Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/WB806vsa0V7J_eZNLY7cRpjMaxc.roa
File: WB806vsa0V7J_eZNLY7cRpjMaxc.roa (raw, json)
Hash identifier: LqM7/MmAeffU3RTF21j48G8LduZiRV+eOQJ04HcWmxI=
Subject key identifier: 58:1F:34:EA:FB:1A:D1:5E:C9:FD:E6:4D:2D:8E:DC:46:98:CC:6B:17
Certificate issuer: /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial: 018CC2DB60285398DA0554C397B794CC86EB
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/WB806vsa0V7J_eZNLY7cRpjMaxc.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29687
IP address blocks: 128.140.188.0/24 maxlen: 24
128.140.189.0/24 maxlen: 24
128.140.188.0/22 maxlen: 22
128.140.188.0/23 maxlen: 23
128.140.191.0/24 maxlen: 24
128.140.190.0/23 maxlen: 23
128.140.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:60:28:53:98:da:05:54:c3:97:b7:94:cc:86:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=581f34eafb1ad15ec9fde64d2d8edc4698cc6b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:00:5c:17:56:63:bf:0b:a6:a4:3a:fa:f1:
49:18:60:76:4f:05:d0:fe:17:e1:61:0b:d7:70:69:
92:71:75:b7:bf:19:33:96:96:bb:34:ab:e6:b8:b9:
0f:4d:33:0e:61:0e:7d:d3:6f:48:e4:39:d1:43:37:
68:cf:28:d1:47:61:25:c0:53:95:c7:1d:e3:8f:4c:
0a:84:96:48:18:5d:26:d4:45:a2:ed:c0:7a:ec:64:
eb:b1:32:8c:e4:fa:a4:a7:5f:8a:f5:81:e6:bc:c5:
09:f1:fd:b1:98:bd:29:f1:b3:76:19:f8:50:a0:8a:
4f:75:05:f9:a2:d9:ee:6f:e2:54:81:5f:37:11:68:
7c:25:22:f3:67:e2:2e:a0:25:5a:cd:71:96:53:9c:
36:e8:0b:af:6e:3e:7f:85:05:38:a5:1a:9b:e8:c8:
a0:54:74:47:13:93:20:25:8f:d0:f5:94:47:22:3d:
c5:8c:4f:2c:ed:92:e4:d2:73:eb:65:d9:7d:61:b8:
6b:e7:a3:6b:91:81:38:53:ca:3b:d5:d0:52:43:27:
d1:1e:37:dd:bc:dc:60:7d:76:be:be:07:7b:2a:c3:
5f:36:3d:0a:a6:6d:86:01:c5:52:6c:3b:88:9c:ae:
c9:14:2c:20:11:f0:d9:fa:c0:6c:ad:6c:56:e4:cb:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:34:EA:FB:1A:D1:5E:C9:FD:E6:4D:2D:8E:DC:46:98:CC:6B:17
X509v3 Authority Key Identifier:
keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/WB806vsa0V7J_eZNLY7cRpjMaxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.140.188.0/22
Signature Algorithm: sha256WithRSAEncryption
09:83:cf:6c:55:8d:9f:10:ef:ad:22:bc:73:70:f1:cb:ff:0f:
cd:7f:69:2c:98:ae:84:07:35:81:88:d8:a6:b2:67:0f:1b:c3:
97:d5:1a:7d:b6:c2:9c:5e:50:bd:2c:75:eb:ac:b7:64:c9:a6:
69:53:40:0a:dd:64:35:18:d6:1f:20:25:17:9e:5a:ad:6b:84:
be:a5:18:6c:a6:a1:8f:0a:0a:9e:e9:0e:5b:77:e3:f6:c1:3d:
b1:a4:0b:03:9a:de:39:2e:b5:17:51:9d:59:dc:16:f5:0e:fd:
4c:32:f3:7d:b4:e5:4c:53:bb:66:34:bd:fe:80:db:c6:3d:d4:
40:e7:81:dd:3a:e8:cd:98:ea:1b:3a:c6:35:09:b9:45:ac:4d:
9f:14:d6:bd:18:f4:bd:36:44:49:78:99:d2:65:c8:c4:1f:2d:
e4:b2:fb:08:62:ce:51:37:ae:88:09:70:f8:2d:ae:cf:77:a6:
db:7e:d9:d5:f2:38:0c:76:c2:ce:8e:61:f5:8a:a5:a8:23:2a:
00:c3:55:89:c7:7c:bb:fb:b9:50:90:54:3e:49:82:e8:ca:c5:
5a:fe:59:23:69:e3:29:57:56:90:9c:80:52:a0:2a:4a:b2:53:
7b:07:09:d6:c7:3b:2c:3e:e5:70:77:10:cb:4c:76:58:30:94:
c7:11:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:16:52 2024 by rpki-client on console-fra.rpki-client.org