Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wn_xahVVNbMLVDvY68SSeFsrLqo.roa
File: wn_xahVVNbMLVDvY68SSeFsrLqo.roa (raw, json)
Hash identifier: G584Y0mUHbZj6/+vHrTgpOrZdLRzEq/LUBKoSCzAuuE=
Subject key identifier: C2:7F:F1:6A:15:55:35:B3:0B:54:3B:D8:EB:C4:92:78:5B:2B:2E:AA
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0190E130B97DFD196200792BDB14E3C4D6A5
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wn_xahVVNbMLVDvY68SSeFsrLqo.roa
Signing time: Tue 23 Jul 2024 20:03:05 +0000
ROA not before: Tue 23 Jul 2024 20:03:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210110
IP address blocks: 37.123.192.0/21 maxlen: 24
82.115.30.0/23 maxlen: 24
185.148.12.0/22 maxlen: 24
185.212.60.0/22 maxlen: 24
185.218.4.0/22 maxlen: 24
212.107.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e1:30:b9:7d:fd:19:62:00:79:2b:db:14:e3:c4:d6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jul 23 20:03:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c27ff16a155535b30b543bd8ebc492785b2b2eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:89:03:b6:6c:1d:00:36:68:79:ac:d1:c3:
d2:ae:c0:fe:26:62:0f:ea:57:ee:61:da:22:78:98:
18:de:45:12:2d:06:cb:53:38:4b:92:d4:31:26:67:
86:40:36:37:94:69:41:3d:5f:f9:45:35:88:20:86:
97:48:e1:e1:73:6c:f4:2e:20:8f:92:8f:50:ea:20:
88:e2:7b:ff:0b:cb:a4:7f:4d:7d:a3:a0:12:7f:1c:
dc:39:19:3f:a9:07:a6:02:a6:fd:78:76:36:0d:1a:
b4:7a:c8:58:97:25:4e:be:c8:e9:b0:a2:32:42:77:
3d:97:4f:b3:98:9e:f8:b3:e5:c1:cc:31:7c:83:5e:
4f:b7:9a:e0:e2:ea:8d:f0:7c:0d:d0:af:5d:29:8b:
10:1f:07:64:c8:b0:c0:34:4e:36:bc:b1:92:17:d1:
d2:ef:ca:93:0d:bb:57:72:58:cf:72:48:28:96:be:
d3:4f:08:67:3d:55:e1:b1:a4:5d:4b:12:3b:db:34:
88:59:f0:c1:c6:b3:89:72:42:af:e4:56:1a:1f:9f:
98:0b:7a:11:61:7d:40:bc:a2:ac:a2:c9:1c:89:19:
f6:17:cf:91:b2:fb:41:f7:7a:65:13:ed:13:43:97:
32:f4:ba:79:42:13:91:ab:b4:ca:42:72:2f:67:95:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:F1:6A:15:55:35:B3:0B:54:3B:D8:EB:C4:92:78:5B:2B:2E:AA
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wn_xahVVNbMLVDvY68SSeFsrLqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.192.0/21
82.115.30.0/23
185.148.12.0/22
185.212.60.0/22
185.218.4.0/22
212.107.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:ef:68:6f:79:bb:0e:a0:f6:4d:d9:a2:7a:87:82:94:ab:91:
bb:fe:91:ca:00:fb:c3:7a:df:c6:72:8f:1c:39:af:2b:b9:52:
20:3b:a2:de:e8:1c:bc:57:b9:26:03:63:cf:c7:09:66:46:a3:
7b:e9:51:01:12:ee:53:84:fe:39:dc:b3:ab:68:cd:6a:f0:df:
95:bf:2e:5a:7e:ec:da:c4:30:34:72:12:d9:61:c4:2d:1d:6b:
8f:b5:bd:05:c9:cd:d2:71:81:d5:79:67:8d:d0:0f:88:fb:c4:
31:5d:cf:31:42:48:3d:80:e4:51:e2:86:1e:62:37:9b:03:71:
26:ac:62:ea:d0:9d:06:b9:e8:4e:c0:c8:38:59:3b:92:29:1d:
71:71:35:14:4b:00:a5:a0:b7:d9:e3:ae:a0:73:f3:5f:49:87:
53:34:6a:9b:cd:b9:97:70:4c:af:13:84:c9:31:53:66:b5:6f:
54:43:7f:54:c3:2c:92:2e:82:35:2b:5f:d5:b9:00:b5:5c:79:
7e:4f:43:e4:17:ac:f0:fd:42:2d:b6:1f:8a:8d:45:fc:9c:4d:
b8:42:1c:97:3c:2c:fb:76:e0:65:b4:79:6d:97:24:a7:da:a0:
c0:b0:c6:b4:e0:b4:db:72:d0:36:ff:dd:90:98:c4:43:14:1d:
e7:96:b0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:41:46 2024 by rpki-client on console-fra.rpki-client.org