Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/wYl4KvoTlJxtSn-q-v4H1Bwf2zc.roa
File: wYl4KvoTlJxtSn-q-v4H1Bwf2zc.roa (raw, json)
Hash identifier: OAnzeayFWvlCByiwwSgS21SQ5uPUDiLdsWoxz63BR/E=
Subject key identifier: C1:89:78:2A:FA:13:94:9C:6D:4A:7F:AA:FA:FE:07:D4:1C:1F:DB:37
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 018CC8DD135CD0318765631BCD6FBFE54974
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/wYl4KvoTlJxtSn-q-v4H1Bwf2zc.roa
Signing time: Tue 02 Jan 2024 06:29:40 +0000
ROA not before: Tue 02 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201160
IP address blocks: 185.29.192.0/24 maxlen: 24
185.29.195.0/24 maxlen: 24
185.29.194.0/24 maxlen: 24
185.29.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:13:5c:d0:31:87:65:63:1b:cd:6f:bf:e5:49:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Jan 2 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c189782afa13949c6d4a7faafafe07d41c1fdb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:18:32:f7:17:ba:d8:d9:64:af:b9:52:a8:
c9:4b:68:dc:5d:03:c1:85:c9:46:67:28:d6:1c:fd:
41:56:54:d6:03:51:4f:e7:e6:31:e3:3c:06:65:75:
e1:63:0f:72:1a:36:9a:95:96:12:89:67:93:31:50:
00:87:04:2d:5a:9b:15:46:a3:af:63:bd:3e:ad:76:
cb:c8:e7:32:89:ac:8e:38:3b:ce:62:82:42:99:2b:
a2:80:69:5b:85:09:74:57:e6:b6:ad:fc:11:70:0b:
ee:e6:c4:d5:19:33:aa:23:ab:ae:d1:87:10:e3:27:
2c:eb:a9:5b:23:65:a2:be:cb:09:f4:6c:c4:c9:91:
7b:dd:02:29:91:40:b1:87:1c:b4:76:07:76:b7:56:
4c:9e:88:99:28:e0:b9:e3:aa:4a:a3:2a:39:d0:56:
eb:07:76:f3:5e:1a:e4:8c:79:7f:ae:05:e8:c2:05:
43:14:67:22:09:34:0f:95:8c:66:d1:36:58:eb:cf:
11:f0:2d:c4:36:47:6d:95:a0:fa:d7:85:81:c2:4a:
02:3f:23:4c:db:30:4a:79:df:82:33:07:31:10:bb:
ca:c8:14:a6:83:8e:ac:94:39:eb:5f:05:82:56:62:
c6:23:b8:ee:89:e0:80:cc:dd:20:af:ed:8f:2d:06:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:89:78:2A:FA:13:94:9C:6D:4A:7F:AA:FA:FE:07:D4:1C:1F:DB:37
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/wYl4KvoTlJxtSn-q-v4H1Bwf2zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.192.0/22
Signature Algorithm: sha256WithRSAEncryption
65:91:fd:f1:ee:25:b8:72:9b:f9:3e:c2:c8:28:a7:3b:b6:00:
a3:f2:d9:ea:d7:b1:7d:d0:06:75:33:8e:c7:0d:f0:29:4e:c7:
bd:e1:f3:50:0d:2d:c5:66:46:84:60:ed:d0:3d:77:e3:0c:ec:
94:3b:db:dc:ff:3d:55:d7:ca:6c:fb:99:0f:77:a2:1d:dd:d6:
c4:84:72:79:a4:1c:84:44:a2:a9:82:69:38:c3:18:a0:c1:f4:
bb:41:69:0a:99:00:cb:c5:5a:f6:16:8f:8d:2a:cc:bd:be:a7:
14:eb:4a:b1:67:8c:72:28:10:cc:c8:97:2e:23:df:97:59:24:
bf:68:7f:4e:c5:f4:aa:53:49:ff:05:ce:bb:7f:5a:a0:00:96:
84:66:2e:a4:24:5e:32:19:d0:69:bf:b2:c0:69:4a:78:8c:14:
80:9f:ee:7f:f2:0e:19:2e:d9:5b:fe:23:7a:0b:4d:0a:d0:03:
00:e7:07:40:ec:d6:03:f0:55:f7:4e:81:2b:69:6c:d2:f1:ef:
3c:d0:92:4d:8d:d8:4e:21:4d:d3:cb:34:12:52:14:87:00:b0:
1b:ff:85:ab:4a:c0:17:c4:e5:8b:81:90:22:e7:f4:b8:09:7f:
c6:5b:84:ea:a4:d3:c2:9b:f7:b2:88:26:ef:70:aa:90:e8:98:
ec:2f:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:18 2024 by rpki-client on console-ams.rpki-client.org