Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/Wd0ZGBSPOW5hbh7oUFgjn1FKc5E.roa
File: Wd0ZGBSPOW5hbh7oUFgjn1FKc5E.roa (raw, json)
Hash identifier: 6H2eFA5BzmC/ibF7FU+PauwgI4ry1aTDqj7AUxxrPVM=
Subject key identifier: 59:DD:19:18:14:8F:39:6E:61:6E:1E:E8:50:58:23:9F:51:4A:73:91
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 018CC56E0C1C8D8AE62AEF663F62F648DE11
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/Wd0ZGBSPOW5hbh7oUFgjn1FKc5E.roa
Signing time: Mon 01 Jan 2024 14:29:32 +0000
ROA not before: Mon 01 Jan 2024 14:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213128
IP address blocks: 185.204.138.0/24 maxlen: 24
185.204.137.0/24 maxlen: 24
185.204.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0c:1c:8d:8a:e6:2a:ef:66:3f:62:f6:48:de:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59dd1918148f396e616e1ee85058239f514a7391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:67:0a:44:34:d9:6a:d9:9b:c9:dd:16:b8:
ac:d8:84:0c:b0:6a:55:be:42:94:20:d0:ae:34:68:
05:07:f9:28:8c:30:69:f3:de:45:96:99:fb:51:47:
0d:11:ae:15:10:3b:15:3b:4c:73:2e:a2:82:df:6f:
4a:44:18:2c:d6:fb:74:df:5a:21:65:af:c7:9a:64:
78:2f:20:26:52:4b:25:cc:e5:42:4c:5a:df:3a:ea:
15:34:ee:01:57:c1:0c:91:65:f2:97:50:6a:81:2a:
0f:fe:c0:9b:28:98:8c:d8:be:d9:13:39:c2:eb:fe:
51:ab:87:a0:19:73:9c:6d:b7:0d:69:49:90:b2:8f:
ba:63:f9:67:75:1b:b9:0f:c3:7e:08:9c:83:a5:7b:
66:13:53:7e:e7:cf:f3:16:de:4c:08:72:d8:20:eb:
fe:77:2c:fa:cf:70:9f:8b:35:0f:be:70:ea:71:ad:
73:c5:df:df:77:14:4a:1d:57:a2:b7:70:0c:2e:0e:
ca:1d:8b:b3:b6:1f:13:4b:a5:c5:c0:f4:23:92:63:
6d:36:34:81:16:dd:42:41:04:4e:42:29:ac:01:09:
db:2c:2f:08:d2:92:0d:73:0e:82:74:87:4f:f9:77:
05:c0:b9:1d:71:54:be:c6:0d:2f:3e:3c:bd:52:92:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:19:18:14:8F:39:6E:61:6E:1E:E8:50:58:23:9F:51:4A:73:91
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/Wd0ZGBSPOW5hbh7oUFgjn1FKc5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.137.0-185.204.139.255
Signature Algorithm: sha256WithRSAEncryption
30:2a:80:39:51:b4:48:43:0c:0b:2b:cb:68:19:6c:32:25:2e:
a2:13:33:e4:56:98:d7:f7:4c:9f:9b:77:f9:ba:87:d1:09:66:
b4:6c:76:72:1d:f5:5c:4c:85:72:c5:8c:8d:55:f4:87:07:7f:
66:34:7a:98:03:0c:03:22:bb:c3:26:94:e2:7d:5c:3e:68:ab:
e8:54:9d:8f:10:b3:59:6c:ba:5a:6c:d2:13:e8:5a:b6:14:2b:
c0:b2:c0:9d:58:81:9d:8c:9b:30:a6:bd:50:9f:c2:59:55:f8:
05:a7:9e:31:65:1a:23:07:1f:a6:32:c9:79:93:bd:f5:7d:ac:
b7:b1:36:59:64:a3:5f:34:93:5b:51:fe:8e:6a:0f:e9:c1:28:
a7:fd:66:b9:33:83:ae:3c:b1:9f:02:d9:d4:59:ec:98:2e:ce:
ec:e6:a5:64:e8:95:7c:92:bd:c0:04:26:74:fd:8e:1d:29:44:
fd:bc:ca:e7:3d:6b:ee:91:93:62:ec:9b:51:0f:1b:ad:8f:69:
e6:3c:a0:10:99:a8:a0:5e:ac:7b:2d:cd:bb:07:13:2b:6a:51:
be:16:10:da:3c:ba:72:b4:97:74:e5:16:78:63:f8:51:55:c2:
b0:f3:4a:f4:5b:81:5e:0b:45:43:54:3f:19:58:c4:21:c9:0b:
f7:ea:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:16:14 2024 by rpki-client on console-fra.rpki-client.org