Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/Wz2y-O4BzW9kTTdxZpgus2cFU8A.roa
File: Wz2y-O4BzW9kTTdxZpgus2cFU8A.roa (raw, json)
Hash identifier: 7HGW3d65+j2qzszlKD5caBSMaYEtANH6rFAT2aLD1Eg=
Subject key identifier: 5B:3D:B2:F8:EE:01:CD:6F:64:4D:37:71:66:98:2E:B3:67:05:53:C0
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 018CC94CDF166BFB079EC2A17A8D3C13BBF9
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/Wz2y-O4BzW9kTTdxZpgus2cFU8A.roa
Signing time: Tue 02 Jan 2024 08:31:47 +0000
ROA not before: Tue 02 Jan 2024 08:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206986
IP address blocks: 185.169.232.0/22 maxlen: 22
2a0a:7107:1af4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:df:16:6b:fb:07:9e:c2:a1:7a:8d:3c:13:bb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 2 08:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b3db2f8ee01cd6f644d377166982eb3670553c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:30:47:1d:40:1e:2c:d9:54:03:c2:77:1d:
fb:74:ca:6e:7d:c4:fe:0d:58:96:25:65:a0:22:5e:
f7:cd:27:6b:c5:70:3e:a5:3e:dd:99:9a:d0:67:d4:
08:65:b8:b7:c5:86:02:e9:19:45:99:f8:a5:71:3a:
62:a5:bf:cc:5b:56:1e:1e:73:cf:55:68:ca:32:6c:
bb:d0:cd:db:e7:73:63:a3:f6:3a:2c:99:49:f8:33:
46:28:91:85:fd:a4:7f:2b:e9:96:0a:37:c7:85:02:
55:c6:09:8f:39:46:05:38:ae:76:9d:5c:b8:27:3d:
ca:77:e4:04:db:66:6e:c5:cd:15:6e:2d:2f:e4:82:
e9:97:25:c9:37:54:6d:48:e7:5f:8e:31:ec:02:95:
a9:52:b8:3b:44:62:60:6c:05:6b:3d:c8:6b:cb:b0:
4a:a9:8f:58:74:f7:53:6f:ed:ea:05:35:b5:48:53:
7d:b8:e1:ad:6e:30:65:ca:90:5c:46:50:c8:1a:43:
fe:7e:ee:00:4b:56:71:0e:8e:b0:48:68:fe:51:df:
08:5f:e6:e0:ff:27:5a:47:7e:50:c8:a2:24:a6:76:
66:c1:cc:0b:4c:f6:9f:6f:a0:cd:20:a8:0d:90:00:
18:2a:9f:a9:b0:78:23:05:d1:ba:17:43:32:38:4b:
3b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:B2:F8:EE:01:CD:6F:64:4D:37:71:66:98:2E:B3:67:05:53:C0
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/Wz2y-O4BzW9kTTdxZpgus2cFU8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.232.0/22
IPv6:
2a0a:7107:1af4::/48
Signature Algorithm: sha256WithRSAEncryption
aa:d9:bd:9d:93:28:db:c8:8f:40:c9:46:46:7d:58:27:a7:e9:
27:3d:9d:7a:24:b9:a3:45:da:dc:e7:52:5c:e1:c8:0a:24:10:
2d:d1:b1:b9:89:c2:2d:f9:ff:17:a4:50:0a:b3:75:e3:47:24:
f8:1e:d2:1b:d3:44:64:56:ac:ec:d5:7f:39:f4:a5:ef:b5:ca:
5b:14:a5:78:b9:16:81:87:97:d1:44:35:70:ab:07:3d:98:65:
d9:c9:76:5e:49:db:b8:21:47:af:d7:c8:11:e3:70:c3:4c:ca:
31:69:2f:e0:82:d3:37:03:1d:18:00:0e:e4:42:f1:08:82:56:
2d:90:fc:03:81:02:92:a8:b8:b0:c4:95:8e:e6:01:b0:3a:f3:
ea:36:78:4b:c8:87:e7:f3:0b:f9:98:8b:c0:05:dd:a3:c9:56:
58:f3:65:3a:e4:1a:8d:af:f7:59:40:79:4e:02:0f:5f:06:c5:
4f:85:f3:60:c3:7f:2f:52:ef:7a:0c:dc:7a:6b:0b:60:37:08:
1f:f1:2d:1f:bc:2c:e9:03:36:2c:ea:8b:05:f4:23:90:4a:ce:
b7:e6:15:0e:b8:0e:e9:f6:2d:7b:f6:32:db:7a:6b:ea:a2:6f:
e9:fa:e1:d5:09:43:f1:4e:74:ac:8e:d3:1d:b9:55:56:06:3c:
31:5a:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:55 2024 by rpki-client on console-ams.rpki-client.org