Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/oW7Udx6dHS54rWOesx4-QWSn1C0.roa
File: oW7Udx6dHS54rWOesx4-QWSn1C0.roa (raw, json)
Hash identifier: TDNqbFngPNJSuI/kAaC237JgcFXKtDM7vBvm9WQJtsk=
Subject key identifier: A1:6E:D4:77:1E:9D:1D:2E:78:AD:63:9E:B3:1E:3E:41:64:A7:D4:2D
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 018CC6B7D0F108045B323249F3FA71100580
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/oW7Udx6dHS54rWOesx4-QWSn1C0.roa
Signing time: Mon 01 Jan 2024 20:29:44 +0000
ROA not before: Mon 01 Jan 2024 20:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28979
IP address blocks: 194.127.216.0/21 maxlen: 21
194.127.217.0/24 maxlen: 24
194.127.215.0/24 maxlen: 24
194.127.218.0/24 maxlen: 24
194.127.219.0/24 maxlen: 24
185.204.240.0/23 maxlen: 23
185.204.242.0/23 maxlen: 23
2a04:b647:fffe::/48 maxlen: 48
2a04:b647::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:d0:f1:08:04:5b:32:32:49:f3:fa:71:10:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Jan 1 20:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a16ed4771e9d1d2e78ad639eb31e3e4164a7d42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:88:93:30:97:e4:6f:7e:62:2f:51:a6:96:
34:18:85:0e:fd:64:6e:77:ce:72:d6:77:eb:70:6c:
f2:23:2b:57:6c:14:89:6d:1e:b1:c6:ba:98:4f:ee:
9b:7d:71:40:d9:36:21:f8:73:c9:53:90:51:82:eb:
bc:0e:e1:31:c9:bd:a4:3e:ca:69:62:01:20:9f:dc:
fd:6e:1b:3d:ed:b3:dd:7f:79:7e:83:5c:f7:2c:07:
6b:81:d5:43:73:64:b5:93:9e:42:4c:8f:67:95:47:
8b:ab:4b:8a:d0:08:f4:b0:9d:2a:ec:f8:e2:7f:e0:
c1:99:96:50:b4:74:c4:9d:08:45:55:d6:cf:95:a6:
d3:a5:16:b7:a0:ea:77:c3:a7:f6:84:1b:9c:ca:dd:
f4:7a:24:1d:2d:fd:a8:e6:e3:7d:9a:37:c7:4d:57:
62:59:7e:96:e0:26:63:c6:63:88:5f:af:27:1d:34:
7d:5b:bc:46:14:35:63:eb:4c:ef:ca:80:b8:bd:f2:
98:82:e0:2e:79:c9:4e:ad:78:e8:8a:bc:a1:0c:a6:
ca:6e:70:4a:cb:cd:dd:e4:62:43:d0:8e:bf:d8:d8:
dc:8f:78:3a:e1:b1:8c:3a:f7:cb:9c:6a:d4:13:93:
02:3e:00:84:c0:8f:46:4e:d6:6f:fb:04:0e:52:7c:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6E:D4:77:1E:9D:1D:2E:78:AD:63:9E:B3:1E:3E:41:64:A7:D4:2D
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/oW7Udx6dHS54rWOesx4-QWSn1C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.240.0/22
194.127.215.0-194.127.223.255
IPv6:
2a04:b647::/32
Signature Algorithm: sha256WithRSAEncryption
15:c3:da:b8:50:de:c8:b8:f4:ed:a0:c9:de:0a:32:fb:92:07:
12:1a:5f:d8:a7:f2:17:ee:bf:ba:b9:bb:29:c2:ab:31:8b:4b:
b9:89:90:ef:08:16:3a:92:82:ea:82:40:af:b3:00:70:df:74:
3f:ea:37:cb:1e:08:4b:a9:85:cf:22:62:1f:3e:8d:02:04:05:
c8:e5:c2:31:e0:13:71:74:48:f4:7b:a4:25:ba:cb:a6:5d:1a:
a7:89:5a:9e:d7:04:43:db:c6:f4:a0:fb:5b:99:cc:0d:f2:73:
cb:2f:5b:3f:2c:ef:f8:0c:4a:34:fb:d7:f0:8e:cd:50:9b:04:
b0:a3:0c:9d:0f:43:dc:3b:3c:89:4f:00:c2:ea:98:84:64:48:
e1:e1:73:a8:a9:cc:87:2c:2d:aa:6c:55:53:fa:9f:7b:31:53:
20:f3:2f:9f:0b:6c:5c:80:fb:7f:30:83:25:ac:f0:c7:c2:58:
07:e4:77:96:c7:0f:24:f2:38:d7:76:a6:8a:83:9d:98:13:e9:
0e:5a:35:b9:b0:21:fe:e4:a0:ff:51:61:74:29:72:b4:b9:76:
08:89:d6:c7:03:66:69:17:75:97:5f:e7:04:9f:a6:04:56:24:
da:d7:b4:1e:26:1f:09:0e:dc:81:be:cb:02:26:70:e5:5e:58:
a0:7a:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:50:14 2024 by rpki-client on console-ams.rpki-client.org