Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/WwY-nLhTXzLlGKHswoQ2mOAXqRw.roa
File: WwY-nLhTXzLlGKHswoQ2mOAXqRw.roa (raw, json)
Hash identifier: Xpch0RZVequjQtYrC/m4prhI18utYzRMRqpQ9XFjBJY=
Subject key identifier: 5B:06:3E:9C:B8:53:5F:32:E5:18:A1:EC:C2:84:36:98:E0:17:A9:1C
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 018CC5DCCEA5E4373744FCE314DB79BD101C
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/WwY-nLhTXzLlGKHswoQ2mOAXqRw.roa
Signing time: Mon 01 Jan 2024 16:30:31 +0000
ROA not before: Mon 01 Jan 2024 16:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47511
IP address blocks: 91.206.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ce:a5:e4:37:37:44:fc:e3:14:db:79:bd:10:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Jan 1 16:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b063e9cb8535f32e518a1ecc2843698e017a91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:5f:51:4a:1e:2b:e8:ea:24:90:26:ba:9f:
d8:cf:fb:b6:28:30:7e:8b:85:02:62:d1:24:40:1d:
38:59:b0:0f:7d:19:43:fd:f3:9d:8d:e9:34:33:a1:
f1:a5:ca:81:1a:5b:e7:9c:91:77:85:12:dc:02:2f:
70:4f:3a:b9:c2:6e:89:35:48:c9:e7:71:aa:5e:99:
9b:d7:d3:63:de:f0:08:2c:6d:c4:37:18:95:50:8f:
ed:4e:06:e5:0b:41:d2:f8:a0:02:64:55:c9:41:52:
e3:6f:73:a9:a0:b0:94:14:30:bf:2f:ef:91:ff:93:
7c:0b:f4:04:6c:21:7d:2e:42:61:b1:a4:41:dd:4c:
27:85:d6:dd:b5:55:35:c4:8b:0a:a6:24:0e:6b:59:
5f:29:ee:c1:e1:fe:c3:f3:97:f9:c4:bb:12:64:d0:
b2:05:c3:7b:b6:0f:77:cc:0d:cb:3e:49:ae:42:dd:
87:a8:09:5a:21:f8:cf:26:1e:3d:6c:6c:d5:37:bc:
86:97:11:30:36:f3:e6:80:11:d7:be:7e:15:2d:14:
7b:e5:97:f1:ba:12:86:af:ca:78:b4:f7:f4:ea:d4:
5a:58:8e:9c:90:e4:f9:7b:24:82:20:40:bb:8d:2d:
17:97:be:b6:91:6e:0c:a3:9f:42:85:b0:eb:5e:11:
46:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:06:3E:9C:B8:53:5F:32:E5:18:A1:EC:C2:84:36:98:E0:17:A9:1C
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/WwY-nLhTXzLlGKHswoQ2mOAXqRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.82.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:0b:1f:fa:fb:c6:10:37:c1:67:34:be:25:84:38:54:7c:b4:
cb:f2:05:2b:9c:a3:90:7a:44:fc:af:3a:fa:7a:01:47:54:9b:
80:20:53:e7:2c:6a:6f:38:e1:66:75:57:5c:01:62:5a:bd:ed:
75:7d:54:e6:d4:71:d5:21:c0:74:ec:0a:7c:d8:fc:e5:b6:17:
56:e5:72:23:ee:86:f6:78:87:dc:6e:80:b3:0b:48:85:99:db:
5d:dd:6b:95:86:fa:4d:c8:10:9c:5a:f4:c8:ef:f8:6b:df:6f:
12:9e:f6:2c:00:42:8b:63:b5:1e:c0:b4:f9:f0:46:f2:d9:b6:
9e:73:ab:7c:a9:05:39:c6:2b:79:a5:f1:e3:48:9a:15:c6:8a:
1b:22:4a:c0:c5:0b:2a:4a:f9:d2:73:6e:fd:7e:d5:ab:51:fb:
06:b0:7e:eb:cb:6a:65:4f:40:a1:83:0e:1d:a3:28:a8:ae:9a:
fc:1e:25:1b:ee:15:c3:8b:13:cc:e5:ff:30:f6:1d:dc:e5:25:
4c:12:41:1d:f8:6f:66:f9:38:de:db:bf:72:5f:3d:ce:e4:77:
c3:ae:9a:ce:18:40:fd:7b:1c:2f:1e:f3:ab:4f:11:e0:79:cc:
81:26:8a:a5:08:a6:ca:78:48:66:49:72:7f:0c:6b:0d:cd:cf:
29:0a:f5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:44:19 2024 by rpki-client on console-ams.rpki-client.org