Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wnMlKVgF8AWCs63FClZ8x-2sIxo.roa
File: wnMlKVgF8AWCs63FClZ8x-2sIxo.roa (raw, json)
Hash identifier: Xvg1vivXnhwZqb2pN4cGMDSHOx6fKbtwJIWOk2x2pA4=
Subject key identifier: C2:73:25:29:58:05:F0:05:82:B3:AD:C5:0A:56:7C:C7:ED:AC:23:1A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CF746CB2D6096D07FFBEDC402A611357D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wnMlKVgF8AWCs63FClZ8x-2sIxo.roa
Signing time: Thu 11 Jan 2024 06:47:40 +0000
ROA not before: Thu 11 Jan 2024 06:47:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199582
IP address blocks: 83.143.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:46:cb:2d:60:96:d0:7f:fb:ed:c4:02:a6:11:35:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 11 06:47:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c27325295805f00582b3adc50a567cc7edac231a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:0b:c7:0b:1c:a0:0c:43:88:e3:fc:4f:fe:
5d:e8:cf:af:08:b6:e2:af:cc:51:ee:03:97:05:76:
b5:22:bb:85:ba:dc:46:60:21:65:6d:df:89:9f:68:
ab:6b:1a:42:13:95:5c:8a:be:db:b8:ad:0c:8b:f0:
f3:b2:54:94:7b:1b:bb:99:41:f1:ca:1d:91:71:fe:
97:53:2c:88:2c:0d:d9:27:c2:91:43:13:c6:af:5e:
a4:9b:48:f3:d5:aa:d1:25:c1:83:c2:4f:33:fd:07:
2e:bf:99:40:39:78:ac:ac:48:38:66:d6:97:dc:c9:
10:61:60:69:1a:7d:89:e9:61:45:82:65:a6:81:8c:
9f:cd:76:b6:93:58:35:bc:d4:03:cc:a3:10:13:da:
e7:f0:44:dd:47:c3:fc:38:83:3b:80:73:38:e6:c0:
b4:13:93:79:02:7a:c3:df:63:da:ea:a9:05:af:0a:
d6:3d:22:e3:b5:82:ea:98:74:34:8f:09:9d:d3:9c:
79:da:f2:b3:61:fc:95:6f:bd:76:82:d6:0d:c3:07:
e7:eb:e2:67:9c:bd:9d:71:bd:11:ad:31:78:e2:13:
de:b4:73:52:2c:2c:a2:3d:5b:9b:85:da:89:f0:30:
29:f6:d5:e9:42:e3:ce:0c:f8:3d:10:3a:03:66:dc:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:25:29:58:05:F0:05:82:B3:AD:C5:0A:56:7C:C7:ED:AC:23:1A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wnMlKVgF8AWCs63FClZ8x-2sIxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.112.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a9:38:0e:3e:a3:5d:eb:d2:c1:e7:8e:e3:0c:0c:5b:8c:70:
57:76:40:42:bf:79:a2:45:9b:ff:f9:3a:b0:11:e1:e7:ad:10:
ba:be:14:0b:9e:bc:6d:ea:2e:4e:49:bb:e8:36:ec:63:b2:e0:
54:58:ff:30:c2:1b:fb:92:61:fc:66:1f:21:4b:7b:cf:53:71:
fd:b5:19:f4:10:52:51:3f:e1:db:ae:2c:38:e4:68:98:c7:ff:
16:80:cf:b1:44:bb:99:e5:b0:51:b0:6b:11:40:1d:af:57:20:
04:7d:12:6a:ef:34:5d:3f:25:ee:8f:17:47:81:94:f3:3b:f8:
5e:57:a3:f5:3a:d5:b3:41:d9:fd:7e:e2:ac:c2:c5:94:14:c1:
60:64:5b:2a:a9:1b:45:99:54:42:a8:f5:b4:df:30:90:19:c2:
75:31:af:01:0b:d6:bb:35:f1:99:e1:93:c8:5f:8b:5f:e8:24:
89:b7:f7:36:40:60:f2:1b:13:51:ba:58:3a:ec:6b:1d:21:83:
3b:a3:42:ed:23:2f:a0:b1:2a:ee:46:32:8a:5c:d5:2a:a7:4c:
ba:24:1e:ac:8b:5d:71:ef:af:9b:c3:aa:72:92:16:43:c8:e0:
51:29:23:04:4e:62:20:7c:88:1d:98:8e:39:74:18:14:6e:be:
93:fd:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:04:21 2024 by rpki-client on console-ams.rpki-client.org