Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/W5qidBDhdu0ig_SVzUJ6Awj9kPQ.roa
File: W5qidBDhdu0ig_SVzUJ6Awj9kPQ.roa (raw, json)
Hash identifier: KLf1pasYYjOuACAwPDX/cSdIpz8S1aJHPd/dMAeGYUA=
Subject key identifier: 5B:9A:A2:74:10:E1:76:ED:22:83:F4:95:CD:42:7A:03:08:FD:90:F4
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 018CC64B1829342C4539828E5BCB6AD4A6E7
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/W5qidBDhdu0ig_SVzUJ6Awj9kPQ.roa
Signing time: Mon 01 Jan 2024 18:30:59 +0000
ROA not before: Mon 01 Jan 2024 18:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29326
IP address blocks: 176.67.88.0/21 maxlen: 21
185.103.64.0/22 maxlen: 22
2a00:89c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:18:29:34:2c:45:39:82:8e:5b:cb:6a:d4:a6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Jan 1 18:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b9aa27410e176ed2283f495cd427a0308fd90f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:6e:76:2e:6c:53:d5:f7:b3:82:84:f9:9a:
6e:f1:3e:df:dd:dc:ed:d2:8c:0e:f3:2b:87:32:cd:
d5:f1:46:56:04:5d:b2:33:1f:9d:69:9b:a6:e3:5e:
4e:9b:70:d6:3e:d2:52:f9:00:ae:ee:a1:48:b2:b2:
cd:27:86:66:26:55:53:15:ed:57:e1:10:8c:da:88:
8d:67:8b:ec:57:f4:70:46:05:0c:77:9d:fa:27:4a:
44:0a:be:f4:0b:fe:70:53:05:f1:67:a8:a1:99:24:
03:e9:4f:ee:39:d5:81:20:ba:33:bb:8e:62:45:a9:
4a:8f:0f:ee:00:72:15:c0:3a:6a:c7:6d:f6:8d:7d:
d0:66:77:2b:52:57:3c:dc:15:65:d3:f1:70:9b:6b:
b1:43:f3:25:eb:61:de:c5:d2:a0:6d:24:b8:98:ae:
c7:47:22:3e:69:4c:dc:a4:0c:42:89:b4:53:24:7d:
0f:f9:c6:3d:a7:42:c4:33:7b:ea:3f:81:21:f8:00:
df:77:f5:86:d7:08:6e:b1:e2:37:14:f7:bb:94:8a:
b4:42:ec:80:2e:62:0e:0a:7f:b7:ec:8b:90:36:0f:
b9:8c:bb:dd:dc:f8:58:bf:7d:c7:26:3c:9e:5d:97:
23:f2:64:f1:ea:60:15:c5:af:69:2a:66:e0:43:5f:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:A2:74:10:E1:76:ED:22:83:F4:95:CD:42:7A:03:08:FD:90:F4
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/W5qidBDhdu0ig_SVzUJ6Awj9kPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.88.0/21
185.103.64.0/22
IPv6:
2a00:89c0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:cc:03:2c:ed:55:25:09:7c:3c:51:63:b2:d0:5b:25:eb:0b:
07:e3:94:8e:5d:be:0c:59:e1:8c:2d:db:09:b3:fe:d7:75:c8:
11:dc:51:6d:01:4d:19:f2:a8:e0:ca:23:7c:e4:65:ae:23:0e:
45:31:d4:6e:69:1d:92:8b:3a:c6:29:9b:09:5f:8f:bd:d6:e5:
98:57:78:26:15:32:a6:21:3e:84:c4:28:ea:09:ec:20:4b:ae:
89:e2:d7:f9:5c:ae:bb:02:10:72:20:53:1c:81:73:60:0f:2d:
81:af:1a:6d:e4:a7:17:12:f0:e5:32:c3:91:5a:68:0a:d7:8c:
6b:fb:72:dd:cf:44:8c:19:ec:0e:8a:ca:1f:c7:d4:bf:da:e0:
d9:5a:55:18:3b:3c:08:d8:e3:53:85:a4:2c:06:6a:c2:bd:bc:
60:fd:91:00:b5:29:34:26:b5:ae:7b:5e:25:d1:a5:84:75:8f:
be:37:7a:cb:52:34:7b:8f:04:d8:1d:d3:79:4a:33:5b:ea:01:
5a:6c:99:10:ce:e7:8d:f9:41:49:9f:42:75:19:76:37:9d:c7:
0f:47:94:6d:0e:dd:fd:ab:0c:a6:ce:44:26:4a:f3:13:62:40:
75:ad:72:ad:fa:11:fe:dd:02:e1:94:9b:e8:13:e8:54:e5:44:
90:d6:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:22 2024 by rpki-client on console-fra.rpki-client.org