Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/WNby5n8iNFY65Oft7fUz7KGTECM.roa
File: WNby5n8iNFY65Oft7fUz7KGTECM.roa (raw, json)
Hash identifier: 1aWsAcoP8cSnq02V2ho2E9eicxglPZrb3DSuFzGOl/U=
Subject key identifier: 58:D6:F2:E6:7F:22:34:56:3A:E4:E7:ED:ED:F5:33:EC:A1:93:10:23
Certificate issuer: /CN=16f145727d34ae6607a615301283eeebd5d6291c
Certificate serial: 019202018CDB319AD0B702497ADD47E48ACC
Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/WNby5n8iNFY65Oft7fUz7KGTECM.roa
Signing time: Tue 17 Sep 2024 22:01:48 +0000
ROA not before: Tue 17 Sep 2024 22:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7233
IP address blocks: 77.238.189.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:02:01:8c:db:31:9a:d0:b7:02:49:7a:dd:47:e4:8a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c
Validity
Not Before: Sep 17 22:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58d6f2e67f2234563ae4e7ededf533eca1931023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:8f:a3:c3:c5:7d:bc:f9:3b:a1:3a:70:e5:
e9:dc:fc:c4:8f:17:bb:35:4c:a6:82:08:a7:56:e6:
97:2c:71:fb:54:f7:12:b4:de:34:07:d2:20:2e:1c:
3f:a2:33:3c:ca:34:0a:36:05:ff:c8:a8:17:6b:68:
45:f7:69:aa:52:46:f7:40:aa:62:98:8b:0b:24:00:
d0:19:7b:7c:a7:43:79:73:77:46:c7:b7:e2:cb:e3:
d9:1c:e2:c3:d5:b3:9d:05:ee:fb:58:cf:83:da:60:
02:5d:ff:b7:b0:1a:f1:34:89:11:c7:68:ca:a9:01:
c2:70:15:f4:96:e3:b8:f7:52:70:40:06:2b:76:db:
6c:99:08:d4:84:48:e9:09:c8:52:64:93:81:1d:82:
c7:c4:8d:a2:34:60:a0:4d:d3:89:16:4e:36:34:76:
df:3e:cf:f8:02:7b:7c:28:86:b5:40:b3:ba:42:3a:
fd:03:7b:77:56:14:de:9e:4c:d9:e2:d1:e7:79:df:
d9:8b:9e:22:94:c6:2f:58:64:1e:b9:02:b4:7c:93:
e3:cf:c8:a9:ea:3e:e9:e2:78:4e:fe:98:e9:83:6f:
51:20:09:04:3c:4e:f2:01:10:74:8a:de:ae:1b:ab:
84:4d:88:65:1c:d1:90:58:72:11:88:ff:b3:a8:e4:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D6:F2:E6:7F:22:34:56:3A:E4:E7:ED:ED:F5:33:EC:A1:93:10:23
X509v3 Authority Key Identifier:
keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/WNby5n8iNFY65Oft7fUz7KGTECM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.238.189.0/25
Signature Algorithm: sha256WithRSAEncryption
3d:f6:6c:30:13:b9:68:ab:b3:62:9e:92:70:6d:12:2e:16:55:
9e:e6:99:5b:e4:81:8b:2f:82:2f:2e:da:45:21:d1:56:3a:a1:
21:e4:90:7b:64:79:6c:0d:45:b2:fc:18:bb:cc:57:41:05:66:
b3:22:01:bc:e3:2c:04:24:0a:b6:11:ac:71:49:fa:7c:a0:95:
11:52:88:91:92:7f:8e:ca:87:b9:76:64:5b:f8:f6:d2:e6:7c:
4d:92:1f:9b:f4:fa:3d:e1:25:66:4f:19:2a:3d:44:99:c7:6f:
a2:9d:49:96:df:26:87:40:71:7c:ec:ec:f6:d4:d9:0d:73:1a:
07:8d:71:2e:a3:b0:c2:1a:2d:ed:b8:ab:c8:0c:35:7e:5d:1a:
0d:41:d5:99:aa:67:8e:46:4e:40:16:2b:e1:f7:20:06:80:d9:
9c:5f:8f:d3:71:49:19:ae:6d:46:5d:20:38:dd:ba:b8:4c:fd:
ee:e1:36:3d:fc:80:a4:ef:d2:eb:a3:c4:46:bc:28:9d:f0:7d:
c6:d7:93:0d:e6:28:3a:fa:a3:d4:98:ec:ea:40:6f:79:d5:36:
b5:36:71:70:f9:9e:51:7c:54:71:11:4b:6b:7c:73:c4:2e:9f:
eb:f3:9c:de:11:c9:1f:ae:1c:4c:07:09:a2:d4:ce:98:6e:dd:
95:83:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:38 2024 by rpki-client on console-fra.rpki-client.org