Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/W3Uer_GZpL9fZZp-b4VtT12e5Ug.roa
File: W3Uer_GZpL9fZZp-b4VtT12e5Ug.roa (raw, json)
Hash identifier: pFQsSffsqjaJmwtDo2yh2gDf3vdDMbCRSJOXnq9/XdI=
Subject key identifier: 5B:75:1E:AF:F1:99:A4:BF:5F:65:9A:7E:6F:85:6D:4F:5D:9E:E5:48
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 018CCA9941779A5AD81CCEAB07C4663465F0
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/W3Uer_GZpL9fZZp-b4VtT12e5Ug.roa
Signing time: Tue 02 Jan 2024 14:34:50 +0000
ROA not before: Tue 02 Jan 2024 14:34:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206238
IP address blocks: 185.93.175.0/24 maxlen: 24
2a10:3780::/29 maxlen: 29
2a10:3780:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:41:77:9a:5a:d8:1c:ce:ab:07:c4:66:34:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Jan 2 14:34:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b751eaff199a4bf5f659a7e6f856d4f5d9ee548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:6e:68:62:15:46:2e:c9:dc:a3:10:8f:b6:
c9:df:ce:ae:8d:11:ec:c8:29:af:94:b5:85:d7:29:
a7:f3:a3:1b:c3:61:44:24:84:04:1e:43:ab:e5:aa:
df:ea:af:b5:07:65:c1:a0:bf:02:ce:e8:06:1d:4f:
f2:84:50:b6:2a:70:b4:47:be:ee:6c:c9:0d:a3:88:
67:0f:1c:93:5d:79:b4:2e:d5:56:d7:e4:75:d0:5a:
49:20:41:0e:d4:0e:63:f1:84:bf:a3:be:0d:39:79:
65:a3:e6:f5:9c:84:e2:c6:d6:50:d9:10:03:c2:1a:
14:0f:2a:83:b3:46:9d:84:f9:45:92:10:85:aa:12:
32:7e:14:03:e5:13:41:0b:22:ef:c0:7b:18:36:26:
10:1b:07:51:d1:8c:01:79:23:78:2e:bf:aa:50:b5:
f1:73:92:c3:6a:83:fb:1e:d9:0f:23:98:d0:f4:10:
fc:35:b6:5d:da:d4:96:17:48:38:7e:b5:c3:16:0f:
92:7e:32:09:95:48:ba:25:6b:35:c1:e0:13:b3:55:
f6:57:12:bc:40:1d:55:61:1a:69:89:33:a7:67:d4:
e9:58:17:ac:6f:ee:b1:84:3c:44:18:93:2a:52:a6:
40:4e:ae:9b:aa:96:05:55:1d:8a:0c:3e:5f:b2:34:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:1E:AF:F1:99:A4:BF:5F:65:9A:7E:6F:85:6D:4F:5D:9E:E5:48
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/W3Uer_GZpL9fZZp-b4VtT12e5Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.175.0/24
IPv6:
2a10:3780::/29
Signature Algorithm: sha256WithRSAEncryption
98:5a:87:f7:e4:a1:14:1c:9c:73:1e:ad:ca:0d:3f:1e:e2:34:
18:a1:cc:92:8d:75:03:65:02:8f:64:34:3f:a4:9d:2c:f1:fd:
cd:e6:73:79:32:16:13:54:8e:7d:43:1f:ce:0b:6b:5d:59:24:
b2:90:d6:d1:5c:07:44:dc:e3:f9:8c:cb:9e:3a:49:30:f4:a2:
62:a0:c4:85:0f:47:ff:fc:6b:62:e5:ca:b6:83:79:10:23:2e:
14:e9:65:53:ed:0a:80:ef:6a:00:42:1e:ce:22:07:97:41:a6:
46:6d:d4:12:4a:93:0e:e8:52:58:1d:b1:4d:5e:57:af:73:e6:
25:7f:42:35:fa:48:43:53:14:e0:f0:c4:85:ab:e9:f5:a7:a7:
89:59:83:52:ab:3d:20:63:ac:a4:cb:5f:7d:6d:86:28:b3:aa:
aa:fc:0f:40:c6:bb:a9:20:92:69:ab:c0:3c:48:49:9f:88:a1:
cd:09:ff:d2:6b:33:3d:70:30:dd:8f:4e:d3:93:36:aa:a9:35:
ee:72:3a:8b:79:da:02:63:0a:9d:8b:83:ea:e1:87:3d:85:87:
75:90:21:65:45:3f:42:6b:e3:10:70:7f:8e:b3:39:85:21:0b:
85:5f:fd:42:d5:fa:fb:4e:a5:36:c3:ac:9e:5a:fc:d3:5c:39:
a0:1a:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:03:52 2024 by rpki-client on console-fra.rpki-client.org