Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/WP_NfK7fUg5RzYuDMO2aNvohzfo.roa
File: WP_NfK7fUg5RzYuDMO2aNvohzfo.roa (raw, json)
Hash identifier: /OcEWhtfd1B4tApncWLzlILiE6Jr6F5hu+OUuFzqA1k=
Subject key identifier: 58:FF:CD:7C:AE:DF:52:0E:51:CD:8B:83:30:ED:9A:36:FA:21:CD:FA
Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial: 018F59BAF8C9E036AA7EEE8F01BC63A803A9
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/WP_NfK7fUg5RzYuDMO2aNvohzfo.roa
Signing time: Wed 08 May 2024 19:42:56 +0000
ROA not before: Wed 08 May 2024 19:42:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49556
IP address blocks: 185.155.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:ba:f8:c9:e0:36:aa:7e:ee:8f:01:bc:63:a8:03:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Validity
Not Before: May 8 19:42:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58ffcd7caedf520e51cd8b8330ed9a36fa21cdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:97:ab:a7:ab:ea:8a:ec:13:55:6d:91:8a:
f0:01:fd:08:11:31:3b:76:3f:a9:6d:5c:3b:0d:72:
28:b9:73:b4:2d:64:fa:36:a7:de:24:b3:86:7b:fa:
53:ff:e2:95:28:b7:15:5e:f0:2f:ae:bc:85:01:b8:
54:c9:d6:49:c4:65:14:cf:60:64:b3:ed:8f:b7:4c:
86:c3:3e:a3:36:4b:3b:d0:19:be:f9:4f:91:3c:56:
4c:a9:bc:8b:af:f1:7a:0f:95:02:15:36:e7:75:df:
3e:c4:77:08:62:e3:36:5e:b2:20:cc:6f:9b:7e:fd:
bd:8e:af:eb:47:cc:71:e1:80:61:be:cb:38:1d:60:
64:2b:78:fb:b0:e1:d8:4a:f4:2c:e2:e9:f6:ee:da:
6d:7f:9b:db:4d:e3:40:3a:4e:c4:f5:f2:32:a5:4a:
1f:04:60:7a:d8:92:00:bd:00:7e:eb:a8:95:1b:47:
d1:e6:14:07:5f:67:f6:54:cd:8f:6f:a6:47:b3:79:
8b:7c:5a:d4:66:b8:8d:33:03:b5:cb:ac:c0:1b:24:
46:68:a8:67:2c:81:ce:94:92:d5:1b:99:3e:04:89:
2a:63:15:ec:e5:3c:8f:39:56:08:c9:59:67:13:0a:
d0:ab:d1:12:95:7e:b9:c6:ff:50:6e:95:a2:1d:2f:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:CD:7C:AE:DF:52:0E:51:CD:8B:83:30:ED:9A:36:FA:21:CD:FA
X509v3 Authority Key Identifier:
keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/WP_NfK7fUg5RzYuDMO2aNvohzfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.72.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c9:b2:af:c4:bf:e9:98:69:56:32:cf:e9:9c:68:fd:58:41:
a6:e9:0e:dc:8f:8e:f7:46:f8:41:10:f1:18:21:f2:d8:a6:38:
bc:3a:56:1d:78:f7:6f:fb:a1:b0:87:2e:36:8d:93:02:09:a7:
2a:ab:40:38:90:78:70:5c:f4:62:f8:aa:e4:82:a4:a8:04:03:
93:f9:5d:e5:1b:f3:c0:24:20:09:aa:73:e2:cd:0a:20:94:9a:
31:b8:80:fb:cd:ec:b0:69:6a:6d:27:86:fb:16:af:fb:5d:89:
bb:a9:21:c4:67:d1:f4:07:bc:a4:85:1f:04:e3:84:ca:bf:85:
ae:4f:ff:89:fd:89:a5:f1:f7:63:56:7d:94:e2:4d:0b:8e:54:
bd:5d:95:33:8c:54:21:d8:74:dc:41:3b:08:fa:4b:c1:55:2f:
45:d8:84:b1:4e:ba:8e:7e:7f:4c:7a:8b:08:2e:31:85:93:00:
b5:bc:fc:41:92:a1:25:3e:aa:5c:74:36:af:31:47:d9:b6:c0:
0e:0c:e5:84:d1:5e:c6:ea:e1:df:3b:6c:4b:12:52:f5:8c:5e:
01:2b:40:51:8b:7d:8d:20:c9:2f:bc:c8:3e:b4:06:d5:a9:5c:
6b:26:bb:67:ea:3f:bb:ee:c7:b9:2c:78:a5:62:25:d9:fe:36:
14:e0:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 02:23:33 2024 by rpki-client on console-fra.rpki-client.org