Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WKgw5P4mzgoKXrVm15Pz8vylFPU.roa
File: WKgw5P4mzgoKXrVm15Pz8vylFPU.roa (raw, json)
Hash identifier: 2WbDmBNb+B4B7nyhUvN6gbAL/S7BP2+iT/LvGMkqet0=
Subject key identifier: 58:A8:30:E4:FE:26:CE:0A:0A:5E:B5:66:D7:93:F3:F2:FC:A5:14:F5
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01929FB429682D077B69553FA84306DAF80A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WKgw5P4mzgoKXrVm15Pz8vylFPU.roa
Signing time: Fri 18 Oct 2024 12:57:17 +0000
ROA not before: Fri 18 Oct 2024 12:57:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198427
IP address blocks: 5.182.112.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9f:b4:29:68:2d:07:7b:69:55:3f:a8:43:06:da:f8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 18 12:57:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58a830e4fe26ce0a0a5eb566d793f3f2fca514f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:49:ba:51:4c:97:66:a3:46:6f:61:62:fa:
35:d0:64:54:13:44:36:40:71:6d:2b:ba:bb:0c:de:
6b:ef:0c:40:a0:85:bb:d8:54:20:4b:91:32:20:71:
0b:72:6c:0d:29:83:be:69:0f:04:b4:4b:be:ff:25:
ea:06:d9:ce:5c:88:f3:0b:de:97:a6:02:d8:80:67:
01:3d:97:01:2d:90:d6:63:f9:76:06:94:67:d9:10:
32:dc:f2:e8:24:c6:d5:1f:ae:7e:e4:03:13:43:f9:
d8:1a:30:53:56:d6:cd:ac:7c:ba:ef:a9:28:17:95:
4d:7e:49:09:9f:18:49:32:3b:dd:ee:76:37:3e:bd:
88:d7:ff:d1:e1:d1:15:50:a0:4f:a1:70:86:b1:26:
5f:9f:db:67:b0:6f:20:df:4c:be:36:b4:10:ce:cc:
ed:19:55:a0:b5:4c:3a:67:85:67:b7:c4:28:c4:92:
e6:fb:e2:50:1f:32:00:f9:59:ca:cd:2a:34:13:09:
08:87:ad:2e:c7:6a:76:6d:ae:6e:21:12:7e:b0:99:
bd:93:14:7f:eb:2c:2c:2e:75:84:16:e6:c7:81:1c:
a1:b5:80:3c:ee:25:02:2a:37:70:2a:3d:2d:91:ee:
3e:00:b0:47:de:42:df:ba:76:10:dc:7c:77:6c:fc:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A8:30:E4:FE:26:CE:0A:0A:5E:B5:66:D7:93:F3:F2:FC:A5:14:F5
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WKgw5P4mzgoKXrVm15Pz8vylFPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
77.242.154.0/24
Signature Algorithm: sha256WithRSAEncryption
98:57:9f:15:65:c7:e3:a5:45:e3:fb:38:e0:47:0b:33:b1:ab:
fa:07:34:7f:26:a7:0e:bc:b8:84:61:74:89:d6:ca:1b:44:bd:
66:65:56:9c:d6:f8:1b:5f:19:fb:15:2e:58:3b:6d:43:64:58:
b5:d6:fe:1a:66:e2:72:2d:bf:53:f0:ff:eb:1e:b1:6b:80:66:
ba:d2:35:64:47:7a:9b:5a:16:87:6a:d4:9c:b3:c8:db:b1:66:
dc:1e:b2:9b:80:ef:bf:60:de:48:0f:0a:68:f7:fb:5b:ba:16:
bb:32:32:56:62:88:66:20:35:ba:dc:f9:66:0d:88:ef:81:86:
b2:3b:55:5e:49:e9:c3:4d:a9:e5:8d:4c:8c:26:fd:c3:a1:cf:
59:53:c3:e5:33:3c:49:06:81:3e:ee:6f:83:96:8d:a9:b0:de:
d6:e0:9b:a8:aa:2b:4d:0f:67:5d:38:11:49:1e:e7:25:d8:29:
42:d0:cf:59:39:4f:58:9c:46:56:01:da:66:73:d9:0e:99:d0:
42:31:d2:6e:e2:c2:6c:4c:c0:17:ac:4e:c7:8f:a1:89:28:69:
71:55:83:59:2b:92:ab:d3:e4:43:df:a9:05:79:d9:9e:92:30:
f9:6b:b6:86:1b:4d:a4:b4:78:33:11:f1:3b:c0:35:64:37:44:
f7:12:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:34:43 2024 by rpki-client on console-ams.rpki-client.org