Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/W6MSC-W7PdZe6XAcGJHlQb44ngM.roa
File: W6MSC-W7PdZe6XAcGJHlQb44ngM.roa (raw, json)
Hash identifier: p8yT1drkzdbFI+3VdjoQDUdyx1S0QqWvVw4TOesadlA=
Subject key identifier: 5B:A3:12:0B:E5:BB:3D:D6:5E:E9:70:1C:18:91:E5:41:BE:38:9E:03
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 018CC94BD4EBA5C473FB8747F8820413A0E5
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/W6MSC-W7PdZe6XAcGJHlQb44ngM.roa
Signing time: Tue 02 Jan 2024 08:30:39 +0000
ROA not before: Tue 02 Jan 2024 08:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47207
IP address blocks: 93.157.0.0/21 maxlen: 24
195.5.163.0/24 maxlen: 24
2001:67c:54::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:d4:eb:a5:c4:73:fb:87:47:f8:82:04:13:a0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Jan 2 08:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ba3120be5bb3dd65ee9701c1891e541be389e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:f8:08:c5:e2:a4:7c:04:3d:2f:74:0b:51:
78:da:46:32:df:ab:74:61:41:5c:4c:2c:f4:17:47:
b4:f7:bb:7a:6a:ba:d8:6e:36:4d:9a:fd:31:31:da:
8a:df:d1:14:5f:c2:74:61:a6:cb:3d:44:c8:c7:44:
25:01:6c:0c:13:c6:35:97:c8:63:9d:b6:b9:69:bf:
f3:ad:4d:dd:67:46:49:e4:cc:55:00:cc:53:00:b2:
46:25:99:c9:49:55:2c:00:5c:18:76:89:2f:c0:75:
03:14:4c:f2:e7:e7:64:e9:4a:92:a8:af:4e:a1:7e:
70:71:ad:1b:4d:0b:9f:67:6e:86:ac:f0:8b:f9:e9:
a0:91:24:76:f2:e9:57:01:7b:4d:b9:c2:04:ed:61:
00:f3:5b:92:7c:cf:17:20:24:7d:d2:7e:de:6e:3c:
37:38:16:2d:0c:9c:92:58:08:f3:64:06:8b:8f:ac:
7a:8e:86:fd:89:28:d6:4d:07:e4:76:0d:23:bd:51:
df:1f:84:cb:f4:d9:e8:28:b5:99:37:d7:2e:50:19:
96:65:25:87:fe:ff:d9:4f:ad:12:ef:28:4e:4d:66:
05:69:53:0b:83:ff:91:d0:9c:d6:76:d8:2f:72:71:
7d:05:b4:d6:9a:8a:79:c5:56:d5:7a:db:41:f9:cc:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A3:12:0B:E5:BB:3D:D6:5E:E9:70:1C:18:91:E5:41:BE:38:9E:03
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/W6MSC-W7PdZe6XAcGJHlQb44ngM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.0.0/21
195.5.163.0/24
IPv6:
2001:67c:54::/48
Signature Algorithm: sha256WithRSAEncryption
a5:60:32:18:7f:a3:44:0b:5d:54:5a:6f:23:f4:0f:ae:39:6c:
eb:4d:17:5c:95:e6:9d:19:ac:e8:d3:8a:dc:c4:d9:f0:14:3b:
91:5c:99:58:9a:43:ad:76:fb:ad:23:8e:e5:9b:e8:cd:5c:e2:
2e:10:dc:27:c5:e5:69:26:33:9a:a3:a2:32:46:77:0f:da:a2:
6f:31:6c:5c:e0:e5:92:1e:3e:54:15:fe:03:f6:0e:cb:8d:03:
cc:3b:85:ba:09:93:73:55:bf:16:ba:04:cd:32:a1:3d:37:2c:
23:1f:20:83:69:9e:82:1c:73:29:12:1d:05:b1:80:36:74:23:
55:82:3d:f0:ff:38:9c:5e:c0:0a:92:ec:6f:c4:f3:b3:23:a9:
f2:57:78:a7:fa:87:30:69:cd:17:d9:d5:e9:c2:af:cd:b3:6d:
6e:2a:28:45:f3:e9:b1:e0:db:f8:3f:41:7f:65:d0:20:05:d5:
07:7e:05:e5:07:5f:4f:d4:b5:42:04:e3:39:60:16:a3:63:4f:
13:fb:6a:16:6b:b1:6a:f9:c1:74:7f:cc:79:08:7b:02:f0:ec:
91:e8:da:4b:52:cd:44:53:32:da:8e:e7:4d:8c:8b:9f:96:7d:
30:c4:e9:72:1c:9b:54:57:22:0f:70:0f:1e:25:57:cd:02:ce:
b0:d2:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:44 2024 by rpki-client on console-fra.rpki-client.org