Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/WL7jVQpcELjo1xu4-BsEKdAwcwU.roa
File: WL7jVQpcELjo1xu4-BsEKdAwcwU.roa (raw, json)
Hash identifier: 9qF7QzdxnML616Zk/pBZJJuP5uoqxIAxmFpZjYCIWd4=
Subject key identifier: 58:BE:E3:55:0A:5C:10:B8:E8:D7:1B:B8:F8:1B:04:29:D0:30:73:05
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 0193694415CABD84DBDE2193BE6349022970
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/WL7jVQpcELjo1xu4-BsEKdAwcwU.roa
Signing time: Tue 26 Nov 2024 16:18:09 +0000
ROA not before: Tue 26 Nov 2024 16:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44942
IP address blocks: 92.63.224.0/20 maxlen: 22
92.63.228.0/22 maxlen: 22
92.63.232.0/21 maxlen: 21
92.246.104.0/22 maxlen: 22
92.246.108.0/22 maxlen: 22
92.246.108.0/24 maxlen: 24
92.246.109.0/24 maxlen: 24
92.246.110.0/24 maxlen: 24
92.246.111.0/24 maxlen: 24
185.114.116.0/22 maxlen: 22
185.157.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:44:15:ca:bd:84:db:de:21:93:be:63:49:02:29:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Nov 26 16:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58bee3550a5c10b8e8d71bb8f81b0429d0307305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:ce:b1:71:ce:ec:b0:28:9a:5a:c0:cb:a0:
77:2c:84:d6:43:48:d9:59:e8:12:08:98:15:d1:74:
55:c6:2e:22:1d:34:86:40:2a:e9:de:07:a8:b0:57:
97:88:98:8e:f3:af:8c:bb:07:9b:5b:a8:11:04:53:
2b:b0:04:7d:2e:46:1e:cd:ed:a5:21:bf:79:73:3e:
05:fa:c8:4a:79:d9:50:6e:fd:1c:41:e6:a6:04:de:
d7:97:81:24:07:24:24:8e:ba:d7:58:d6:90:4a:14:
3d:7e:bf:d8:0b:7f:d1:4b:16:5c:d7:90:1e:a3:5d:
39:36:71:7b:e5:e3:ed:38:84:a8:30:3d:8e:eb:34:
a4:09:22:90:d9:9b:35:7e:15:dd:67:7f:af:9e:7f:
be:3f:e3:db:3a:0e:5b:e6:14:c7:13:59:66:f5:5d:
73:2f:60:fb:fb:7c:12:f7:64:13:d0:a5:0c:61:45:
8d:64:91:16:7e:ea:d7:f1:a5:3a:7d:fe:71:55:30:
b2:c3:08:8f:5e:f1:00:f8:0e:42:b0:87:68:a8:82:
6d:6d:2e:5d:b0:a2:c3:79:32:24:fb:d0:62:1f:cc:
c3:13:1c:40:cd:c1:d8:20:7d:6d:f4:55:d1:e9:35:
7c:97:aa:fa:e0:cc:f8:52:20:dc:bb:63:11:33:7d:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BE:E3:55:0A:5C:10:B8:E8:D7:1B:B8:F8:1B:04:29:D0:30:73:05
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/WL7jVQpcELjo1xu4-BsEKdAwcwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.224.0/20
92.246.104.0/21
185.114.116.0/22
185.157.216.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:39:d7:43:46:21:73:4c:51:66:7b:34:07:9e:0d:11:bf:2a:
e3:9e:15:4b:55:3d:cb:c3:b3:b4:03:d9:06:48:e9:a5:38:64:
a1:ec:fd:43:a1:69:08:c8:2d:e7:4b:a0:af:c7:bc:c0:dd:ad:
d5:cd:c3:ee:e2:22:53:bd:03:89:ca:3b:03:e3:92:99:f0:73:
db:12:d3:5f:a5:66:ad:71:d0:6f:98:24:7d:1f:2c:a8:7a:eb:
00:83:aa:73:3b:ae:78:61:c0:ed:d1:2e:0f:bc:02:a8:52:84:
03:8c:4d:01:d6:1a:70:47:9d:d2:83:35:ce:8a:f0:7d:6c:15:
ac:b0:27:93:30:42:1c:87:c8:d1:ad:03:09:c0:e2:a1:2f:18:
62:53:ce:66:d1:ef:71:04:e8:ed:d2:b1:83:08:8d:ec:9a:90:
e0:2c:de:7f:08:78:d3:45:9d:6d:a2:2b:9c:0d:7e:fb:c3:0a:
b3:82:fb:e7:b1:aa:74:fd:30:c8:c6:fd:95:1c:94:a6:26:6b:
06:fd:2f:45:c5:4d:9f:47:68:ce:35:a0:14:75:37:85:1b:a9:
c9:e1:81:70:ec:3a:ac:de:3e:d9:b8:34:35:cf:33:41:71:af:
da:56:86:d7:52:d2:dc:24:0f:5f:3f:91:f5:6d:57:40:d5:eb:
5b:16:4b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:12 2024 by rpki-client on console-fra.rpki-client.org