Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/wd8Tf_GhGJ3fx61xDKZgVzeitJk.roa
File: wd8Tf_GhGJ3fx61xDKZgVzeitJk.roa (raw, json)
Hash identifier: 8XudeajYjDH1nIAP2r8gnBQUy+MJYYIoYKOj9dgkDOg=
Subject key identifier: C1:DF:13:7F:F1:A1:18:9D:DF:C7:AD:71:0C:A6:60:57:37:A2:B4:99
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 018CC7952798F0475155D7B92AFD31579FD9
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/wd8Tf_GhGJ3fx61xDKZgVzeitJk.roa
Signing time: Tue 02 Jan 2024 00:31:30 +0000
ROA not before: Tue 02 Jan 2024 00:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12637
IP address blocks: 185.77.84.0/22 maxlen: 24
185.205.40.0/22 maxlen: 24
149.3.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:27:98:f0:47:51:55:d7:b9:2a:fd:31:57:9f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Jan 2 00:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1df137ff1a1189ddfc7ad710ca6605737a2b499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1c:cd:2d:22:30:2c:4a:d6:7a:9d:64:ac:5b:
59:59:d2:1e:74:e8:1d:ee:38:0e:9e:38:8e:b0:44:
6c:b4:8c:2b:68:6a:d7:04:e6:e1:13:93:da:c8:f5:
1c:e2:81:06:a1:b4:74:35:fe:5c:63:86:2f:78:3b:
0c:43:0d:e8:d9:91:c2:f2:00:11:42:d4:5c:8b:00:
37:cd:67:5e:8e:14:76:3e:c4:36:83:73:91:8d:3b:
41:ec:db:dd:95:28:c5:a8:a3:6d:41:97:75:89:c5:
f7:ff:66:20:33:3d:f8:77:3f:4d:08:45:24:be:3b:
fc:4e:39:c8:48:d3:31:8c:a9:27:f3:e9:1b:95:b0:
3d:2b:25:c7:31:58:7d:cc:c7:eb:24:ba:5d:b2:23:
25:a8:ed:df:b7:08:02:f7:5a:28:51:29:36:27:c3:
3b:dc:70:c6:2b:f9:d0:f6:1a:3a:62:f7:90:20:52:
0f:94:50:3c:2d:0d:38:fa:9b:92:94:05:d4:8d:f0:
27:07:f4:6e:f1:c6:23:80:0f:7a:44:09:b0:b7:a3:
45:fa:6f:2a:5d:08:31:c2:ab:8c:37:3f:31:ef:64:
d7:f7:d9:0c:f3:4e:b0:6c:d6:cd:3b:69:d6:05:1c:
2f:1a:57:01:e7:eb:4c:12:6a:50:60:eb:14:7c:c7:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DF:13:7F:F1:A1:18:9D:DF:C7:AD:71:0C:A6:60:57:37:A2:B4:99
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/wd8Tf_GhGJ3fx61xDKZgVzeitJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.144.0/21
185.77.84.0/22
185.205.40.0/22
Signature Algorithm: sha256WithRSAEncryption
26:63:ab:17:8d:53:e6:92:9f:16:89:df:9c:fb:82:08:67:0d:
00:00:46:35:9e:2a:9a:9a:34:f9:a4:88:e5:4d:0d:15:0e:50:
c3:73:b7:e5:a9:1c:01:ae:78:67:58:bf:a9:be:31:b8:59:f2:
9e:dd:df:5c:1b:83:dd:59:65:61:c1:c6:5d:ae:a8:6a:70:f4:
9d:fe:23:2b:f6:9e:28:ec:1f:5d:9e:7e:e0:90:f3:67:f8:13:
a6:1f:4b:3e:1c:e7:a4:d9:01:9b:46:93:30:bf:b3:3e:75:c1:
87:2b:55:60:fe:0c:5a:38:ff:22:fd:1a:b4:1f:22:ad:93:fd:
9b:de:c7:af:1e:56:c0:b7:62:10:18:cc:1b:7c:4d:a9:ef:89:
ad:46:7e:03:b1:d2:22:7d:90:68:82:44:75:c5:e4:2a:0d:ab:
96:ac:d3:d7:78:8a:9f:5c:22:85:88:42:5b:18:2a:60:e5:3e:
2c:fc:f5:af:74:a4:a4:3b:be:3d:a1:16:98:67:4e:41:8c:89:
af:2f:aa:c2:d0:61:d5:e0:75:5c:36:44:e8:23:a5:97:6f:eb:
6f:3e:76:14:7c:9c:26:06:c3:95:1b:58:cd:60:ad:e3:86:1f:
7b:b2:f0:65:cd:0c:c0:57:2e:9f:db:52:a7:bd:ea:cb:65:c5:
cb:55:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:17:53 2024 by rpki-client on console-fra.rpki-client.org