d6:85:00:
e0:0b:10:fd:ed:2f:72:70:49:0e:61:55:48:eb:b8:7b:17:ed:
c6:61:a5:2b:05:72:ac:6a:12:83:94:ec:b6:3b:cc:f2:13:8d:
ce:6b:3f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:33:22 2024 by rpki-client on console-ams.rpki-client.org