Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WY6JMrm8gUOEnR0Xipd2kfoDDhM.roa
File: WY6JMrm8gUOEnR0Xipd2kfoDDhM.roa (raw, json)
Hash identifier: NW3vZzBg3gtLk1+gawT+ScGNm0RVSN7D2tI/jotVmFQ=
Subject key identifier: 59:8E:89:32:B9:BC:81:43:84:9D:1D:17:8A:97:76:91:FA:03:0E:13
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC501158A364E79E6095612B034B3931B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WY6JMrm8gUOEnR0Xipd2kfoDDhM.roa
Signing time: Mon 01 Jan 2024 12:30:31 +0000
ROA not before: Mon 01 Jan 2024 12:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 62.106.89.0/24 maxlen: 24
45.130.201.0/24 maxlen: 24
185.244.138.0/24 maxlen: 24
212.119.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:15:8a:36:4e:79:e6:09:56:12:b0:34:b3:93:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=598e8932b9bc8143849d1d178a977691fa030e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:ad:a1:d2:13:71:7d:cd:1d:4b:e2:e0:87:
a2:13:cb:1d:7d:d3:0f:6e:56:6b:0c:a8:89:03:b7:
f2:7f:cd:dd:63:5d:64:23:80:66:d2:97:2b:90:37:
0d:c0:c5:5c:a4:82:dd:2f:bb:92:29:7e:fd:d3:fd:
36:c1:98:ad:88:ce:27:df:41:ae:23:95:9f:e7:4f:
cb:38:e9:55:21:31:3a:29:05:0f:16:1a:3a:31:5d:
69:45:0f:c0:e9:0f:72:5b:ca:05:30:f2:1b:84:69:
fe:ca:f3:91:80:50:1e:cd:81:45:e1:a2:29:47:cb:
c8:f8:55:4a:81:e1:e4:de:1d:90:2e:09:ed:58:66:
04:b9:04:40:17:9c:89:4f:30:af:1c:66:b1:95:76:
3d:77:c3:61:e5:c3:ce:15:f9:68:ad:93:1b:cf:c8:
c9:d4:a6:8e:eb:b4:99:97:cc:cb:35:9d:2f:33:07:
ea:6c:59:4f:40:63:cd:90:1d:1a:66:f2:51:81:6e:
a2:76:3d:d7:8c:e2:eb:ff:63:64:05:c0:3b:7b:f3:
9c:73:60:52:92:af:66:c8:a3:f8:c5:eb:13:d1:c2:
55:86:c0:67:0b:cd:59:d5:ef:94:78:9b:a3:34:9d:
14:03:8f:a4:17:ea:64:c9:c4:58:09:93:c8:14:85:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8E:89:32:B9:BC:81:43:84:9D:1D:17:8A:97:76:91:FA:03:0E:13
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WY6JMrm8gUOEnR0Xipd2kfoDDhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.201.0/24
62.106.89.0/24
185.244.138.0/24
212.119.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:63:a5:96:bb:28:38:e5:a5:c5:06:c8:a9:f0:49:c7:fb:e9:
43:46:08:75:dd:25:16:c4:6a:fd:6e:52:eb:a4:f7:10:a2:29:
56:04:c6:15:66:6e:8c:95:73:e7:b8:9e:6d:5c:75:29:07:9d:
19:f9:e3:97:79:42:b4:15:7f:1b:28:9c:cf:74:48:64:d2:c9:
40:fa:c8:d3:47:da:80:94:b7:8f:06:cb:18:40:76:71:09:c8:
49:23:97:95:fa:39:8f:6a:d2:26:38:7d:99:a5:63:a4:b3:c0:
c4:be:cc:66:f9:ea:9a:1e:41:73:96:a8:e3:fe:9a:4c:64:1d:
29:cb:f6:56:9b:f8:64:c7:e3:c3:8d:39:33:61:9d:68:18:1c:
e7:85:7e:e6:8c:10:8a:1e:29:39:6e:81:f5:ac:35:1a:78:46:
a6:8a:0d:b9:b5:63:e0:cc:22:3f:44:db:82:ea:83:a3:39:7f:
03:e5:24:fb:3e:52:85:6b:00:a0:21:c8:e7:76:e3:e8:e6:a9:
f6:db:4e:43:db:99:05:58:e4:e6:3d:50:4b:f5:08:2d:30:ce:
87:fa:46:7c:6c:88:c0:8c:7f:1e:75:21:d8:cd:f0:6f:1e:e8:
13:f4:c4:17:c0:e5:96:0d:cd:3b:2c:58:fc:e5:22:b6:6b:80:
49:15:d7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:04:47 2024 by rpki-client on console-ams.rpki-client.org