Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WpMGs-aIf4baOr03KaKQTxznBWQ.roa
File: WpMGs-aIf4baOr03KaKQTxznBWQ.roa (raw, json)
Hash identifier: HLWyk7h6+wVVJfWncBlmHcCzjEMV+hUqMepEWUm+NMw=
Subject key identifier: 5A:93:06:B3:E6:88:7F:86:DA:3A:BD:37:29:A2:90:4F:1C:E7:05:64
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A86904D2B79F14123028218DCBF6C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WpMGs-aIf4baOr03KaKQTxznBWQ.roa
Signing time: Mon 01 Jan 2024 18:30:22 +0000
ROA not before: Mon 01 Jan 2024 18:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206153
IP address blocks: 37.230.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:86:90:4d:2b:79:f1:41:23:02:82:18:dc:bf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a9306b3e6887f86da3abd3729a2904f1ce70564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:7a:88:40:e3:0e:81:93:4c:c5:98:22:29:
8c:27:c6:d4:52:c6:b8:a9:33:6e:e6:7f:25:a9:93:
06:21:5f:e6:85:a5:f1:7c:8d:5d:e8:c7:c5:76:4f:
f6:c4:2a:17:92:6b:23:c7:7a:57:a4:85:56:cc:a2:
04:12:cc:8f:90:8a:9c:5f:e9:16:63:1d:c7:f5:cf:
57:45:46:52:97:23:31:dd:b8:b4:76:fd:ff:96:2e:
b5:00:fe:1e:ba:36:bb:de:ae:09:01:9a:39:be:7e:
01:23:63:cc:df:f2:92:da:96:44:42:6c:ee:d9:7a:
a7:15:34:75:17:d9:0e:06:24:41:e4:77:2a:93:0b:
33:ef:e4:27:47:e7:4c:51:d8:90:34:c3:51:cf:8e:
33:17:42:18:66:f1:91:67:2e:0e:62:f2:0c:4e:f5:
f5:7f:b9:3c:5d:32:86:c2:9a:73:fe:6a:06:3b:1d:
58:a0:45:98:3c:42:92:4d:72:34:cb:ba:d2:8b:84:
f2:71:27:78:0e:49:35:25:51:60:7b:ac:fc:37:fb:
7d:63:8e:92:e5:17:fe:ba:44:16:b1:fb:46:f2:2b:
97:39:8e:7f:59:c5:1f:2f:a4:70:2f:27:41:d9:5e:
54:63:a8:c7:1a:3a:ac:56:40:e9:ff:47:2d:61:3a:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:93:06:B3:E6:88:7F:86:DA:3A:BD:37:29:A2:90:4F:1C:E7:05:64
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WpMGs-aIf4baOr03KaKQTxznBWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.159.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ea:55:d8:06:88:2b:18:e2:2e:fc:be:72:3e:27:54:5a:21:
17:00:2b:ca:9d:81:40:95:ca:a4:ca:08:33:9c:5f:48:3e:43:
a8:10:7a:eb:d2:7a:d8:c1:76:7a:6b:29:7b:ad:1b:c2:21:ed:
b3:c3:82:2f:5b:e4:e1:84:84:c4:f9:5f:5d:ac:19:fe:8d:8d:
12:89:b8:62:42:d7:3e:77:06:50:4c:d0:1a:41:7e:4c:7a:71:
97:7d:e8:4c:5e:88:af:a6:d5:eb:d1:0c:69:f2:51:1e:25:20:
fa:35:ef:ec:c7:ee:cf:b5:68:08:c9:25:fe:23:7d:31:61:f3:
e1:95:75:f6:13:39:39:2b:0e:65:27:4e:02:48:c2:31:40:78:
c8:7d:f1:9a:61:e3:f8:5f:a0:9a:38:1b:4e:b5:21:d2:1b:30:
08:69:c6:67:72:f7:7d:06:e0:98:5d:73:9e:5a:28:0f:5a:16:
4d:99:ea:e3:c5:6d:07:d9:f1:99:ae:59:a3:a2:50:32:7c:8c:
23:43:4a:b5:b3:17:4f:e5:47:4f:9e:21:1f:95:5c:59:68:fd:
73:fe:af:0a:35:8a:e0:a0:0f:ea:e7:ae:e8:a7:e9:31:18:74:
32:72:1d:34:dd:52:b6:74:69:e4:d6:51:6c:be:d0:d9:a5:60:
4d:14:25:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:31:40 2024 by rpki-client on console-ams.rpki-client.org