Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/wWkOJqQepsLbV505v-NkS9Wel_k.roa
File: wWkOJqQepsLbV505v-NkS9Wel_k.roa (raw, json)
Hash identifier: SH5+ExXaOmYXyE/XJ7Rmnmd2E8rf/wOZTYEN+YXHsKI=
Subject key identifier: C1:69:0E:26:A4:1E:A6:C2:DB:57:9D:39:BF:E3:64:4B:D5:9E:97:F9
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 018CC4250888653AA09EC6F1D0A15DFFDA26
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/wWkOJqQepsLbV505v-NkS9Wel_k.roa
Signing time: Mon 01 Jan 2024 08:30:10 +0000
ROA not before: Mon 01 Jan 2024 08:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41202
IP address blocks: 185.183.240.0/22 maxlen: 22
185.183.240.0/23 maxlen: 23
185.183.240.0/24 maxlen: 24
185.183.242.0/23 maxlen: 23
37.110.208.0/24 maxlen: 24
37.110.210.0/24 maxlen: 24
37.110.212.0/22 maxlen: 22
37.110.208.0/22 maxlen: 22
37.110.208.0/21 maxlen: 21
37.110.215.0/24 maxlen: 24
37.110.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:08:88:65:3a:a0:9e:c6:f1:d0:a1:5d:ff:da:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Jan 1 08:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1690e26a41ea6c2db579d39bfe3644bd59e97f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:7a:f1:69:08:e7:d5:0b:d2:80:0a:d6:94:
9a:81:db:41:97:5a:29:c7:d4:01:37:9d:5d:a4:9d:
72:a1:94:c8:15:9f:58:19:56:aa:21:1f:16:cb:06:
6a:f4:04:af:41:46:f5:f8:d1:ce:6a:45:7c:45:ff:
c2:65:b0:02:50:38:3c:97:65:67:f2:c6:f2:f7:ac:
5b:21:ee:8e:ac:8a:65:05:dc:fe:5e:a5:49:9c:b5:
0f:56:24:f7:dd:ce:a7:58:f1:f8:d4:da:03:99:c2:
a3:11:8f:56:90:c7:77:13:04:3e:7b:cc:21:b9:b7:
7e:e9:da:9f:08:5d:45:38:5e:e4:15:07:fc:56:dd:
a6:0b:57:1b:6a:d1:5a:f9:8c:88:28:51:a4:bd:16:
17:c0:d3:0d:a2:3a:2b:5e:d5:4a:c5:9a:ef:92:35:
95:e8:a1:9c:f6:21:85:ec:8e:a8:80:d0:b5:02:02:
b2:5a:05:cb:de:d4:2e:73:23:c3:2c:70:24:c2:88:
9a:c9:0b:2e:47:21:46:73:1d:02:fe:d6:b2:ed:7f:
19:55:66:29:f2:73:32:ab:a7:82:73:6b:1d:17:95:
3c:7e:3a:20:fc:71:ca:31:95:e6:a6:25:cd:cc:93:
a1:aa:c6:ec:cc:20:e9:31:9a:d5:61:54:16:7a:78:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:69:0E:26:A4:1E:A6:C2:DB:57:9D:39:BF:E3:64:4B:D5:9E:97:F9
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/wWkOJqQepsLbV505v-NkS9Wel_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.208.0/21
185.183.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:4d:7b:43:bb:4d:be:df:c6:96:8b:e8:d3:6f:a4:6a:b2:eb:
14:6f:3c:a7:53:1d:8a:0c:0e:64:97:06:96:64:33:bf:5c:0b:
38:80:a5:3e:8b:55:74:10:05:81:20:68:3a:82:a4:3a:78:1c:
95:96:6d:51:bb:7f:1e:85:7e:15:1d:9c:d9:cc:b5:5e:c9:f0:
a2:24:d8:09:46:62:c9:94:14:c1:98:22:de:a6:02:95:df:00:
1a:a1:0c:02:4e:52:12:1f:b3:09:96:3d:37:e9:c5:f2:1e:b1:
4b:03:e4:1d:36:70:20:08:89:ea:0d:cf:3d:a5:05:a8:63:89:
b5:0b:bf:26:b7:13:1c:bd:fb:90:a2:1e:a7:fd:4b:60:85:db:
5a:fe:a2:a1:71:9a:99:ec:c0:b8:d3:19:9f:f8:1e:4b:a7:3c:
eb:e4:19:f4:b5:0d:d6:8b:48:11:94:eb:cc:3c:ae:c8:ff:e2:
2e:f9:4e:3e:23:df:0f:42:74:fb:3f:5d:fa:39:a9:99:72:4a:
87:c2:2d:52:c5:eb:7c:c6:78:b5:d1:8e:d3:0e:e8:13:2d:6c:
82:b3:b3:44:0f:43:33:56:66:75:3d:4c:5e:3b:81:5c:5b:cb:
0b:3d:68:94:b9:71:71:96:63:f0:e9:a5:83:4c:b2:6b:3e:76:
67:bd:71:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:56 2024 by rpki-client on console-fra.rpki-client.org