Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/we3oh0ca3x9xbzcwYF_i324-DKw.roa
File: we3oh0ca3x9xbzcwYF_i324-DKw.roa (raw, json)
Hash identifier: d46rafyrjmexIV7eB9b4+ZJpUTuWTS9oXo3DtFTOTrY=
Subject key identifier: C1:ED:E8:87:47:1A:DF:1F:71:6F:37:30:60:5F:E2:DF:6E:3E:0C:AC
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 01909236AA6F6A71EB13F912CB5B96473602
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/we3oh0ca3x9xbzcwYF_i324-DKw.roa
Signing time: Mon 08 Jul 2024 11:59:34 +0000
ROA not before: Mon 08 Jul 2024 11:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13631
IP address blocks: 46.255.29.0/24 maxlen: 24
194.59.56.0/23 maxlen: 24
2a13:bb80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:36:aa:6f:6a:71:eb:13:f9:12:cb:5b:96:47:36:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Jul 8 11:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1ede887471adf1f716f3730605fe2df6e3e0cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d9:67:6f:8b:c7:30:5f:be:b7:26:e2:fb:f8:
b4:17:65:e6:92:0b:aa:ec:53:e6:d7:86:87:1e:18:
39:29:19:c9:e9:ef:f1:ca:35:1f:8e:c8:ce:10:9d:
7e:67:ca:c1:dd:93:3e:6f:10:4a:24:96:a9:f1:71:
97:02:28:4b:bc:37:fc:e1:d6:e5:ab:2f:f7:05:b8:
35:49:64:9f:51:ac:07:59:0b:81:b0:a8:2c:ce:d4:
ca:44:68:83:04:52:95:59:5c:ad:f6:25:48:4c:b6:
66:ed:21:ab:51:95:25:27:b6:f4:26:e4:09:b0:54:
b6:43:84:15:30:80:b8:73:5d:8c:1c:c7:ea:0a:31:
15:38:62:c3:fd:c3:34:25:04:bc:9a:b0:ef:72:c7:
2a:f1:a0:80:7a:6e:bd:f5:84:24:ea:fc:bd:85:fc:
71:30:6c:70:7b:aa:21:f6:a7:22:b9:cb:57:f2:ed:
68:64:a5:cb:9b:2f:4b:4f:0b:f7:32:bc:4c:d3:6c:
6d:3c:71:1d:01:3f:aa:a4:16:39:99:a4:de:15:28:
cf:83:d1:9b:59:14:4a:77:5d:9f:65:79:8a:29:ab:
3c:a8:bb:2d:d3:dd:23:32:2a:9b:ad:2e:e9:fa:7b:
09:42:a1:e6:45:5e:11:c3:d9:11:ad:a9:cf:70:ab:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:ED:E8:87:47:1A:DF:1F:71:6F:37:30:60:5F:E2:DF:6E:3E:0C:AC
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/we3oh0ca3x9xbzcwYF_i324-DKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.29.0/24
194.59.56.0/23
IPv6:
2a13:bb80::/29
Signature Algorithm: sha256WithRSAEncryption
1e:5e:7f:27:f4:38:7a:d6:51:bf:b7:e1:e0:3a:4e:b0:2a:d0:
39:08:78:63:7d:bf:15:79:60:f0:ca:c2:6c:73:b8:30:b1:ff:
03:a1:4c:36:62:50:8b:67:04:9d:5a:78:27:60:04:a2:08:c5:
bc:55:bc:4c:07:98:73:d0:16:3f:84:55:d7:3e:04:33:44:43:
75:ca:73:53:bc:88:fa:a4:e9:35:f7:f1:ff:f4:71:9e:21:e8:
57:0e:3b:ee:78:b4:ab:14:ec:14:64:99:20:93:65:0e:80:d5:
99:3a:a3:06:0e:ff:1b:34:27:33:6c:be:ea:fd:f6:5c:c5:c4:
4c:7b:e9:b3:a4:83:03:75:28:93:41:01:6e:7a:a1:a8:c4:4f:
90:bb:b5:71:be:e0:c6:d7:e1:e1:86:1d:21:b8:e9:74:c4:3a:
d6:6c:b8:16:18:c4:20:fb:20:7a:bd:a8:b7:ea:7d:2a:22:21:
06:4b:a7:8a:df:f9:71:35:53:54:53:51:84:70:5c:a7:70:54:
ed:f9:ae:1b:9f:81:d6:5f:c2:69:8d:60:b1:be:0c:7f:1b:76:
57:b7:ff:d7:1a:5c:fa:1b:4c:52:ab:3d:9d:53:16:18:f7:6b:
9d:da:5f:c7:06:05:3a:21:32:5a:03:f2:4a:15:c0:75:6f:b5:
47:13:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:29 2024 by rpki-client on console-fra.rpki-client.org