Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/WWELrgNTr0WeVe7WGq3fYLlV_WE.roa
File: WWELrgNTr0WeVe7WGq3fYLlV_WE.roa (raw, json)
Hash identifier: vPJ27Et1+D9b3C3+OGzqDnHACZ+A/xVGEGUOJDAAYUk=
Subject key identifier: 59:61:0B:AE:03:53:AF:45:9E:55:EE:D6:1A:AD:DF:60:B9:55:FD:61
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 0191EB7610F76FB285490893EB8498316044
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/WWELrgNTr0WeVe7WGq3fYLlV_WE.roa
Signing time: Fri 13 Sep 2024 12:57:48 +0000
ROA not before: Fri 13 Sep 2024 12:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 138.43.11.0/24 maxlen: 24
217.147.180.0/23 maxlen: 24
217.147.180.0/24 maxlen: 24
217.147.181.0/24 maxlen: 24
2a0b:2900:1100::/40 maxlen: 48
2a0b:2900:1f00::/40 maxlen: 40
2a0b:2900:1f00::/48 maxlen: 48
2a0b:2900:ff00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:76:10:f7:6f:b2:85:49:08:93:eb:84:98:31:60:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Sep 13 12:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59610bae0353af459e55eed61aaddf60b955fd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2d:28:8b:31:32:b5:cc:b7:8d:a4:42:82:32:
50:ad:d7:d1:a1:7a:51:b6:d3:94:a5:8a:7f:93:e2:
64:5e:ca:55:32:e9:19:b7:1d:57:19:4f:a7:f3:5d:
e5:54:15:1d:0d:2d:6e:5a:ed:1a:b4:60:51:5b:da:
72:4c:d8:01:f6:60:4a:0b:33:92:25:01:30:ea:f2:
99:6f:7c:eb:96:83:65:bc:be:28:b3:fc:88:21:88:
6f:80:55:76:6d:83:33:11:9d:e3:88:39:d3:4f:d9:
b4:46:5c:e1:71:6d:1f:ae:22:a2:f0:ee:0c:81:40:
68:b3:1c:4c:52:9f:91:0b:d2:32:9b:58:ac:6e:d9:
54:7a:2f:d4:f5:db:62:b6:75:24:8c:dc:f7:e0:df:
27:8c:f5:25:8b:8d:21:49:e9:39:51:d5:81:ca:2b:
6a:63:34:f8:c0:12:58:16:8e:36:33:f5:31:53:42:
75:25:39:15:fb:48:01:39:b4:7b:6a:a9:ee:c2:15:
e7:d4:34:a2:cd:5a:76:fe:bc:35:8a:67:ec:f3:ef:
c4:3c:41:0f:31:8a:9c:74:06:aa:96:25:be:33:35:
b9:47:91:7c:b7:f9:a6:25:b0:16:ce:c0:dc:84:0b:
d1:c9:eb:d6:19:ee:5c:e5:a1:6f:60:12:6f:92:03:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:0B:AE:03:53:AF:45:9E:55:EE:D6:1A:AD:DF:60:B9:55:FD:61
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/WWELrgNTr0WeVe7WGq3fYLlV_WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.43.11.0/24
217.147.180.0/23
IPv6:
2a0b:2900:1100::/40
2a0b:2900:1f00::/40
2a0b:2900:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
88:59:ca:a2:a5:00:8d:6f:b7:50:90:48:c1:9d:81:cc:8f:db:
42:6e:a0:db:95:76:2b:f1:ad:fd:3e:56:c8:35:5d:a0:4b:56:
2a:74:ee:48:65:24:80:6c:dc:b9:08:dd:00:c7:d4:11:e6:7f:
ff:de:f9:ca:93:16:36:a6:89:9b:6d:3c:75:aa:a0:fd:43:6f:
06:a1:13:9d:46:90:fa:d8:8f:4b:47:e0:d2:10:21:74:79:5d:
e8:0b:8d:25:fc:93:3e:66:6e:70:35:a6:4a:d8:77:d2:d4:91:
a0:c6:a0:14:bf:5b:01:55:94:34:3f:d1:d7:6d:75:b9:6f:da:
6b:ce:cf:cd:1e:f5:d4:54:d2:c2:bf:97:7e:09:ab:a2:ec:f7:
20:af:32:d3:2a:e6:a3:9f:70:58:b6:36:89:9c:fc:b3:3b:8c:
6b:d9:a6:ba:1c:49:7e:8c:6c:a6:34:ba:08:c7:65:af:64:7c:
23:83:80:76:e9:52:8b:0d:5f:e0:44:7e:e1:c5:cd:c9:a4:eb:
e4:fa:42:99:78:87:5e:ee:58:63:81:13:41:40:34:75:e5:c5:
01:8d:3d:3c:e5:ec:8d:cd:93:f1:95:d3:49:b0:83:99:20:b8:
d5:93:d3:09:5d:f5:f8:77:ef:77:63:18:05:08:a5:eb:69:7b:
dc:de:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:11:34 2024 by rpki-client on console-ams.rpki-client.org