Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W_Pl1dK3IN7NFzf84ZF3at_JzEU.roa
File: W_Pl1dK3IN7NFzf84ZF3at_JzEU.roa (raw, json)
Hash identifier: CcSVFjPp3u7WKph6TfZOBARZLM4M5A9f+EZ8UTllcFU=
Subject key identifier: 5B:F3:E5:D5:D2:B7:20:DE:CD:17:37:FC:E1:91:77:6A:DF:C9:CC:45
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01926C155C43C7D5C011BCAA7F9491218CFE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W_Pl1dK3IN7NFzf84ZF3at_JzEU.roa
Signing time: Tue 08 Oct 2024 12:23:12 +0000
ROA not before: Tue 08 Oct 2024 12:23:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.147.224.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:15:5c:43:c7:d5:c0:11:bc:aa:7f:94:91:21:8c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 8 12:23:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bf3e5d5d2b720decd1737fce191776adfc9cc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:fa:ac:61:d0:8c:24:1b:51:a2:c1:c3:34:
93:55:c7:b3:ee:c1:9a:88:c8:7a:a3:b4:30:88:86:
7e:22:3d:6d:f8:b0:3d:f8:ff:14:ea:71:53:ea:35:
da:d3:80:d5:45:20:fd:b0:a4:bf:74:50:14:84:e6:
54:28:02:db:4c:09:10:b4:2c:74:04:05:59:94:23:
6e:9a:86:f4:67:1c:e5:a3:28:cf:91:a5:96:e2:ef:
7f:8e:ed:8e:7a:ac:55:e5:69:89:62:59:f5:cf:c3:
a4:a4:47:9e:a9:2c:76:6b:70:88:70:1e:dd:17:46:
58:87:ac:5b:3d:c7:2b:b8:9b:37:52:53:ac:30:8d:
37:7c:30:07:4d:3e:85:d3:80:19:44:77:57:f3:75:
9f:db:49:60:5a:4a:ab:d5:5a:c0:5a:c2:8e:14:7b:
ff:88:50:b7:b9:9d:0a:84:3d:ae:82:8f:b8:3b:67:
2a:4e:d0:c0:fb:d0:a5:8e:14:03:f4:a7:64:13:4a:
06:74:c7:0b:31:03:f5:ff:38:22:b6:80:ac:7b:c3:
13:ee:ac:41:52:84:99:39:62:ee:c7:8f:98:31:32:
01:55:1f:54:69:c9:24:52:9b:ee:e0:03:8c:db:9e:
79:3b:f1:2e:3b:16:b2:43:4c:a1:67:6a:79:23:fa:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F3:E5:D5:D2:B7:20:DE:CD:17:37:FC:E1:91:77:6A:DF:C9:CC:45
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W_Pl1dK3IN7NFzf84ZF3at_JzEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.224.0/24
185.222.30.0/24
194.5.67.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8a:3f:8d:51:08:94:b5:a9:53:4d:48:c4:4b:5d:fe:37:8b:
19:f5:2b:18:3d:0d:2b:87:98:87:fc:71:7b:93:ec:fa:bb:68:
9e:ee:5c:68:2a:62:ff:02:16:7e:6e:94:2b:67:24:99:51:a5:
99:06:2d:75:7d:de:7e:10:74:d7:5e:2f:e9:43:21:69:f8:c0:
85:51:94:e8:fa:95:04:02:34:53:ad:b7:9e:4a:fb:e5:69:b9:
8b:60:17:12:c1:64:7f:53:25:b4:d2:a9:bc:f5:03:83:88:fc:
f9:90:e5:4f:6a:a2:39:3a:c4:d0:9c:66:40:97:e1:da:ed:a8:
36:59:4c:b3:59:25:38:58:b5:17:27:06:fe:8e:af:f6:fd:e7:
ad:d1:6d:fc:87:8b:85:fc:50:a0:6b:a5:ab:e5:db:eb:01:82:
bb:d3:c8:5e:17:e5:d4:21:7c:53:e6:4e:16:50:25:fa:92:a6:
27:76:f8:01:f6:57:ab:d4:29:86:36:f5:d3:af:9b:35:fb:bd:
56:76:95:60:9c:9f:2d:79:a8:5c:9e:ee:5f:89:f7:b7:80:90:
b5:c5:78:e7:33:cb:30:a8:4d:d9:28:e9:29:ca:e4:1a:49:b9:
f7:56:de:cf:6b:fe:b6:91:0b:53:49:b2:f8:2f:86:70:7d:36:
85:20:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:50:39 2024 by rpki-client on console-fra.rpki-client.org