Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/WUstWl87QBanTmWURCVqXXL8U-8.roa
File: WUstWl87QBanTmWURCVqXXL8U-8.roa (raw, json)
Hash identifier: mzZYG9J7D7TdzZo6enH47d3mLQxZKbjYp8gkyKRxR54=
Subject key identifier: 59:4B:2D:5A:5F:3B:40:16:A7:4E:65:94:44:25:6A:5D:72:FC:53:EF
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 018CCA2A86C3FE7B09E4AE28D6A8332AFEFD
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/WUstWl87QBanTmWURCVqXXL8U-8.roa
Signing time: Tue 02 Jan 2024 12:33:53 +0000
ROA not before: Tue 02 Jan 2024 12:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 91.200.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:86:c3:fe:7b:09:e4:ae:28:d6:a8:33:2a:fe:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jan 2 12:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=594b2d5a5f3b4016a74e659444256a5d72fc53ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:a9:c6:29:72:30:a0:7f:1d:fc:17:f3:59:
fa:05:43:5a:d6:ad:c7:5c:b9:38:85:fe:fd:a8:c8:
6d:19:68:21:ba:8e:2a:1e:2c:95:e3:0d:8d:62:05:
6a:1b:34:86:87:0a:0b:9a:ab:40:aa:d6:6b:2a:70:
e8:da:db:25:38:8f:9f:91:a4:8e:4b:f5:9b:3e:cc:
af:d7:47:6f:2f:43:da:7c:7b:df:1f:56:40:db:7b:
6f:6d:92:34:a8:92:10:b8:e1:d4:d6:27:5c:ac:68:
db:5c:21:29:26:fc:d4:f4:7c:c3:90:96:41:6a:b4:
25:6a:10:11:a0:f1:22:c7:a4:72:46:6c:b9:9b:77:
52:3c:18:c1:97:d5:91:c7:b1:96:aa:30:5b:f1:d9:
b5:37:12:49:3a:e5:20:01:c5:cf:62:c5:32:33:d6:
25:78:76:85:cd:53:15:4a:27:08:31:08:de:85:16:
e3:f1:ad:08:ae:ed:96:c3:5b:9d:dd:1a:be:43:04:
53:bb:70:cd:da:b0:6c:ab:13:56:6c:82:fd:54:9a:
91:80:81:72:40:6d:de:2a:cf:b4:da:c2:58:3b:c1:
8d:6a:43:47:2d:d5:69:d5:5f:72:a8:56:7c:a3:5f:
c5:50:5f:64:43:4a:15:7c:87:bf:de:0d:96:9d:de:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4B:2D:5A:5F:3B:40:16:A7:4E:65:94:44:25:6A:5D:72:FC:53:EF
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/WUstWl87QBanTmWURCVqXXL8U-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.59.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1f:ee:03:6a:9f:85:e8:b3:c4:2f:6c:56:ea:2a:66:2e:21:
9c:f3:2d:ac:04:b8:66:a8:4d:05:b2:be:5c:64:cb:09:b8:05:
a7:c1:7e:61:df:e5:6c:5c:c1:b7:08:ec:f5:d9:87:53:de:1f:
84:a3:82:ae:c8:a0:d1:4e:84:5a:f3:4f:aa:0d:cf:a3:11:2e:
9d:6c:6a:24:82:72:ad:50:1c:ee:f8:a2:3f:34:68:47:49:3e:
d8:22:76:4b:f7:59:54:73:ca:2a:63:13:22:0d:a5:08:b3:ab:
b2:35:11:07:e8:f8:2e:84:30:1b:1f:97:27:34:f5:4a:96:6c:
ff:52:84:70:38:8c:ec:89:18:13:f1:7e:e2:fa:1d:23:98:73:
35:64:12:58:9e:23:ed:83:c7:9e:68:56:e2:d5:fe:2a:b7:26:
4e:47:ee:0f:83:ff:0b:81:07:53:f8:29:d7:50:74:13:d2:08:
cf:5c:18:7e:67:5f:f2:27:05:76:97:df:b2:a4:35:82:d6:12:
27:53:9b:88:45:c3:f7:4c:43:c5:6b:3d:69:ac:41:b7:cd:5d:
31:85:dc:3e:19:e3:b5:85:fb:e0:62:35:7c:ae:4d:2e:c4:ca:
4b:88:14:72:d5:11:8f:33:22:26:17:79:de:37:dd:3c:d3:fc:
d3:fe:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:46:54 2024 by rpki-client on console-fra.rpki-client.org