Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wpf13-x14zOfH-bp7l3X8Yj9fqA.roa
File: wpf13-x14zOfH-bp7l3X8Yj9fqA.roa (raw, json)
Hash identifier: x6f2jbju1jsmUlOU8zlQJBVLOnT6rjpbzMQ7NJcIe8w=
Subject key identifier: C2:97:F5:DF:EC:75:E3:33:9F:1F:E6:E9:EE:5D:D7:F1:88:FD:7E:A0
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018FF18F3EEBCDE7FF84B1310A904D433328
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wpf13-x14zOfH-bp7l3X8Yj9fqA.roa
Signing time: Fri 07 Jun 2024 07:17:27 +0000
ROA not before: Fri 07 Jun 2024 07:17:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 88.209.230.0/24 maxlen: 24
88.209.245.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f1:8f:3e:eb:cd:e7:ff:84:b1:31:0a:90:4d:43:33:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 7 07:17:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c297f5dfec75e3339f1fe6e9ee5dd7f188fd7ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:fe:3a:d0:c2:a6:c4:9f:db:2b:95:23:24:
0d:32:aa:9a:58:2d:ef:6f:24:e4:6a:dd:26:b2:ce:
ed:cf:f2:eb:05:06:47:fc:d9:d3:bb:78:7f:b2:36:
2d:9a:f6:9a:d2:01:8c:4d:7b:5c:7f:c4:9c:8a:7c:
46:bc:2a:69:53:f6:f0:c6:41:0b:9e:02:ab:d4:8c:
63:7b:b6:1b:28:88:73:4b:e3:29:ec:0c:c2:ff:75:
d1:37:fd:06:11:fb:f1:9a:cb:ac:9e:c9:71:b7:48:
7b:52:e1:2d:d1:03:b6:ee:e5:cb:5d:24:98:5b:63:
f6:8c:28:86:c5:19:02:19:5a:bd:07:d6:0e:d6:de:
43:3b:6a:a7:58:e1:83:c5:f6:6c:67:79:d2:40:28:
bf:bd:e5:b0:c4:1e:3b:90:6c:65:66:b4:ae:73:5c:
10:f4:49:7d:14:63:04:3a:f8:32:8d:65:19:60:92:
b7:fd:2a:e8:9e:16:c1:c5:31:19:89:a3:a1:72:58:
2f:1d:2f:55:f3:b1:51:3c:71:e7:07:b3:7b:c0:a5:
a2:70:52:e4:57:09:90:1f:7f:43:6d:c1:9c:b5:bb:
02:50:a8:37:e5:7c:9f:e7:95:9d:22:97:5a:47:fc:
cc:d6:67:2e:f9:ec:9e:43:e4:62:20:88:fc:d0:99:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:97:F5:DF:EC:75:E3:33:9F:1F:E6:E9:EE:5D:D7:F1:88:FD:7E:A0
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/wpf13-x14zOfH-bp7l3X8Yj9fqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.230.0/24
88.209.245.0/24
88.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
28:6f:df:43:b0:bc:c1:09:b4:2d:fd:00:76:92:cb:2b:0d:c8:
97:1a:12:9b:0d:76:6e:ba:5c:e6:af:16:94:20:15:84:37:c6:
9b:61:39:e1:03:78:b2:f4:17:bc:87:09:a1:f4:2a:d1:05:51:
8f:ca:74:8d:78:53:25:a1:ef:49:ee:39:1c:9d:21:8d:20:83:
6f:e1:bb:f3:b1:35:77:d4:76:ea:0f:82:04:10:62:ed:23:f5:
08:17:e1:ce:2c:57:6d:72:80:93:2b:61:0e:74:54:a0:ac:fd:
6f:d6:2f:ac:34:b6:58:5b:e0:6d:f7:e4:6c:31:2e:07:a0:27:
81:41:52:0b:c0:34:6f:6f:ed:95:12:fc:6a:fa:05:4e:5f:21:
05:d1:e8:d7:57:17:56:a8:e7:cd:01:49:29:91:ff:52:e5:05:
cf:30:3e:58:9c:b8:f1:d2:58:38:e1:19:3a:d7:34:32:5c:be:
5e:5e:66:d5:c5:b2:0d:69:05:f9:4b:11:bc:26:d4:6a:23:4c:
bd:94:f1:65:dd:f7:da:2d:93:68:0b:0a:13:f1:26:a7:50:c6:
7c:81:55:25:9b:7c:bb:ca:51:1a:c9:f5:ac:67:52:75:22:3d:
77:14:cd:46:f9:a9:21:50:4a:ed:f7:ff:41:ea:7f:69:59:d6:
00:b8:05:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:32:23 2024 by rpki-client on console-ams.rpki-client.org