Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/WZeukVirhnQk-1y4K7ye09bgafQ.roa
File: WZeukVirhnQk-1y4K7ye09bgafQ.roa (raw, json)
Hash identifier: LM0/l4oNKmhIu3tMYSLtAUGP8/5HsdyNAUuoRXsMUfY=
Subject key identifier: 59:97:AE:91:58:AB:86:74:24:FB:5C:B8:2B:BC:9E:D3:D6:E0:69:F4
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 018CC5DCDC30FF6CA92714867813B9A3ECC4
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/WZeukVirhnQk-1y4K7ye09bgafQ.roa
Signing time: Mon 01 Jan 2024 16:30:34 +0000
ROA not before: Mon 01 Jan 2024 16:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57469
IP address blocks: 178.22.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:dc:30:ff:6c:a9:27:14:86:78:13:b9:a3:ec:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Jan 1 16:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5997ae9158ab867424fb5cb82bbc9ed3d6e069f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:29:f7:19:33:f9:cd:f1:26:59:33:ae:33:9e:
cb:0c:3c:1b:37:dd:6a:87:c0:2d:32:22:60:c9:6b:
1c:7d:08:0c:53:27:1c:62:ee:7c:05:a8:6e:c0:a1:
16:89:1a:fc:28:65:02:06:8d:36:8d:50:f2:69:4c:
9f:1e:5e:21:c1:91:6e:a3:44:cd:13:cc:b3:79:87:
4e:06:21:66:2f:03:a0:94:dc:e2:b2:9e:37:f2:8e:
74:3a:e3:3f:8d:08:99:e7:69:71:f5:1d:b4:aa:14:
4c:2e:29:90:f0:c8:4c:9b:bf:ed:9d:90:77:21:f3:
a7:74:5d:76:67:0b:35:c8:75:63:02:e2:f8:ab:90:
31:52:1a:a1:b0:7b:75:7b:0f:e5:94:e4:ec:2a:76:
64:d9:a9:c0:f3:a7:b5:00:87:75:a5:bd:5d:e5:67:
cf:9b:ed:29:49:ab:cc:bb:e4:05:1a:77:29:82:8b:
e1:05:b6:b6:b7:46:ac:15:74:0c:c6:c8:24:5d:58:
5c:20:0b:ef:a2:d1:48:d4:8b:eb:28:5f:3c:9d:ff:
46:75:7e:e5:98:a4:3b:9a:59:2a:11:a8:a8:83:40:
f0:3d:6b:fb:2c:f6:ee:c4:a1:0d:c0:a5:bb:e5:4b:
aa:9c:a4:f2:28:44:46:ea:fb:96:54:4c:79:13:9e:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:97:AE:91:58:AB:86:74:24:FB:5C:B8:2B:BC:9E:D3:D6:E0:69:F4
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/WZeukVirhnQk-1y4K7ye09bgafQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:4f:66:20:f4:87:f8:41:e7:1a:97:b0:45:fe:5e:c2:6f:f7:
00:e7:37:f5:d6:be:09:a2:3d:ff:34:09:6d:0f:d7:22:37:a4:
9c:e7:a7:f3:0c:1d:b4:7f:bb:cd:60:00:d2:b6:8e:76:f0:38:
a9:77:e4:f8:ea:ea:92:2f:b3:c8:30:d2:56:1f:46:b1:84:8a:
15:b3:7c:bd:72:98:6a:7b:89:ff:c6:d0:9d:7f:97:4c:0e:6b:
a0:b8:c0:f6:e1:76:2e:e1:9a:57:61:05:d9:08:05:fa:75:2c:
74:70:3a:b1:d4:a0:a0:64:e0:90:10:f2:aa:0d:31:26:04:fb:
fe:d6:5c:8d:7b:08:50:4a:75:7e:22:a3:78:3b:6b:2e:5a:51:
c2:e6:33:fe:fc:f0:14:43:c1:39:97:2e:3a:54:5f:78:51:5a:
73:d6:7f:08:6c:53:dd:ff:0c:ef:77:4c:84:7f:32:61:bf:d6:
41:27:b6:47:d5:bb:13:45:d9:ac:1d:e3:5f:4a:fd:6b:7d:e9:
54:7b:62:8d:0b:ec:e7:0d:c7:76:7f:a5:ff:cf:db:20:9e:ab:
44:65:84:70:d4:a7:74:92:36:ef:75:5a:c0:c8:4c:b8:13:88:
e6:ff:1c:b5:2a:60:9a:6a:44:02:7f:a9:64:84:50:bf:79:49:
41:c5:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:54:45 2024 by rpki-client on console-ams.rpki-client.org