Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/wJZ78Uw2J_U1Wli4m2jTOJcHUWM.roa
File: wJZ78Uw2J_U1Wli4m2jTOJcHUWM.roa (raw, json)
Hash identifier: 82hui/RpjWRuuPlVuEkTZ0tWkh28v5Qzbx2WuF72E/I=
Subject key identifier: C0:96:7B:F1:4C:36:27:F5:35:5A:58:B8:9B:68:D3:38:97:07:51:63
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 0192E2F96C4F0AD648456F75B47DE1764841
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/wJZ78Uw2J_U1Wli4m2jTOJcHUWM.roa
Signing time: Thu 31 Oct 2024 14:27:29 +0000
ROA not before: Thu 31 Oct 2024 14:27:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215272
IP address blocks: 45.129.186.0/24 maxlen: 24
185.244.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:f9:6c:4f:0a:d6:48:45:6f:75:b4:7d:e1:76:48:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Oct 31 14:27:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0967bf14c3627f5355a58b89b68d33897075163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:66:f1:3c:80:3f:08:75:8d:14:de:4b:40:
7b:8e:0c:d0:63:2a:d8:11:1a:67:da:bf:b6:2f:05:
2c:c8:39:f5:ad:1d:26:4b:cf:a9:65:58:4a:c3:e0:
0e:6e:de:6d:6a:ee:f2:0c:86:c6:01:39:47:a0:ff:
1a:fb:b3:e9:27:8a:50:56:fb:a6:d3:6b:72:30:e7:
a5:2d:37:1a:e7:6f:94:35:24:42:82:41:f5:58:54:
da:f2:4f:09:dc:82:2c:ea:bb:72:9f:48:7a:80:ad:
f4:40:17:bd:df:8e:03:c7:e5:26:72:5a:44:1f:d4:
2a:75:4d:0b:bb:9a:93:dc:20:3d:c9:af:57:03:3c:
8b:b0:71:5c:cc:14:d8:70:cf:a9:82:e4:41:4a:8c:
d2:b8:ef:e3:84:87:48:6a:4f:6e:62:a5:0b:8f:50:
59:a5:26:d9:d7:54:5e:ac:c1:5f:b7:57:1b:30:65:
1e:ca:15:3f:21:37:10:81:97:97:48:0b:fc:83:55:
9a:29:41:b6:c4:75:44:5c:c9:01:a0:33:06:3d:53:
ce:0a:ae:c0:26:ec:73:8d:d5:85:bd:eb:bc:27:d0:
75:76:7f:16:e1:6e:8d:12:0e:4c:85:a4:f9:a7:83:
a2:43:ec:27:ef:07:82:08:28:0d:de:ed:15:2a:a6:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:96:7B:F1:4C:36:27:F5:35:5A:58:B8:9B:68:D3:38:97:07:51:63
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/wJZ78Uw2J_U1Wli4m2jTOJcHUWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.186.0/24
185.244.50.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5d:2b:22:3b:aa:a1:6d:e6:ae:12:82:aa:77:fa:07:7f:cf:
3f:2f:49:4e:f9:1c:7f:39:ff:e7:ae:18:a5:0a:ab:ec:f6:82:
3f:44:7a:d0:19:cf:f1:59:47:ba:33:ee:f1:af:ec:ac:f9:1f:
a1:e9:1f:9f:01:cb:f7:ac:78:d4:fc:41:68:61:3f:5a:9d:27:
4f:b5:30:97:d4:4f:3a:44:9d:04:65:77:b6:e9:a1:25:9f:58:
04:a8:72:67:19:a3:c9:ca:9d:6b:57:00:88:f7:70:cf:73:27:
3c:dc:1e:b0:f6:54:c3:3a:c6:f7:5a:d0:2d:eb:ea:74:e2:ad:
01:a3:a6:fe:74:8a:73:0e:f7:5d:d7:8d:08:84:69:96:ee:b8:
2b:8b:b5:d6:97:2e:a5:57:a8:c0:29:51:94:4a:3b:6b:51:dd:
38:55:3a:99:ae:9e:dd:3e:ac:44:1c:d8:2d:4c:54:4f:56:ac:
b8:01:f7:89:4c:85:9e:aa:71:b2:84:98:ee:a6:69:0c:94:9e:
f8:29:31:db:d8:26:71:11:26:05:95:15:6a:3b:3f:75:ac:77:
01:a0:21:80:f5:1e:7c:73:6b:1a:9f:cd:c0:e2:3f:bf:0b:1b:
16:86:b3:2b:05:32:8f:73:ff:1c:cf:d7:8d:85:73:c1:46:bc:
7f:92:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:21:24 2024 by rpki-client on console-fra.rpki-client.org