Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/WMIivNMDYm_GHcj3Y6Bl-1A3TT4.roa
File: WMIivNMDYm_GHcj3Y6Bl-1A3TT4.roa (raw, json)
Hash identifier: 6DPLbh8Rds7/7D/GQsw45T/Dqv3U52k1rGDjHP88Hz8=
Subject key identifier: 58:C2:22:BC:D3:03:62:6F:C6:1D:C8:F7:63:A0:65:FB:50:37:4D:3E
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC49251629F87AA252477FF69F8EE5C41
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/WMIivNMDYm_GHcj3Y6Bl-1A3TT4.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197897
IP address blocks: 95.158.148.0/24 maxlen: 24
95.158.151.0/24 maxlen: 24
151.252.192.0/22 maxlen: 24
151.252.196.0/23 maxlen: 24
31.211.128.0/19 maxlen: 24
151.252.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:51:62:9f:87:aa:25:24:77:ff:69:f8:ee:5c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58c222bcd303626fc61dc8f763a065fb50374d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:2b:1e:fb:9e:2f:79:c7:71:f2:23:26:c4:
b3:45:70:9c:7d:18:3c:57:1e:b4:83:f7:88:6b:e0:
04:94:c4:c9:9f:83:f4:30:70:b6:77:98:c1:43:c5:
e7:f9:70:d5:36:3f:78:84:7e:40:c8:13:38:87:99:
3e:da:a0:81:14:47:4c:8f:62:e6:13:67:16:1b:01:
73:02:7b:2e:03:6e:c7:a9:a7:a0:b6:57:3b:fa:96:
3a:e6:d5:d0:06:07:2f:33:3c:28:ad:4e:a0:c5:76:
70:57:86:01:49:f1:0b:89:1f:06:7d:57:ac:27:f3:
f7:bf:6a:1d:34:4c:91:a1:e1:9b:63:ae:e6:9a:75:
e5:5a:17:34:07:09:49:71:cc:1f:a2:c9:bd:40:d8:
14:df:92:30:95:93:e7:25:67:a3:2e:40:fe:3f:e7:
55:1a:41:c4:70:1a:b9:6f:39:99:3c:6c:9e:ca:cf:
af:89:54:f2:f3:1a:07:33:96:0a:33:b3:9f:ba:9d:
d2:41:d0:a3:fd:82:12:44:24:7c:00:0b:29:ce:35:
5f:e4:68:db:71:da:ee:e2:61:00:03:73:cc:51:38:
2c:46:36:25:d9:74:2e:8c:d0:a4:cc:ea:53:b5:8a:
95:99:fd:89:e1:1f:d1:66:ee:f1:06:e2:d5:46:85:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C2:22:BC:D3:03:62:6F:C6:1D:C8:F7:63:A0:65:FB:50:37:4D:3E
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/WMIivNMDYm_GHcj3Y6Bl-1A3TT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.211.128.0/19
95.158.148.0/24
95.158.151.0/24
151.252.192.0-151.252.197.255
151.252.200.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:d1:b0:8d:4f:9b:75:b3:0d:b9:72:b2:a4:f1:21:82:7b:f0:
c8:7a:e0:d4:cc:fb:66:95:43:a8:d9:ce:84:1e:79:75:e5:7c:
c3:08:5a:cd:1d:28:8b:b7:ea:d2:2f:cd:98:57:71:04:19:1f:
4c:10:80:da:6f:9e:e0:9b:e2:b7:eb:74:92:6c:5d:45:3a:7b:
fd:78:e8:90:34:fc:70:95:0e:bd:cb:74:8b:5c:8c:0c:6c:ad:
68:d6:49:7d:41:b7:d3:f2:82:e5:5f:ba:d4:4a:8c:38:61:7e:
91:cc:b2:73:d1:e2:17:82:24:8d:e3:68:57:75:e3:7d:a9:2d:
20:c6:00:5a:68:37:59:01:36:92:b4:85:fb:74:b8:45:f9:be:
c7:cf:82:2f:cc:5c:d1:a7:d7:58:0a:b7:48:a0:df:be:12:9e:
9b:c1:5d:1e:82:bc:cd:af:ed:e7:ef:52:d3:14:98:38:d9:9b:
45:d6:3b:f7:8e:18:d8:26:9f:0d:a8:e7:b5:70:fc:b9:2d:16:
08:e2:a8:44:56:d0:e6:31:98:5f:7c:08:76:9a:cd:b3:ee:75:
57:bf:1f:df:6e:3b:41:bf:13:b5:85:5d:01:a9:b9:b6:03:f3:
42:72:8c:9e:3b:cc:4d:ea:7b:b5:78:3c:74:ff:7c:88:f0:4f:
53:7f:14:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:26:21 2024 by rpki-client on console-ams.rpki-client.org