Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/WAeukxZ8LoHrPwdRHJMPWq-Ak8o.roa
File: WAeukxZ8LoHrPwdRHJMPWq-Ak8o.roa (raw, json)
Hash identifier: JDeYa2U/pALK52Vqa5Yi3zCzM0BUuF+6gWlZKiRD5Jc=
Subject key identifier: 58:07:AE:93:16:7C:2E:81:EB:3F:07:51:1C:93:0F:5A:AF:80:93:CA
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 018CC56E0DDA3EDA3FD78E2C5FC1BAC8357A
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/WAeukxZ8LoHrPwdRHJMPWq-Ak8o.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207223
IP address blocks: 185.179.64.0/23 maxlen: 24
185.179.66.0/23 maxlen: 24
185.162.116.0/23 maxlen: 23
185.162.118.0/23 maxlen: 23
2a0a:e000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0d:da:3e:da:3f:d7:8e:2c:5f:c1:ba:c8:35:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5807ae93167c2e81eb3f07511c930f5aaf8093ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:0f:b7:5f:fc:35:27:e3:f2:55:27:99:70:
d9:f1:a9:dd:b5:e3:55:93:6c:64:f4:74:fc:aa:1b:
1a:61:59:fb:74:8f:8b:86:7b:cc:df:bd:e0:57:7a:
bc:0b:96:62:03:94:4b:c2:d0:3a:58:f1:13:0c:d0:
33:d5:4b:22:72:bf:1f:ee:f1:69:95:cb:53:01:f0:
59:04:00:71:c9:85:45:5b:8e:3a:a7:cd:11:7f:72:
7d:e4:85:51:dd:a0:d8:da:04:d0:c7:90:6d:39:0c:
6d:08:72:09:c3:cb:66:25:65:5d:91:ac:f3:0d:dd:
c9:e8:60:25:00:04:bf:a9:bb:f1:3a:1d:50:e3:6d:
e6:f6:c5:6f:62:66:af:3f:89:c2:29:c1:8d:db:10:
01:c6:34:1d:dc:d5:de:64:4d:f7:43:34:5b:0f:91:
35:0c:44:3d:c6:f7:ce:2d:36:ba:2b:89:4d:84:16:
c1:db:4d:d8:06:e7:96:80:fc:c7:57:34:b4:82:b8:
8a:c5:90:6c:80:b0:80:72:38:63:0f:a9:62:ab:95:
46:74:a5:23:48:c2:df:1b:7b:41:64:a7:38:82:c3:
9c:c9:fd:df:37:fc:f3:41:10:3b:58:f7:39:46:1c:
d2:53:fb:2f:8d:ad:ef:9f:ce:ea:a2:2f:52:b3:47:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:07:AE:93:16:7C:2E:81:EB:3F:07:51:1C:93:0F:5A:AF:80:93:CA
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/WAeukxZ8LoHrPwdRHJMPWq-Ak8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.116.0/22
185.179.64.0/22
IPv6:
2a0a:e000::/29
Signature Algorithm: sha256WithRSAEncryption
36:0b:ed:ed:5c:81:13:a2:bb:8c:a2:a1:bf:45:c8:1b:ac:ec:
15:80:a7:16:b9:a7:05:cf:83:76:db:94:4d:5d:f2:19:d6:58:
13:84:a6:e7:79:40:90:92:a9:09:96:0f:2c:de:7e:c8:00:d9:
55:2d:63:35:a9:60:fa:23:cd:9e:2d:f1:6c:ce:6f:ad:3b:58:
74:0d:6b:2a:43:0f:38:e0:95:ff:21:0a:14:13:66:b5:ab:ec:
b4:86:e6:ef:8c:41:c4:53:4f:3c:4b:cc:48:29:ab:9e:cc:c6:
63:61:9f:13:74:47:f4:90:38:9b:df:04:47:b4:51:ec:e1:28:
20:23:67:d5:4c:0b:28:cc:71:97:53:df:97:7b:df:4e:3c:9f:
93:8b:e8:ef:27:16:35:51:03:92:9e:5d:49:f1:1c:1a:b4:49:
c2:84:72:f2:7b:b3:78:81:9f:85:ec:2a:39:81:4c:0b:06:85:
c5:26:a0:0d:28:8a:c7:5f:cf:30:7c:ae:d1:85:34:de:21:88:
81:59:ae:e1:7c:d4:0b:24:56:80:fb:37:8c:32:d7:d9:b7:f0:
f1:44:0e:4b:ea:ae:29:a1:aa:b9:d3:66:80:c2:0e:27:bd:c8:
c6:9d:f0:58:fd:d4:d5:94:e8:58:82:cb:db:84:27:8a:43:66:
83:73:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:46:14 2024 by rpki-client on console-ams.rpki-client.org