Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/W3bGh5xlKb3kugoThLSEbZHF-C8.roa
File: W3bGh5xlKb3kugoThLSEbZHF-C8.roa (raw, json)
Hash identifier: Zp6K0fameimjy0w7VZFUTkmX4+U+QaOGFwhwIeH1xo8=
Subject key identifier: 5B:76:C6:87:9C:65:29:BD:E4:BA:0A:13:84:B4:84:6D:91:C5:F8:2F
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 01934324902C8FE31389EA2EBA3523CF572D
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/W3bGh5xlKb3kugoThLSEbZHF-C8.roa
Signing time: Tue 19 Nov 2024 06:38:09 +0000
ROA not before: Tue 19 Nov 2024 06:38:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8427
IP address blocks: 31.47.112.0/20 maxlen: 32
46.167.64.0/18 maxlen: 32
79.134.0.0/19 maxlen: 32
109.201.192.0/19 maxlen: 32
178.18.96.0/20 maxlen: 32
212.21.0.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:24:90:2c:8f:e3:13:89:ea:2e:ba:35:23:cf:57:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Nov 19 06:38:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b76c6879c6529bde4ba0a1384b4846d91c5f82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:02:bc:f0:d6:92:90:3e:b5:7d:d9:47:a4:
29:3a:e5:c5:3d:7f:76:3c:4f:f5:67:5f:6a:57:d0:
21:93:8e:03:5d:9b:eb:ff:08:cd:e0:d2:b3:62:9d:
40:3d:79:c1:7f:79:56:6d:0d:92:8e:7f:71:ea:dd:
e4:13:22:ea:02:e9:8a:fa:9c:66:a1:b1:bd:57:19:
9b:e8:30:84:c7:78:9d:4e:2f:88:83:5f:8d:5a:6c:
c3:58:8a:2f:a3:0d:54:c0:9b:02:00:a8:80:29:b9:
ba:b8:c3:f5:5b:c0:c8:52:2f:6b:33:37:3e:f5:0a:
f7:bc:b6:18:3f:1d:a9:95:ba:a8:6c:20:25:00:ef:
fb:f5:9e:57:20:7c:85:df:31:4d:76:9e:42:6c:c7:
2d:7c:20:25:e1:ca:49:1c:25:a1:5e:fc:32:de:ec:
14:37:43:b7:b7:c9:81:ac:65:95:38:b0:c8:7b:22:
03:37:37:67:d3:f3:3b:24:25:5d:9e:75:c9:ac:eb:
d1:35:c3:05:03:72:70:a0:72:34:30:e1:6a:f4:4d:
3e:c2:cf:14:68:34:c7:b7:dc:1c:a9:9c:8c:fd:3b:
8e:c8:56:d5:03:f1:db:87:e6:6e:3b:fd:25:35:dc:
bd:f5:04:4c:d6:73:b2:fd:b7:7e:82:8b:4d:c8:02:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:76:C6:87:9C:65:29:BD:E4:BA:0A:13:84:B4:84:6D:91:C5:F8:2F
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/W3bGh5xlKb3kugoThLSEbZHF-C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.112.0/20
46.167.64.0/18
79.134.0.0/19
109.201.192.0/19
178.18.96.0/20
212.21.0.0/19
Signature Algorithm: sha256WithRSAEncryption
62:7d:2f:1b:dc:0d:93:ce:03:16:17:fe:d7:84:a1:5c:0e:36:
11:79:8d:55:95:8d:c1:b7:cb:69:d2:bf:98:91:0d:57:d8:49:
b3:ea:4e:02:4c:e6:8e:dd:ca:d0:76:7b:03:84:09:b0:9b:21:
eb:67:a7:0f:b0:fd:c0:c9:6d:be:55:7c:c6:94:f5:35:e1:71:
cd:54:e3:3d:11:f7:36:0a:55:08:9c:2f:62:e7:dd:98:c8:c7:
07:c1:65:4c:0b:88:11:f6:09:39:63:a1:d7:9a:84:5f:e0:15:
f0:a2:65:2a:00:d7:bf:93:76:9f:fb:1a:84:80:7a:a1:1b:28:
ea:a4:c6:0e:29:bb:d0:2c:43:73:cd:2d:94:8f:de:b4:5a:16:
b9:c0:c0:61:8e:f7:94:ab:e6:ad:9d:6f:c6:b6:cf:50:14:c8:
c9:7c:0a:92:91:0f:95:5a:d3:42:55:38:a4:9f:e9:0f:15:1d:
44:5e:ea:c9:81:8d:e7:45:2e:d4:6f:0a:00:62:6a:3e:2d:63:
3e:88:d6:a8:ef:46:3b:ce:28:8d:a9:77:9c:16:cc:de:14:ec:
e0:f4:c9:fc:8a:06:5a:af:67:3d:e4:7b:24:ce:ac:6f:79:3f:
fc:f0:2d:0e:a6:ea:f4:92:10:52:58:08:6f:cd:d7:73:76:8f:
c5:0f:c6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:17 2024 by rpki-client on console-fra.rpki-client.org