Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/WGokscrqIFlveSQ3XENDC_qxhbE.roa
File: WGokscrqIFlveSQ3XENDC_qxhbE.roa (raw, json)
Hash identifier: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=
Subject key identifier: 58:6A:24:B1:CA:EA:20:59:6F:79:24:37:5C:43:43:0B:FA:B1:85:B1
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 019421B220E73067A8C90B138C5EEA03BEFC
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/WGokscrqIFlveSQ3XENDC_qxhbE.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12637
IP address blocks: 185.146.252.0/22 maxlen: 24
212.44.96.0/19 maxlen: 24
2a02:e9::/32 maxlen: 32
2a02:ea::/32 maxlen: 48
2a02:eb::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:20:e7:30:67:a8:c9:0b:13:8c:5e:ea:03:be:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=586a24b1caea20596f7924375c43430bfab185b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:43:1b:7d:41:c9:0d:b4:75:b0:d3:72:4f:
b7:4a:17:f7:da:f3:1e:99:3e:a3:5f:71:3c:43:4c:
0c:30:3f:1a:52:ff:7d:52:72:0f:8d:10:8b:d7:93:
9c:09:e9:c1:05:a6:6b:26:38:1d:2c:7c:38:1e:a6:
b5:8a:44:ea:e1:cf:26:4b:3c:bf:2e:f8:79:06:cf:
e6:9f:10:90:7f:56:8c:a8:2e:63:ca:87:45:2d:c2:
7c:0b:63:fe:87:5a:4d:ca:a6:19:e2:1f:0a:d8:1c:
8a:a6:28:72:99:cd:22:d5:6e:db:a7:42:d3:31:68:
54:c5:9a:0c:e2:38:37:0f:2e:32:56:1d:81:25:c6:
cd:5e:0e:af:a9:3d:4d:9c:7e:43:29:af:e8:d8:8e:
8d:95:6e:aa:2b:6b:d9:20:31:66:89:ad:6c:1f:17:
c5:7c:d7:d9:8c:cc:23:3e:54:e5:ba:4f:3b:aa:cf:
e6:60:7c:14:d7:b0:4c:e2:44:20:fd:da:93:df:59:
cd:45:af:bc:94:23:8c:81:07:05:03:d6:84:58:16:
38:2d:39:95:19:c1:75:6d:38:fd:5a:fa:a6:a3:38:
86:2f:9e:24:68:85:8d:4b:9b:ad:26:c1:64:a2:91:
7b:6a:6e:53:8a:34:1b:ab:52:57:a5:84:c4:fb:a8:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6A:24:B1:CA:EA:20:59:6F:79:24:37:5C:43:43:0B:FA:B1:85:B1
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/WGokscrqIFlveSQ3XENDC_qxhbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.252.0/22
212.44.96.0/19
IPv6:
2a02:e9::-2a02:eb:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:45:27:af:51:e1:49:be:98:d5:22:b4:78:e6:5e:dd:5c:1f:
83:ab:3a:52:d5:c9:2b:78:8c:38:bf:89:6b:09:28:a1:87:fa:
db:ac:e7:14:3c:31:7c:25:a6:22:4e:17:ce:cc:ec:9a:e1:92:
08:5d:57:fd:7e:87:68:5f:62:0e:19:48:66:04:08:e1:3d:31:
48:0d:3d:84:71:2d:d3:8c:cb:38:7d:2c:fc:6a:08:f6:6f:c2:
97:dc:62:a9:70:5b:58:e1:33:e7:d0:28:9a:51:c1:1d:ba:a9:
2b:d4:98:c7:51:e3:b5:86:b3:4c:05:75:ba:d3:df:2b:74:c8:
49:14:83:84:ff:23:17:94:17:90:86:0b:87:90:24:3f:b1:3e:
89:5c:65:aa:8c:34:b6:eb:fe:e2:07:bd:17:a8:26:0b:ac:41:
0f:ba:ea:24:d1:0f:cd:cb:dc:0f:65:bf:ad:4d:d5:04:59:43:
9e:f3:e1:13:36:76:ac:82:85:f0:40:bb:6f:03:3e:e4:12:2e:
a1:e4:c9:8a:8e:fc:29:7f:d8:b4:e3:0d:5e:3c:be:24:4d:1c:
3b:64:ac:5c:3b:ad:83:e1:9e:34:cd:b6:b5:42:10:b4:45:93:
3a:57:a8:cd:e5:b8:6a:ed:a9:d7:16:60:4a:b1:41:0f:18:77:
96:e2:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:28 2025 by rpki-client