Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WaBRrGnic7S1e2DQpL9BVtUBnBI.roa
File: WaBRrGnic7S1e2DQpL9BVtUBnBI.roa (raw, json)
Hash identifier: B8dMmeF3yGtFLxpIEeyftmVk2aSEV7oify13A2c0+HQ=
Subject key identifier: 59:A0:51:AC:69:E2:73:B4:B5:7B:60:D0:A4:BF:41:56:D5:01:9C:12
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018CC64B8D84DFEBF035227AAE3166EE2046
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WaBRrGnic7S1e2DQpL9BVtUBnBI.roa
Signing time: Mon 01 Jan 2024 18:31:29 +0000
ROA not before: Mon 01 Jan 2024 18:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 185.220.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8d:84:df:eb:f0:35:22:7a:ae:31:66:ee:20:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59a051ac69e273b4b57b60d0a4bf4156d5019c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:ed:6d:c6:ba:30:e4:a7:21:03:71:03:72:
c3:ee:7b:6a:4a:9e:38:e2:d4:ee:9b:30:89:f1:c8:
9f:8c:6a:15:db:05:32:c1:e7:9d:ba:3c:58:75:a5:
14:67:b2:45:9b:d5:33:94:c7:4d:26:70:9f:98:b2:
78:76:7b:8d:f4:f2:0d:87:f2:d5:cc:ea:40:72:22:
4b:2e:fd:a2:3b:8a:80:3a:84:0f:a5:ea:43:ae:e0:
39:03:43:60:58:0c:d8:89:fd:79:0f:3f:d3:39:6b:
6b:7b:10:8e:dd:e4:20:e3:77:3c:9f:f0:be:78:1f:
c4:8c:51:9d:12:1d:50:d9:eb:58:f1:0f:37:6b:d0:
f8:61:0f:3d:3e:e6:ad:ab:af:f8:42:09:3f:0c:8f:
ef:96:32:be:68:0e:ce:d2:7a:8d:ad:28:46:cb:26:
f3:b4:14:ac:c1:40:c1:92:a2:4a:d6:e9:07:62:42:
77:28:95:71:83:73:05:51:a4:9a:ca:b0:e1:c9:70:
a6:c8:bd:28:43:6e:92:b4:e6:14:4a:12:d2:c7:55:
46:c6:3e:04:9f:15:74:cc:b6:4b:b6:23:85:28:5d:
3b:49:5a:55:86:df:28:92:bd:66:dc:97:10:98:d4:
d4:d9:ee:19:3b:6a:24:28:63:72:5b:70:cb:e5:2b:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A0:51:AC:69:E2:73:B4:B5:7B:60:D0:A4:BF:41:56:D5:01:9C:12
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WaBRrGnic7S1e2DQpL9BVtUBnBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.147.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:64:ef:71:78:5c:68:98:8d:b7:23:66:2b:01:ef:75:87:16:
f8:69:fc:72:f4:b4:5f:be:09:9b:1b:55:b5:2e:85:3e:88:2a:
d4:c3:b2:69:22:4d:9c:34:ba:f3:21:33:aa:9c:fc:93:1e:de:
4a:57:ce:57:a5:8d:02:17:c6:4d:1d:07:9e:2c:b7:7d:71:fa:
fd:4c:20:4b:ca:cc:68:54:6d:19:a1:1b:28:88:06:44:19:17:
0b:b9:96:6e:8e:5e:03:66:d9:1d:7e:ac:e7:a8:08:7a:78:d9:
d9:4c:91:fb:c4:f1:25:16:d3:e5:c9:b3:6b:52:50:64:c9:d0:
07:8b:be:f7:8f:9e:a9:ff:19:9d:66:34:38:9f:d3:90:0e:16:
4c:57:28:1a:da:a8:a9:2c:52:22:09:e0:a3:1a:fe:42:2e:ca:
fe:12:9f:e7:e2:8a:29:59:d5:b3:76:9c:05:cc:2a:7f:fa:a8:
63:95:ec:d3:b5:48:a2:ea:95:bd:f7:9b:47:44:4d:9c:45:50:
d9:c5:af:77:ce:16:a1:40:c6:0b:9c:2e:62:74:55:40:7b:8f:
0e:ee:9e:eb:25:44:fd:71:14:c1:c7:bf:ec:7d:86:b2:c1:30:
ff:11:a4:22:8d:cf:b9:be:23:31:22:35:2a:20:04:36:f4:2a:
64:9b:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:01:10 2024 by rpki-client on console-ams.rpki-client.org