Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/W_j3OZuyynDeuovA7619n2pouw4.roa
File: W_j3OZuyynDeuovA7619n2pouw4.roa (raw, json)
Hash identifier: x5IrYVoeHCs8ECv+xHBdYPSWMww7RiJhfCWqsbAuwC8=
Subject key identifier: 5B:F8:F7:39:9B:B2:CA:70:DE:BA:8B:C0:EF:AD:7D:9F:6A:68:BB:0E
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 018CC56DE48371F1805A893B6A3087BF2872
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/W_j3OZuyynDeuovA7619n2pouw4.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205915
IP address blocks: 194.13.224.0/21 maxlen: 24
194.53.12.0/22 maxlen: 24
194.13.160.0/20 maxlen: 24
2001:67c:1134::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e4:83:71:f1:80:5a:89:3b:6a:30:87:bf:28:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bf8f7399bb2ca70deba8bc0efad7d9f6a68bb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:91:bd:2e:3a:04:10:ec:16:9d:82:36:c4:
89:96:35:dc:b8:5c:ee:28:59:c5:1b:bf:05:e2:f2:
76:06:8d:96:5f:e8:b8:be:b7:d2:43:bb:a0:de:e5:
23:b3:cf:b1:32:08:29:d9:e2:e7:c2:d5:97:fb:2f:
0e:45:6e:94:a3:3b:02:b9:40:79:15:ae:70:c5:c0:
90:14:f8:13:01:a9:68:3b:39:f3:f1:9b:8c:0b:f4:
7c:9b:ba:0b:56:07:b4:df:a5:2d:d0:b5:6c:2c:c6:
90:0b:bb:94:57:b8:5f:41:a7:8d:51:e4:bf:77:82:
cf:6a:86:54:57:9d:f4:64:3d:00:64:94:4e:fb:53:
03:66:a5:c9:c1:c5:f1:02:d3:86:cc:6b:af:58:fa:
c6:10:f0:db:f9:76:c3:ad:14:a1:13:1e:a8:d6:af:
ed:4d:3b:09:a2:6e:73:9e:4a:06:b5:3c:e8:f6:eb:
b3:e3:6d:0b:5b:39:e6:f7:0e:90:6a:c8:cb:2d:88:
54:38:1c:be:58:1d:a7:9c:90:ee:4d:9a:98:55:d6:
d6:43:e8:a3:60:f8:ef:8c:68:15:d2:d5:09:49:69:
32:dd:3b:b7:3c:e9:a7:a8:0d:05:f5:c5:a4:13:d6:
fa:46:a2:c2:c5:85:e3:e0:4e:f4:f1:b0:4b:bb:10:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F8:F7:39:9B:B2:CA:70:DE:BA:8B:C0:EF:AD:7D:9F:6A:68:BB:0E
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/W_j3OZuyynDeuovA7619n2pouw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.160.0/20
194.13.224.0/21
194.53.12.0/22
IPv6:
2001:67c:1134::/48
Signature Algorithm: sha256WithRSAEncryption
7e:73:c8:5f:09:df:53:ba:3c:b1:58:6d:c6:61:61:fa:05:02:
39:ad:f7:29:0e:61:39:9d:5d:54:3d:6f:4f:da:22:24:8b:5f:
ca:87:88:d0:e0:0e:af:99:84:30:5a:b0:05:e7:49:6f:47:0a:
a2:24:7c:4a:e3:19:11:b2:cc:ce:8f:9f:ba:03:4a:0e:de:eb:
a4:bf:c9:7d:4a:db:86:fd:a8:f9:f4:0d:d5:94:57:e8:33:a8:
55:99:94:a1:ce:57:8f:fd:20:58:7a:c1:44:54:2f:c5:d6:02:
d0:75:74:28:29:6a:64:9c:4c:03:fe:50:36:75:08:14:e4:cc:
80:cc:bd:3c:9d:de:53:6f:4f:6c:16:1a:f5:52:3b:49:dc:03:
ce:40:58:33:31:fe:00:e7:aa:31:15:c1:c0:10:ef:ff:56:60:
9c:28:91:f8:fb:6b:be:46:42:5a:06:b3:85:50:19:ae:b8:2b:
ab:2d:12:f9:5b:d7:6d:aa:06:f8:fd:e2:af:70:d8:b9:50:06:
58:75:ed:74:ef:04:be:df:51:63:73:e2:e2:5f:fd:95:da:cc:
d9:f1:76:8d:e2:61:29:0f:77:d5:e2:a5:d6:ad:2a:19:fe:04:
03:1c:55:ac:64:eb:ca:46:dd:2e:a4:4e:65:3c:4c:d1:b7:ba:
dd:14:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:18:29 2024 by rpki-client on console-fra.rpki-client.org