Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WmtnSoMfN9uBPbdkXW6WCBKUxgE.roa
File: WmtnSoMfN9uBPbdkXW6WCBKUxgE.roa (raw, json)
Hash identifier: XMTfIX6x0XEtlbdBcofZ4kFG89G4zWfpBbOllUKAlhM=
Subject key identifier: 5A:6B:67:4A:83:1F:37:DB:81:3D:B7:64:5D:6E:96:08:12:94:C6:01
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01925E1A3738F5B4AB2D95D838F33A1D0526
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WmtnSoMfN9uBPbdkXW6WCBKUxgE.roa
Signing time: Sat 05 Oct 2024 19:13:49 +0000
ROA not before: Sat 05 Oct 2024 19:13:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 85.208.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5e:1a:37:38:f5:b4:ab:2d:95:d8:38:f3:3a:1d:05:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 5 19:13:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a6b674a831f37db813db7645d6e96081294c601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:bb:84:aa:c7:32:c1:b4:90:d5:95:42:d1:
5b:20:f0:44:ed:73:d2:08:83:00:7c:e2:af:42:da:
6a:85:b5:a0:23:05:0a:c0:6e:34:28:bc:60:0c:0e:
ec:1b:b2:8e:b6:e7:3a:de:08:20:1f:7b:54:9f:66:
d7:0f:a7:7a:e5:4d:42:e3:62:c0:6d:5a:26:40:e4:
bb:5d:90:9d:77:16:be:28:30:5e:68:2b:d4:32:20:
11:8f:00:c9:cb:f4:b7:07:ed:d6:c1:46:2b:89:55:
7b:67:21:aa:87:62:0e:de:37:c7:1b:db:b1:97:70:
75:ea:cb:3e:fe:60:8f:11:2c:57:0d:c5:ca:2d:96:
14:98:70:07:e2:b0:3a:b3:cc:86:85:bd:ea:92:87:
59:f3:2f:5b:67:e2:c0:8c:cd:bc:67:84:ae:57:0d:
41:6e:a6:10:c6:2b:d7:84:60:bb:5b:26:79:6f:03:
0c:c5:c1:33:18:31:98:da:aa:b0:af:b7:10:17:a9:
b6:20:7f:b0:6f:fd:4f:d7:71:90:b2:d7:51:12:a2:
7e:6d:c7:49:23:59:bf:2a:58:eb:78:4b:a4:34:f6:
67:a0:5b:c9:b0:a3:de:42:d2:16:04:dd:3e:d7:1a:
63:ba:1f:13:a3:b3:3f:3f:e1:ca:bc:e5:c3:f1:50:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6B:67:4A:83:1F:37:DB:81:3D:B7:64:5D:6E:96:08:12:94:C6:01
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WmtnSoMfN9uBPbdkXW6WCBKUxgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d0:c1:36:84:09:c7:fe:e7:3b:a8:47:a8:b0:99:67:f0:d2:
6d:aa:b6:56:49:7d:19:b4:b1:0c:bc:b7:f5:f6:32:e0:01:30:
02:0f:ac:f5:8d:15:59:ad:dc:84:8a:1c:57:d1:f9:6c:79:c2:
34:54:e4:42:94:2e:a8:90:6a:dd:d5:38:0d:bf:08:6f:ab:73:
be:76:bf:ca:40:92:d7:7a:d4:48:a8:e7:bd:98:fc:ce:e7:fc:
2b:8d:9b:7a:13:1f:ac:1f:b0:0c:d0:96:83:ec:f5:08:85:5c:
97:f5:4c:a5:7b:24:8d:d3:24:f7:36:6f:b9:33:bf:35:07:af:
29:fd:9f:34:c8:27:e9:9f:70:7b:c8:05:a2:0b:bf:18:17:df:
4e:4c:66:87:a0:0f:3f:26:59:e8:86:7e:08:c9:7d:b6:97:a3:
25:b9:7b:b3:05:96:f0:9c:fd:a4:f6:d9:7a:00:39:ed:7d:59:
47:2a:0c:c2:65:f6:b0:2c:6e:d0:66:b6:ca:21:08:fc:77:60:
a6:0f:b9:7f:d2:43:55:fe:d7:84:55:6c:61:83:2e:ff:fc:ed:
11:34:40:ce:37:f1:62:ef:a0:50:2f:aa:ba:16:ab:22:b6:4b:
ad:35:27:ac:1d:cc:35:83:21:0a:b0:c2:7e:67:74:01:7a:9a:
a6:bb:78:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:26:27 2024 by rpki-client on console-ams.rpki-client.org