Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WObwTGnuxck46t5fIvL5dwrlFMI.roa
File: WObwTGnuxck46t5fIvL5dwrlFMI.roa (raw, json)
Hash identifier: o9ZLO4rmA1xliQYQf6oacO/ShSqLexwTxVtdYT2Lvco=
Subject key identifier: 58:E6:F0:4C:69:EE:C5:C9:38:EA:DE:5F:22:F2:F9:77:0A:E5:14:C2
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC80136C7F526D83B61DFC6822D8E7C5F
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WObwTGnuxck46t5fIvL5dwrlFMI.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212496
IP address blocks: 159.148.38.0/24 maxlen: 24
159.148.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:36:c7:f5:26:d8:3b:61:df:c6:82:2d:8e:7c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58e6f04c69eec5c938eade5f22f2f9770ae514c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:f4:a5:6d:03:53:4b:8b:c8:a5:0d:3c:7e:
ea:22:c5:ab:34:24:dd:7b:0d:7b:84:f0:d2:11:4c:
d5:74:49:95:b4:f6:94:bd:98:22:54:26:0d:e0:57:
c8:c7:4e:8d:2d:9e:23:34:a1:db:64:e4:9d:2c:63:
bd:ed:28:79:fb:6d:84:cf:49:a3:ec:63:50:c2:62:
22:56:33:db:f4:3d:e2:b3:2b:37:3d:27:f9:aa:5a:
c4:7e:39:26:76:4d:73:93:f3:79:7c:57:08:c6:0a:
8d:e6:0c:69:57:68:0c:ed:65:1f:1e:42:64:55:30:
ee:de:d8:22:65:5f:29:7b:e1:19:28:20:83:2a:6c:
45:05:69:72:de:17:2f:2f:9f:29:50:3f:78:a9:e4:
91:26:b2:fe:44:0f:41:70:f7:b2:f6:37:9c:83:3a:
1b:1a:c9:74:3e:eb:22:fc:81:2e:92:33:92:1c:a1:
08:d0:ab:b2:88:6e:6d:c4:cb:52:9f:f4:c6:40:70:
fd:82:29:ec:cf:b7:72:48:e0:e2:53:0f:9a:7d:a0:
89:3a:ac:84:71:c2:34:82:c0:c6:22:46:05:7d:83:
87:08:ef:4e:39:2d:72:e5:e0:b4:0b:1f:cf:01:b4:
96:18:36:c2:20:aa:94:5b:6d:7c:0d:8e:e0:34:d8:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E6:F0:4C:69:EE:C5:C9:38:EA:DE:5F:22:F2:F9:77:0A:E5:14:C2
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WObwTGnuxck46t5fIvL5dwrlFMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.38.0/24
159.148.88.0/24
Signature Algorithm: sha256WithRSAEncryption
16:44:3c:d5:4f:8f:a7:72:65:41:a2:5d:3c:0c:a2:ce:6b:81:
2e:26:78:5e:8c:ea:02:80:ac:47:ea:5c:db:7f:cf:f5:fc:0a:
47:d7:b2:b6:7b:8d:a1:a8:f1:8f:26:5c:82:31:e9:2c:d1:aa:
2c:eb:c8:6a:50:8a:4b:9b:8c:46:75:dc:d0:1f:22:c9:49:dd:
f8:b6:1c:20:a4:e2:86:83:92:12:c8:c9:27:3d:5a:af:90:34:
3f:68:da:28:43:8f:36:eb:3d:a6:0a:23:f2:64:82:60:e2:84:
bb:ff:4b:dc:e1:48:17:e1:50:b3:42:23:54:16:d1:36:06:3e:
8b:1c:99:04:cd:5d:49:39:96:3a:ce:36:ca:7f:c4:a6:48:3d:
26:b2:56:68:c5:4d:25:5a:bd:4c:9a:fd:c5:b5:22:69:b1:52:
1d:4f:9b:f9:b5:05:80:c5:3b:20:b4:2b:e3:b5:c2:22:37:44:
0b:11:63:fd:a7:ee:56:23:c6:f4:64:3d:40:47:df:2f:90:0d:
c7:72:61:42:8f:e6:e0:08:4b:6c:7d:e6:0b:0c:a4:c9:57:a1:
51:ab:7b:28:ad:7f:1b:d5:c7:d2:aa:fe:8e:cd:d0:c8:c5:18:
0e:c7:ec:41:79:5d:fe:a6:df:8f:16:cf:1a:d2:31:56:04:78:
b2:c4:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:39:26 2024 by rpki-client on console-fra.rpki-client.org