Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/wp5yZFoEMS2LH7lNimnTyji1WiQ.roa
File: wp5yZFoEMS2LH7lNimnTyji1WiQ.roa (raw, json)
Hash identifier: PysPhXOgy9wBf80Fio4f//IqEDvEXuOE3I/yLDwp+1A=
Subject key identifier: C2:9E:72:64:5A:04:31:2D:8B:1F:B9:4D:8A:69:D3:CA:38:B5:5A:24
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802C57965A0BE17E494F99C30F273E9
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/wp5yZFoEMS2LH7lNimnTyji1WiQ.roa
Signing time: Tue 02 Jan 2024 02:31:13 +0000
ROA not before: Tue 02 Jan 2024 02:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34847
IP address blocks: 89.33.119.0/24 maxlen: 24
86.107.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:c5:79:65:a0:be:17:e4:94:f9:9c:30:f2:73:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c29e72645a04312d8b1fb94d8a69d3ca38b55a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1d:35:8a:35:0a:63:63:4a:44:80:cd:bb:54:
02:53:79:5d:f6:44:02:d0:de:4c:66:f6:d6:09:17:
b9:85:e6:07:59:d1:b5:92:44:1d:0f:cc:cb:36:d8:
d5:94:71:9a:64:b7:34:b9:f8:bf:e9:ce:82:76:b1:
06:88:b7:20:31:f6:47:bf:35:9b:f0:68:7b:15:26:
7b:dc:5f:4e:b0:1d:ba:5f:02:3d:6d:66:75:f2:2a:
7d:15:65:8c:75:29:ed:76:88:80:93:3b:3e:e9:6c:
e8:0f:5e:e9:0e:5e:9a:ec:1e:0d:68:1e:25:29:24:
5c:fc:bb:d2:2d:b8:30:8e:83:3e:ae:52:1d:a5:ba:
e6:7c:cb:4a:e9:f3:f7:4e:7a:1d:21:e1:d7:d1:dc:
4d:9f:12:09:8e:2b:f7:ed:36:75:ee:60:92:e2:9b:
63:f6:b3:41:08:06:91:61:d7:49:c4:d0:f2:43:2a:
36:66:33:86:bb:76:a2:0e:5c:b2:29:86:1a:9e:2a:
3d:04:82:98:40:89:f1:d8:09:c2:d7:f7:26:a0:c4:
3c:b7:04:6a:2c:f9:fa:b3:f2:d2:da:17:7f:00:4e:
76:f6:86:45:5b:19:4c:73:e7:14:67:71:79:46:ce:
ee:83:b8:f4:f5:17:61:fc:8d:c2:7e:71:97:aa:8f:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:72:64:5A:04:31:2D:8B:1F:B9:4D:8A:69:D3:CA:38:B5:5A:24
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/wp5yZFoEMS2LH7lNimnTyji1WiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.76.0/24
89.33.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:22:6e:09:e9:2a:96:81:f9:82:db:8d:0c:46:81:d0:3d:12:
6d:93:3b:e7:be:75:4b:46:fa:b6:f4:63:c3:4b:1e:ba:55:c3:
73:ad:bf:22:67:99:b4:5d:46:50:56:5f:cc:da:d7:46:9f:2f:
44:cc:25:d6:90:4d:fb:13:2c:d7:05:ac:51:c1:ed:91:a9:d4:
27:eb:07:97:49:8c:a9:13:c3:de:24:cc:07:7b:9b:58:e2:7d:
68:20:bd:e6:7c:e8:cb:63:4f:cb:db:d3:bd:e9:16:6e:c0:5c:
29:6a:ea:e1:d3:1b:e7:f2:a8:c4:d6:ee:7b:60:10:fd:71:40:
47:23:7f:27:91:a0:4d:12:23:26:d1:79:19:38:0e:a9:a3:77:
94:43:95:bc:a2:47:8b:74:82:0e:30:b1:ad:75:c7:78:a1:2e:
42:78:bf:76:b7:dd:0e:f2:60:58:dc:81:33:25:c4:38:e7:c9:
2f:d7:9a:95:38:f8:e9:82:29:fd:9a:ae:54:f2:7a:e2:e4:71:
1c:52:e9:3f:af:9f:69:dc:29:39:29:3f:24:23:77:3b:5f:10:
01:78:74:31:1b:90:80:3f:b6:2a:b6:93:34:55:ad:34:7c:30:
7b:eb:32:f0:b5:9c:9b:6e:26:35:a7:2d:15:bd:45:73:d2:e3:
ee:e8:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:20 2024 by rpki-client on console-fra.rpki-client.org