Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/WTYFcWktO-C4i8wzr2zuAacNGK4.roa
File: WTYFcWktO-C4i8wzr2zuAacNGK4.roa (raw, json)
Hash identifier: 1nGH9tpggbzzvznMei2C10LQbjZppIvigp+tyQdYWus=
Subject key identifier: 59:36:05:71:69:2D:3B:E0:B8:8B:CC:33:AF:6C:EE:01:A7:0D:18:AE
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 01931A4EF17BB16EA84013B8E3B09F966597
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/WTYFcWktO-C4i8wzr2zuAacNGK4.roa
Signing time: Mon 11 Nov 2024 08:20:01 +0000
ROA not before: Mon 11 Nov 2024 08:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 185.84.116.0/24 maxlen: 24
185.132.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:4e:f1:7b:b1:6e:a8:40:13:b8:e3:b0:9f:96:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Nov 11 08:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59360571692d3be0b88bcc33af6cee01a70d18ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:0c:d7:c4:a0:29:fe:d2:39:f4:8b:73:c3:
f4:ae:e3:43:a5:7b:52:c8:d4:00:b9:7b:14:b9:de:
3d:73:bc:41:c3:e2:1a:ed:4d:aa:9d:17:0f:0f:ff:
a2:7c:25:4e:e6:cc:82:6d:c8:9c:c6:bf:9a:40:90:
4c:87:69:ff:c0:53:09:1a:9b:0c:b4:96:0c:89:5a:
f9:a5:92:94:54:f2:78:9d:5c:07:f5:ed:18:4a:54:
48:d1:48:07:7a:5f:d5:f2:1a:98:fc:90:71:a2:29:
88:2e:2c:f2:af:66:90:20:81:1f:7c:bb:f3:45:ed:
1f:9c:65:b4:6d:0e:2a:cb:95:17:04:07:7c:e7:8b:
09:26:45:43:bd:02:7d:9e:3d:0d:97:3e:45:82:d5:
72:98:f5:65:81:7f:d4:94:41:50:3f:ad:e3:a5:0f:
53:76:03:b9:f2:13:56:d9:5b:18:f1:8a:8f:44:c2:
57:e2:50:89:d2:af:94:f7:48:de:39:c1:84:d6:30:
f6:04:97:40:c4:c2:95:d1:55:e6:7e:bf:74:c1:94:
1a:12:0c:ac:fa:e0:10:0f:bc:8e:73:a2:8f:ff:c4:
b7:c4:7a:f8:7a:25:6d:01:f4:c7:7c:7a:a4:30:58:
b1:48:09:ed:85:f5:0b:d6:ca:79:1c:35:f6:68:cd:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:36:05:71:69:2D:3B:E0:B8:8B:CC:33:AF:6C:EE:01:A7:0D:18:AE
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/WTYFcWktO-C4i8wzr2zuAacNGK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.116.0/24
185.132.188.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9b:33:c2:b7:60:bf:0b:15:96:2a:4d:a3:52:0f:1a:a5:83:
d6:9d:ff:49:97:14:89:94:fb:7c:31:82:5b:f7:5a:c0:4c:70:
56:c3:e3:98:46:ea:4e:84:de:7c:1d:df:f1:7e:bb:56:0e:51:
4d:f3:81:37:5f:db:75:6e:ff:cc:3f:32:0b:9c:0d:23:ee:78:
c1:bc:e9:a7:45:d9:6b:62:7f:56:e2:9c:d2:d3:c1:c8:57:ae:
75:4e:b7:48:5b:e4:c3:f4:8b:59:cf:b5:5a:a5:a8:ee:6e:b6:
a8:a1:44:3b:01:0d:5d:60:5c:45:48:9b:ab:f0:cd:2d:88:6b:
8f:38:0c:82:ce:31:7b:df:fe:4b:6e:08:2f:09:5e:9c:4d:67:
0d:56:9b:9f:32:96:7a:de:41:6e:92:c5:10:87:d0:6e:68:ce:
07:9d:6e:97:30:e8:29:ac:74:95:12:82:3d:62:0e:e5:04:18:
83:0d:bc:2c:85:d1:e6:df:52:cb:56:13:7f:a9:69:0c:d7:0c:
e6:07:32:74:c5:9b:5d:a4:2b:d0:e3:40:eb:d0:c7:12:7f:bb:
b0:ec:d1:e3:38:0c:51:99:71:f0:d2:6f:64:bb:83:c2:f0:a3:
de:5a:29:bb:4c:25:6d:48:a5:52:5f:00:f1:71:b9:a9:bb:51:
f2:24:6b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:57:49 2024 by rpki-client on console-ams.rpki-client.org