Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/WG2p-8Su7zuWsNRi3yvalfUcu9A.roa
File: WG2p-8Su7zuWsNRi3yvalfUcu9A.roa (raw, json)
Hash identifier: WAsaLCEy4CeHyrLDL6XG5l1VMzl0BtTz7loXCptRSE0=
Subject key identifier: 58:6D:A9:FB:C4:AE:EF:3B:96:B0:D4:62:DF:2B:DA:95:F5:1C:BB:D0
Certificate issuer: /CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
Certificate serial: 0192E35AF288F0346938187A01702360EF38
Authority key identifier: 3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/WG2p-8Su7zuWsNRi3yvalfUcu9A.roa
Signing time: Thu 31 Oct 2024 16:14:01 +0000
ROA not before: Thu 31 Oct 2024 16:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215162
IP address blocks: 130.185.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:5a:f2:88:f0:34:69:38:18:7a:01:70:23:60:ef:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
Validity
Not Before: Oct 31 16:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=586da9fbc4aeef3b96b0d462df2bda95f51cbbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:e8:f5:63:1c:bc:4b:b6:ea:d6:aa:cf:95:
d2:59:05:cb:ec:eb:da:ab:eb:96:d1:b7:a1:70:c4:
13:fa:66:3e:26:53:71:e2:eb:c0:e0:94:d7:8d:b7:
49:0e:54:d4:3f:a1:90:52:8b:ec:6f:87:2e:79:ba:
a6:32:d6:ae:81:99:07:ae:1c:4a:b8:65:04:f2:fe:
28:d4:d2:33:7d:93:e1:26:32:f7:d4:c3:03:f9:9f:
9a:8f:5c:87:17:b9:a6:52:20:3d:2d:67:9f:00:9c:
2d:0e:f3:df:1d:31:9a:3d:fb:f6:36:58:1e:76:b5:
78:46:c5:01:0a:63:fb:6a:b8:36:b8:15:c7:a8:7f:
d5:46:3e:a5:8b:d1:2e:cc:47:93:7c:99:40:43:73:
26:f8:43:0c:26:d5:55:38:09:5e:c1:5e:ec:f0:c1:
b6:7d:45:62:75:93:ef:77:b7:a4:5a:58:60:53:00:
42:e9:00:99:2b:4f:42:1d:56:8a:3c:2b:ee:66:da:
68:ed:8a:5e:c7:16:87:8e:c8:39:3b:9c:a4:06:e0:
c0:c3:41:c9:1b:07:6d:43:b2:8a:ad:73:6a:3e:22:
ee:6a:6c:3d:3f:7f:24:09:c8:ce:8f:e1:9c:36:d4:
31:bc:a1:87:a8:6d:7c:b6:4d:e1:4b:86:98:fb:4c:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6D:A9:FB:C4:AE:EF:3B:96:B0:D4:62:DF:2B:DA:95:F5:1C:BB:D0
X509v3 Authority Key Identifier:
keyid:3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/WG2p-8Su7zuWsNRi3yvalfUcu9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.166.0/23
Signature Algorithm: sha256WithRSAEncryption
68:e0:ee:9d:3b:4b:71:b8:37:88:35:35:00:5b:ec:5a:fb:e7:
68:08:0f:1c:12:80:cf:41:47:8c:1c:39:90:58:7a:c3:b6:c5:
de:98:cf:17:34:fc:46:01:45:06:d1:38:d2:fd:65:2c:7a:ac:
0b:66:69:db:f7:d3:33:4e:a5:1b:25:84:6a:f6:59:8f:10:d2:
a3:c6:5f:91:3f:80:8e:28:26:4f:c5:1f:6c:f2:9b:aa:d9:50:
30:b8:9b:ab:21:4d:59:a2:d6:20:27:26:24:fa:57:81:44:8e:
d2:3d:e4:48:8a:fa:5c:40:c4:39:04:de:68:08:99:31:39:fc:
d6:01:70:cc:ab:ff:f4:c5:be:8b:0e:6c:4c:5b:ea:4c:82:b5:
c0:e4:97:d0:8f:83:9a:9a:93:8e:61:28:01:00:04:8d:71:d2:
38:7e:bb:b1:3b:88:91:d6:cf:2f:49:7a:0b:ed:13:08:9a:f7:
ec:fb:56:2a:14:4a:4a:62:66:6b:19:91:87:bb:f2:6e:11:66:
f5:ca:6f:ab:68:2d:2f:89:cb:aa:f7:63:ad:da:f9:30:c5:20:
5a:15:23:fa:7a:53:47:69:8e:b6:fd:8f:a8:28:8c:e0:cc:65:
88:05:ba:7f:39:ee:44:fb:7e:2e:84:81:ff:f8:44:c3:76:a6:
1e:a5:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:18 2024 by rpki-client on console-ams.rpki-client.org