Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/WH_TL69M_P8D4C_-LIc3OEUkc10.roa
File: WH_TL69M_P8D4C_-LIc3OEUkc10.roa (raw, json)
Hash identifier: taxrNcIfDifEQnGQQkWgF37TqwSalu9e0xXLLlrnaKE=
Subject key identifier: 58:7F:D3:2F:AF:4C:FC:FF:03:E0:2F:FE:2C:87:37:38:45:24:73:5D
Certificate issuer: /CN=409566d9bf7538b701cf56f3a85c9952bbc741a6
Certificate serial: 018CC3496280B7DC55E2B4CBDF3AA1B42C01
Authority key identifier: 40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/WH_TL69M_P8D4C_-LIc3OEUkc10.roa
Signing time: Mon 01 Jan 2024 04:30:15 +0000
ROA not before: Mon 01 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50133
IP address blocks: 91.239.7.0/24 maxlen: 24
91.239.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:62:80:b7:dc:55:e2:b4:cb:df:3a:a1:b4:2c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409566d9bf7538b701cf56f3a85c9952bbc741a6
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=587fd32faf4cfcff03e02ffe2c8737384524735d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:4b:52:12:fd:54:56:bd:18:da:2b:5c:b8:
2b:7a:02:4d:9f:ee:36:1d:e2:04:26:bf:48:a8:0f:
a7:24:b7:fa:b1:d7:af:48:0e:17:36:ce:f0:e0:13:
6c:31:00:d3:d6:ea:dc:1c:5f:d7:39:14:d0:b3:a7:
a7:d7:a1:e0:e5:f6:3c:92:57:3c:27:2d:2b:81:93:
92:3d:22:f0:58:2b:cc:9b:ff:fa:00:46:84:8d:e8:
76:80:17:34:49:f4:46:57:85:76:b6:49:b7:6a:a8:
b5:f1:28:0a:7b:87:e6:c1:b4:ac:1c:4f:c0:1d:08:
9a:ca:c0:b1:8e:1e:de:b6:4e:ac:55:35:2b:c7:10:
c5:2c:0c:18:97:9c:21:e1:81:bc:08:8d:c7:5f:b8:
fd:2d:13:19:e6:82:ae:79:0d:59:7d:9b:69:63:66:
13:de:20:12:1c:de:a3:1b:7a:7a:af:6f:a3:f6:02:
94:6a:b3:f6:a8:f2:44:b3:ae:a5:63:36:6a:c4:42:
ae:36:9e:97:6b:b6:37:9d:fc:b2:c9:26:70:a4:57:
56:01:69:0a:78:4a:d9:68:f2:64:f5:fb:bc:4a:8b:
43:cb:f8:af:5d:60:79:1f:73:d9:8b:73:a9:b7:d7:
7a:a7:2d:77:12:98:eb:ba:e2:0f:bc:29:7e:c4:54:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7F:D3:2F:AF:4C:FC:FF:03:E0:2F:FE:2C:87:37:38:45:24:73:5D
X509v3 Authority Key Identifier:
keyid:40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/WH_TL69M_P8D4C_-LIc3OEUkc10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.6.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:f8:a2:e6:f4:c3:da:bd:fa:64:a7:42:a6:dd:f9:fd:67:b7:
9b:ef:15:a2:9a:2f:a8:8a:be:8a:87:2c:23:ee:5a:0a:c7:4c:
76:25:d1:00:a9:a4:09:ba:94:8e:8d:f7:67:96:9e:18:b6:13:
15:4b:e4:c9:9d:4d:1f:f6:e3:11:b8:9e:54:6b:49:35:2e:6f:
bd:1c:84:46:46:4b:dc:de:6c:c0:11:d0:e8:e1:58:b8:dc:87:
5c:60:6a:9f:17:a7:ab:db:0f:ec:cd:73:bc:24:8f:aa:5b:e9:
98:e2:97:7e:9c:f2:fb:fe:ca:17:b5:d3:2a:f8:08:ef:fd:d8:
88:73:fa:89:94:64:19:7f:3d:24:74:3e:4b:f9:f2:76:bd:42:
b6:f4:f4:cf:cf:50:a4:51:db:2f:5e:b2:f5:ce:f8:05:f0:37:
0a:96:9a:24:2d:47:2b:0a:72:fa:d1:4d:8d:60:14:23:e2:79:
0f:be:6e:98:3f:af:7e:06:5c:cb:5f:a4:d4:a5:0b:09:1c:c9:
fa:35:40:c7:60:30:d2:df:72:91:64:b0:2b:5b:ad:12:07:e0:
0f:40:84:a2:0e:08:d5:63:3b:de:e8:b8:27:3d:74:c1:a2:98:
8f:c1:17:44:1c:a6:82:aa:d8:42:2b:73:77:99:a9:ac:13:fc:
06:d6:e6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 03:18:32 2024 by rpki-client on console-fra.rpki-client.org