Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/WE3-m3MGKk58rn7sCoq6-a2MeXc.roa
File: WE3-m3MGKk58rn7sCoq6-a2MeXc.roa (raw, json)
Hash identifier: dnutJsczj88ogpEqFnG77KnuaJLg7MJZxWRhq/regyc=
Subject key identifier: 58:4D:FE:9B:73:06:2A:4E:7C:AE:7E:EC:0A:8A:BA:F9:AD:8C:79:77
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 018CC493528BD2C44F519F3DCE52CE485294
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/WE3-m3MGKk58rn7sCoq6-a2MeXc.roa
Signing time: Mon 01 Jan 2024 10:30:38 +0000
ROA not before: Mon 01 Jan 2024 10:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49849
IP address blocks: 212.70.152.0/24 maxlen: 24
212.70.152.0/22 maxlen: 22
212.70.155.0/24 maxlen: 24
212.70.153.0/24 maxlen: 24
212.70.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:52:8b:d2:c4:4f:51:9f:3d:ce:52:ce:48:52:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=584dfe9b73062a4e7cae7eec0a8abaf9ad8c7977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:df:5e:75:1b:13:0c:af:65:39:fd:6e:39:3a:
d7:55:74:ce:d0:ff:a7:56:8c:94:ad:4a:32:de:46:
27:28:47:b3:dd:70:93:d6:19:96:8a:57:bb:ef:b4:
5b:a6:71:c8:bf:69:e8:fb:07:62:3f:ce:14:ed:04:
3a:bf:f1:a4:e5:f9:8d:e6:09:4b:3a:df:b9:a9:56:
2c:da:b7:74:7d:b4:6d:0e:46:95:c1:ab:1b:65:b4:
43:67:b7:d1:ac:78:c9:c7:9f:6f:43:a9:44:a2:63:
36:0d:36:b2:2b:35:f5:f5:39:44:0e:1b:ce:a8:dd:
d8:ec:a1:b8:a9:cc:74:9e:0d:9e:b1:95:dc:4b:ba:
7c:04:9c:ad:41:fc:e2:8b:f9:b9:dc:37:e8:37:45:
06:ae:81:71:d0:5b:69:dd:fc:7e:d5:d7:b9:6f:c5:
e9:94:44:c1:3d:0b:ad:dd:48:9d:39:5a:f8:22:39:
26:38:85:84:1d:88:a1:70:35:27:4a:12:9c:6a:bb:
9d:c9:01:8c:e5:58:81:af:28:6a:fd:a5:df:e5:fa:
96:77:13:05:94:51:48:d5:e8:5c:d0:ed:03:98:34:
c0:3e:87:92:8b:80:6d:49:3a:d2:15:27:b0:e8:be:
a6:0c:25:8c:81:3c:58:49:48:50:47:bb:c6:23:8a:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4D:FE:9B:73:06:2A:4E:7C:AE:7E:EC:0A:8A:BA:F9:AD:8C:79:77
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/WE3-m3MGKk58rn7sCoq6-a2MeXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:a9:d8:da:a6:02:b5:44:bc:4c:9f:5e:25:85:e3:a5:92:57:
e0:64:f6:0c:04:d2:4d:09:6f:01:be:65:de:0c:2a:4c:f6:60:
6c:95:cc:d3:d1:49:3d:cf:d4:be:d0:96:71:5c:82:02:8a:ec:
30:07:dc:b0:d5:e8:0d:95:10:1f:09:24:4c:ef:b7:01:42:c0:
7d:b7:27:7c:d1:b7:13:1b:62:5f:33:97:3d:98:09:fa:d9:c1:
95:c2:6b:ca:02:68:c6:81:c9:53:9a:a9:d9:08:74:0d:3e:54:
52:75:b1:51:bf:db:8c:00:f7:40:76:17:6f:4b:f3:e9:fc:ad:
61:07:a6:a5:87:ed:d1:d5:bf:98:6b:c4:cd:dd:00:86:2d:26:
21:1d:69:72:05:cb:0b:47:72:65:7f:a3:ac:5d:52:fd:18:08:
50:57:57:a7:3b:1d:4e:1c:a2:37:98:9e:be:bb:2d:d3:88:5f:
14:cf:83:cd:24:1f:05:bd:62:09:9c:79:31:5a:04:65:14:6f:
98:9d:07:aa:01:cd:3c:d9:47:8a:f9:c2:39:18:6d:35:8d:fe:
d8:10:5c:5c:f5:62:45:fe:eb:2d:89:7e:b0:f8:fe:18:87:fe:
ad:a7:d9:1e:76:71:cd:66:db:88:15:16:a2:81:8c:9b:ec:ce:
5e:96:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:10 2024 by rpki-client on console-fra.rpki-client.org