Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/WPscA-L06bAA9F5ooBe7Pf2sOZE.roa
File: WPscA-L06bAA9F5ooBe7Pf2sOZE.roa (raw, json)
Hash identifier: NNFx9yaQDJ0RagbXJX6TLI9ki3s7UWcjfjrthKBCj+k=
Subject key identifier: 58:FB:1C:03:E2:F4:E9:B0:00:F4:5E:68:A0:17:BB:3D:FD:AC:39:91
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 018CC94E690EC34FB3495D09AD4BFA6008B2
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/WPscA-L06bAA9F5ooBe7Pf2sOZE.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43444
IP address blocks: 85.239.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:69:0e:c3:4f:b3:49:5d:09:ad:4b:fa:60:08:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58fb1c03e2f4e9b000f45e68a017bb3dfdac3991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6a:96:b1:df:fa:08:1a:c7:4c:83:06:56:d6:
ca:db:d4:01:e4:23:7b:fa:06:13:82:64:9f:f9:79:
9c:ba:72:f0:5a:1e:45:26:2b:49:69:99:c8:d4:07:
7e:4d:6e:55:8b:e3:ba:5b:09:2a:50:32:5e:09:13:
d5:8b:af:3d:4a:37:ea:70:99:69:f3:0a:25:8b:a8:
ba:d6:86:6e:05:31:cc:3c:32:4d:ab:5a:8c:a9:23:
2b:93:97:83:d6:86:55:13:72:fb:1a:0e:16:52:9f:
27:13:25:d1:30:20:ee:c9:42:58:e8:48:3a:32:b3:
f9:a4:d7:46:00:18:0d:65:4f:8d:9b:f4:92:9f:94:
8e:e7:e8:90:03:cc:ab:66:c5:31:17:8f:7a:04:a7:
9c:8a:8a:a0:f9:f7:66:67:34:ea:e7:d1:3f:ad:69:
40:a3:26:68:9b:3b:b3:df:5c:23:a4:01:70:1e:55:
08:1a:db:a4:ab:e1:0e:80:c1:8c:82:3e:c7:9d:70:
3f:ae:ae:b3:3d:d7:be:3a:fb:a6:a7:2f:0a:f8:4c:
18:26:78:f1:13:28:04:c0:fb:35:a3:7b:90:0c:08:
00:f8:8a:39:50:a4:00:c2:7c:b8:56:06:57:9c:c6:
cf:04:a6:97:e7:98:00:1d:83:bc:92:b5:c4:aa:98:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FB:1C:03:E2:F4:E9:B0:00:F4:5E:68:A0:17:BB:3D:FD:AC:39:91
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/WPscA-L06bAA9F5ooBe7Pf2sOZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.42.0/23
Signature Algorithm: sha256WithRSAEncryption
99:f2:35:7d:8e:1d:03:f3:bc:7b:b0:71:81:00:0c:d8:6f:77:
d9:af:c5:0a:45:70:0a:00:e6:26:ec:69:73:35:40:e9:d2:09:
a3:82:fb:7e:30:69:27:fa:72:e0:67:8a:b0:58:d9:f4:56:8a:
dc:b5:98:1d:62:d2:23:29:f5:b5:52:79:6f:be:d6:77:5a:15:
77:c2:37:3b:94:d8:d5:64:a8:fb:ef:d7:77:91:1f:5f:78:3d:
14:00:b9:f5:cf:02:0b:89:e3:a4:65:d4:e1:4e:20:df:fd:3c:
93:33:51:0d:d6:06:aa:e1:3e:53:a0:d9:f9:ff:c9:0f:98:4a:
ff:5f:07:47:44:26:ad:69:4b:b4:b2:af:8d:f2:bf:a3:b2:f1:
10:72:48:fe:71:73:4a:1b:84:bd:bb:60:58:37:66:f0:0e:be:
9e:7d:3b:0c:2c:ab:1b:76:ae:d6:cb:fe:44:f7:17:75:33:ce:
c7:67:c5:02:75:2f:bf:c4:ba:e9:68:b6:fb:f0:cf:96:b5:8d:
a8:8f:d3:a2:d7:90:44:85:4f:cb:97:ab:c3:bd:de:92:b5:ea:
db:76:65:c4:09:e2:b2:11:43:35:5a:7f:e9:e6:e3:52:6b:10:
09:9b:a4:51:76:10:8c:93:39:cd:de:10:78:a4:61:e9:9e:d9:
77:62:f7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:33:50 2024 by rpki-client on console-fra.rpki-client.org