Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WWkD1i88NapsuNqn6sJdb8Bunzk.roa
File: WWkD1i88NapsuNqn6sJdb8Bunzk.roa (raw, json)
Hash identifier: GrsuJAAjE1ppFv5UhTmkW2CBAi+h6Nb5i35HvBTCkdw=
Subject key identifier: 59:69:03:D6:2F:3C:35:AA:6C:B8:DA:A7:EA:C2:5D:6F:C0:6E:9F:39
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A767E763C71AF67CAC9E0520197F0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WWkD1i88NapsuNqn6sJdb8Bunzk.roa
Signing time: Tue 02 Jan 2024 12:33:49 +0000
ROA not before: Tue 02 Jan 2024 12:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 62.76.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:76:7e:76:3c:71:af:67:ca:c9:e0:52:01:97:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=596903d62f3c35aa6cb8daa7eac25d6fc06e9f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:a3:d4:25:d0:7d:6c:79:fc:20:ab:3d:5d:
ec:8e:3b:8c:ac:3b:04:80:de:2c:e9:72:12:87:7f:
73:d3:e3:fb:8f:fd:4f:97:96:4b:1c:a1:d8:8a:b0:
6b:72:db:93:bb:f1:be:d5:db:7f:89:87:ff:82:c9:
01:93:12:75:e7:1c:92:6c:db:d9:4e:3a:0d:3f:27:
21:e0:d5:11:ad:fe:80:46:73:f4:dc:b2:65:ff:5f:
42:ed:f7:df:e3:8d:55:fe:6a:a0:f3:fd:ef:9f:9e:
fe:e8:f9:9e:9b:d9:c1:80:ee:da:d9:07:55:c3:a6:
1c:bf:88:b9:8c:c9:27:ac:c8:19:40:50:fc:39:1f:
f1:32:28:ae:3c:81:d3:57:64:17:e2:25:c1:47:51:
d1:dd:42:1a:a6:17:7f:e7:ea:1f:82:53:f8:97:65:
ad:a9:c7:82:d4:e7:cb:5d:c2:8f:0b:91:84:f2:37:
e5:a2:3c:d3:e6:51:ac:ba:1c:a2:7e:65:48:8b:7c:
6c:56:3e:39:29:52:81:3e:23:41:29:8b:ac:fd:fa:
c8:4b:48:75:b5:6b:df:f8:a0:f8:f8:bd:d2:93:58:
f2:e5:fe:46:44:3c:b9:23:9e:5e:0a:56:4d:8b:f4:
ce:a7:8d:d2:bc:85:15:c3:ed:05:e3:59:bd:3a:0d:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:03:D6:2F:3C:35:AA:6C:B8:DA:A7:EA:C2:5D:6F:C0:6E:9F:39
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WWkD1i88NapsuNqn6sJdb8Bunzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:21:38:97:fd:b4:ca:2b:fc:50:40:10:69:5c:3e:13:5a:77:
8c:97:a1:6e:85:62:18:cb:c8:8f:5a:6a:22:5c:ed:ee:aa:cc:
c4:00:10:88:9b:84:6b:bb:c5:36:3c:dc:18:92:bc:45:ab:07:
82:7e:7d:59:50:d2:15:40:eb:0d:7c:f0:ae:e2:c3:e1:b8:7d:
73:b5:4f:ce:6f:22:79:b9:cd:7d:45:05:e4:0a:be:1c:c7:45:
9c:b3:cc:f5:88:87:06:20:87:c8:bf:35:17:61:8e:d1:b6:4e:
82:17:c7:11:72:f6:a6:bd:53:32:a6:cd:16:52:e0:2a:c0:44:
49:88:1b:a0:69:c8:5b:a5:dc:19:d1:a7:bf:c0:df:12:7b:c0:
b0:53:9c:89:75:d4:e1:82:17:13:01:6f:2a:0b:a3:d3:f7:0a:
01:39:f9:36:88:6a:c8:3d:60:61:7b:75:32:3c:65:35:c3:c3:
71:4a:89:91:4a:d0:4b:6b:25:5c:7b:87:7f:fd:23:83:43:d6:
ad:2c:d5:4c:61:d3:bb:33:9a:58:ff:51:b7:2e:15:12:25:a8:
3b:ec:d7:35:1d:3a:52:28:26:45:60:6f:89:76:71:1b:81:3b:
9c:5d:e8:e8:7c:d5:75:b1:4f:d0:55:1f:21:83:bd:b5:f3:3a:
77:55:80:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:05 2024 by rpki-client on console-ams.rpki-client.org