Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/WguD_FtXWIfpXZDmaAPoq4nHAAI.roa
File: WguD_FtXWIfpXZDmaAPoq4nHAAI.roa (raw, json)
Hash identifier: KPwdaQFk7r0aQC7RqXYQZ751USryVypR8fgfjxq5Sy4=
Subject key identifier: 5A:0B:83:FC:5B:57:58:87:E9:5D:90:E6:68:03:E8:AB:89:C7:00:02
Certificate issuer: /CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Certificate serial: 018D079019F26E61C7E9EED786B7F835CB03
Authority key identifier: 06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/WguD_FtXWIfpXZDmaAPoq4nHAAI.roa
Signing time: Sun 14 Jan 2024 10:41:40 +0000
ROA not before: Sun 14 Jan 2024 10:41:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.23.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:07:90:19:f2:6e:61:c7:e9:ee:d7:86:b7:f8:35:cb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Validity
Not Before: Jan 14 10:41:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a0b83fc5b575887e95d90e66803e8ab89c70002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:53:b0:11:1f:5c:66:2a:60:52:56:3d:f7:
71:00:b6:6a:9d:e8:13:e5:81:ea:f3:4e:af:58:4c:
2e:73:2a:b2:4f:6f:be:18:44:9d:88:75:59:2b:9a:
ec:03:3b:58:18:10:99:1e:04:4e:66:08:0e:f7:96:
3d:28:4e:ad:1c:66:f1:0e:04:f4:12:33:1f:4e:e6:
d2:c5:96:78:ea:a0:0b:22:e1:f8:6c:a4:0d:18:39:
b4:cb:29:74:ec:5e:44:02:e7:c8:fe:e7:ed:b6:d3:
44:02:73:12:77:6a:cf:38:32:47:01:7b:93:78:4f:
c0:e5:59:ea:c6:4e:aa:09:bf:3c:c3:a5:11:00:14:
ee:8c:ea:a6:94:57:36:9c:e6:db:07:85:74:4f:d7:
d1:10:9b:2a:34:20:2f:dc:f7:9a:3c:0c:d4:e5:3b:
87:eb:37:37:85:75:57:d6:8a:da:26:28:8f:a5:a3:
f7:98:bd:57:f8:6a:d1:92:84:18:21:7c:37:77:fb:
4d:f9:43:e6:58:91:b4:1a:02:12:11:40:e8:7d:44:
65:16:fb:5f:3e:c0:bb:64:8b:dd:72:d9:2d:0e:d6:
52:fc:cd:49:37:33:cb:13:08:71:e5:1d:23:31:fe:
ae:13:8e:bf:ea:5c:3a:f0:eb:ce:f0:ef:e3:5a:8f:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0B:83:FC:5B:57:58:87:E9:5D:90:E6:68:03:E8:AB:89:C7:00:02
X509v3 Authority Key Identifier:
keyid:06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/WguD_FtXWIfpXZDmaAPoq4nHAAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.152.0/22
Signature Algorithm: sha256WithRSAEncryption
72:dd:c0:f0:ed:47:ab:a0:f6:8b:46:c8:17:8d:b2:80:ff:ea:
62:1b:9b:d3:9b:7d:7f:34:e9:ee:39:79:07:4e:da:d2:74:3e:
a1:fd:4d:72:e8:22:7c:3d:34:09:e3:50:d3:31:4b:ae:b3:ff:
56:ab:e1:3d:b0:06:bf:f1:d9:a3:b6:ed:f2:e4:57:12:29:c3:
8d:9f:d9:aa:8d:38:db:51:d4:fa:d3:7a:1f:20:83:36:98:11:
8b:58:4d:c7:d6:bf:ad:c2:af:7e:e1:f1:c9:ba:87:67:38:13:
41:7a:75:91:f1:29:84:1f:24:69:2f:73:3e:ca:ae:e3:eb:a6:
fb:d7:67:51:db:57:f2:60:0d:be:85:98:f6:fe:1a:ef:3b:31:
a1:64:18:9a:b1:70:ab:fe:3d:f3:ac:fd:3b:2a:10:ab:4c:35:
3a:c5:03:74:f1:f7:67:99:ee:01:45:3f:00:27:a5:49:60:82:
2f:8c:04:be:1c:0b:46:1b:2c:fc:6b:8e:8b:7d:1a:46:75:9f:
07:55:c3:d0:66:a4:62:85:0a:13:d2:21:b4:b3:3f:ea:a1:19:
bb:d0:dd:f6:45:e9:c9:8a:0c:41:b9:54:03:54:6b:a5:7c:9b:
22:93:79:c3:00:2b:45:46:1c:39:b9:11:cf:24:75:b5:5f:41:
15:1f:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:28:54 2024 by rpki-client on console-fra.rpki-client.org