Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/WoGSb6XfIv1-1k6gmCDrwXStnkw.roa
File: WoGSb6XfIv1-1k6gmCDrwXStnkw.roa (raw, json)
Hash identifier: IyVqtJ5KVyyU/3xN0m1UxylmSSHrcnG156TL7CnoNUM=
Subject key identifier: 5A:81:92:6F:A5:DF:22:FD:7E:D6:4E:A0:98:20:EB:C1:74:AD:9E:4C
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 018CC8012FD2434AAD7173DA465151081A5F
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/WoGSb6XfIv1-1k6gmCDrwXStnkw.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204348
IP address blocks: 185.252.112.0/24 maxlen: 24
185.252.115.0/24 maxlen: 24
185.252.113.0/24 maxlen: 24
185.249.255.0/24 maxlen: 24
2a0e:e7c3::/32 maxlen: 32
2a04:b804::/32 maxlen: 32
2a04:b800::/32 maxlen: 32
2a0e:e7c7::/32 maxlen: 32
2a04:b803::/32 maxlen: 32
2a0e:e7c0::/32 maxlen: 32
2a04:b805::/32 maxlen: 32
2a10:a6c0::/29 maxlen: 29
2a0e:e7c6::/32 maxlen: 32
2a04:b802::/32 maxlen: 32
2a0e:e7c1::/32 maxlen: 32
2a0e:e7c5::/32 maxlen: 32
2a04:b806::/32 maxlen: 32
2a0e:e7c4::/32 maxlen: 32
2a0e:e7c2::/32 maxlen: 32
2a04:b807::/32 maxlen: 32
2a04:b801::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2f:d2:43:4a:ad:71:73:da:46:51:51:08:1a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a81926fa5df22fd7ed64ea09820ebc174ad9e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:28:5f:d9:44:05:31:29:fb:c2:c9:52:68:
0d:b8:cb:45:f1:e2:7a:0e:d9:e0:5f:5e:79:5a:ac:
18:e1:78:2a:19:d0:c6:05:32:c8:87:94:99:a0:f5:
26:82:9e:fe:4d:77:6f:99:51:94:eb:24:43:eb:9e:
a3:9a:0e:3e:72:d9:18:9a:23:ce:10:c1:8a:97:74:
1a:21:26:a7:16:6d:0c:cf:be:b6:d0:d3:56:11:bd:
9b:f1:64:7e:92:b7:c7:56:14:71:6f:8c:6c:d5:8d:
25:bf:1d:2b:3a:df:f3:35:a8:26:53:5c:95:e5:94:
a8:cf:b3:bb:36:42:be:2b:3d:bd:51:6d:a9:20:17:
ee:df:29:46:0b:6e:75:44:cd:13:82:04:50:29:7a:
27:0f:23:0f:9e:d5:1e:05:b6:fa:47:3f:70:7d:6c:
f9:17:d5:56:82:39:ee:fe:dd:6c:ec:4e:f4:d6:e0:
be:f9:59:b0:d1:29:f1:fd:06:1d:a4:27:28:90:1b:
bc:02:ca:e4:2a:0c:dc:4d:a7:f9:e9:f3:dd:f9:56:
5a:da:06:77:c8:57:2f:cf:da:8a:4f:54:1c:64:93:
54:de:2d:9c:7b:29:d3:7e:9b:ea:ea:f5:61:4d:7f:
55:fd:38:4d:71:f8:16:1b:ff:a7:a1:91:30:2b:35:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:92:6F:A5:DF:22:FD:7E:D6:4E:A0:98:20:EB:C1:74:AD:9E:4C
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/WoGSb6XfIv1-1k6gmCDrwXStnkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.255.0/24
185.252.112.0/23
185.252.115.0/24
IPv6:
2a04:b800::/29
2a0e:e7c0::/29
2a10:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
54:eb:47:39:71:1a:90:1d:75:73:5d:1a:76:00:f2:db:66:55:
fd:ce:9e:90:b6:0e:2a:75:a5:d0:1c:c4:fa:99:2d:63:1a:6e:
65:aa:eb:62:20:12:3c:78:48:44:be:f4:89:3b:1b:18:eb:7f:
69:c6:09:9d:5a:7d:b4:b8:61:52:2f:cf:f9:57:d2:7e:fe:05:
eb:85:83:57:22:db:72:c9:2e:03:f0:05:6b:b1:91:61:6e:2c:
31:65:70:82:ac:80:1a:18:11:f3:d7:2f:f4:86:7a:5e:4a:ac:
6d:98:97:af:5c:4e:83:9d:0e:ab:01:c9:49:68:c1:14:89:eb:
7f:ef:12:8e:c3:1a:2c:15:cf:4e:1c:2d:da:3f:d8:e4:17:1f:
cc:fa:6a:77:a3:d7:ab:f1:44:4e:35:52:58:55:a2:4a:5f:b0:
dd:5a:88:3a:0b:d1:ee:5e:e4:14:c4:9e:24:98:f7:c5:ee:f3:
7e:bb:4d:2a:bb:9d:e2:ca:d0:af:a1:08:fe:88:c6:e8:cd:22:
db:c3:b7:3e:ac:e8:6b:fb:1a:9e:93:8d:60:51:6a:ec:06:2e:
0e:d3:4d:79:4b:3c:b3:93:74:7b:4b:67:5e:13:13:fd:5c:c8:
d6:c2:a8:cf:8a:90:02:46:26:dd:0a:bd:ea:50:df:52:2d:64:
89:73:93:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:39:10 2024 by rpki-client on console-fra.rpki-client.org