Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/wdkN7410J6eBg9eWjYxLVEUtvts.roa
File: wdkN7410J6eBg9eWjYxLVEUtvts.roa (raw, json)
Hash identifier: qxNIJ08tnPOPZkQpaDzdDku6dvvmj5NLdxTeC1qW8HQ=
Subject key identifier: C1:D9:0D:EF:8D:74:27:A7:81:83:D7:96:8D:8C:4B:54:45:2D:BE:DB
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018DAE626ADADD142875144FF08F5485AF11
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/wdkN7410J6eBg9eWjYxLVEUtvts.roa
Signing time: Thu 15 Feb 2024 20:08:21 +0000
ROA not before: Thu 15 Feb 2024 20:08:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 84.247.59.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 07:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:62:6a:da:dd:14:28:75:14:4f:f0:8f:54:85:af:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Feb 15 20:08:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1d90def8d7427a78183d7968d8c4b54452dbedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:5e:49:62:08:ea:e8:1b:a1:93:39:14:6c:
c3:3c:95:a1:eb:fd:e1:86:20:32:3f:b0:4b:0c:01:
37:f1:34:07:4e:56:ff:16:5d:bf:5a:92:cd:32:3a:
de:bf:f5:77:18:7d:51:16:80:7f:c3:5e:1e:2f:48:
c5:94:96:b1:d3:02:48:5e:e9:f2:40:4c:13:98:8a:
53:45:78:a8:5f:fb:29:21:ea:0b:e7:bd:f6:e0:d5:
2e:7a:d0:49:5a:44:9b:9a:e0:ea:7c:a7:6f:4e:a8:
a8:6d:bb:a5:48:98:ad:8b:e0:c5:7d:5c:d7:37:71:
95:3a:0d:4a:e1:83:03:93:dc:2a:f3:64:fd:11:4e:
62:67:3d:40:df:7e:d5:ff:e6:34:17:74:08:1e:f8:
34:47:64:4e:30:a9:f9:f4:f5:f3:00:50:18:7c:7f:
fa:bb:c1:a6:6a:5e:2e:fd:f2:2a:62:04:02:67:70:
a5:ed:1c:2d:d7:ee:23:b3:20:a3:5a:8e:6e:4f:ae:
14:11:da:80:79:79:2c:14:ac:be:85:3c:7f:2d:d9:
ee:bd:59:2e:25:74:07:d4:76:d4:5f:70:da:83:37:
4a:05:4f:de:e8:9f:79:16:67:82:65:6a:e7:d6:d8:
8d:c6:4d:f6:ad:48:c5:45:98:5a:e0:34:09:9e:49:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D9:0D:EF:8D:74:27:A7:81:83:D7:96:8D:8C:4B:54:45:2D:BE:DB
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/wdkN7410J6eBg9eWjYxLVEUtvts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
89.42.40.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9d:9e:ad:eb:10:5f:35:29:72:4c:ae:07:80:f9:7b:43:63:
c7:10:7b:90:94:79:0d:c6:36:66:68:17:7a:4c:34:60:e9:12:
01:2a:9b:a2:be:92:9b:60:5d:8c:d6:5a:3e:41:2f:f6:49:a5:
50:94:75:38:b3:09:0f:15:7c:6c:96:e2:88:81:1a:43:28:a2:
1f:cf:1a:a6:e3:ce:83:35:3f:83:85:13:6e:da:6b:d2:38:4d:
19:67:ed:19:ad:a9:f2:3c:87:c8:f3:cd:24:2f:1b:22:ab:35:
96:60:42:85:f9:66:71:13:11:26:3a:c5:27:ab:13:bf:42:81:
60:9e:a8:64:57:5a:1b:df:7d:ee:95:f9:3d:b6:f8:2f:06:d4:
bc:02:a7:c7:70:70:74:ad:d8:f5:74:1b:67:75:d8:19:e6:95:
be:c8:7d:f4:70:ab:c9:f2:52:bc:d2:71:78:5f:1f:99:47:ea:
29:e9:fe:c7:10:56:33:c7:6b:ff:d7:61:d8:f5:7a:66:f2:b6:
42:c5:1a:45:e0:93:26:87:df:34:d4:cc:89:3a:5b:85:c8:41:
44:b7:93:10:3d:c6:da:b0:72:d4:32:2a:bf:bd:9f:4a:fc:11:
61:45:63:b9:2d:d5:22:c5:c5:88:41:09:ae:ee:c7:15:fa:a0:
b5:54:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:16:55 2024 by rpki-client on console-ams.rpki-client.org