Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/Wcc6J8mgDp9KfNqAGgTbfKqaXpw.roa
File: Wcc6J8mgDp9KfNqAGgTbfKqaXpw.roa (raw, json)
Hash identifier: Q1w76EbEFyOC/ccU3S/p2wMLK95YJ64bAe0AFx6+sBc=
Subject key identifier: 59:C7:3A:27:C9:A0:0E:9F:4A:7C:DA:80:1A:04:DB:7C:AA:9A:5E:9C
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 018CC348E6E0D4486871EFDD7A1AEBE192A0
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/Wcc6J8mgDp9KfNqAGgTbfKqaXpw.roa
Signing time: Mon 01 Jan 2024 04:29:43 +0000
ROA not before: Mon 01 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20892
IP address blocks: 91.198.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e6:e0:d4:48:68:71:ef:dd:7a:1a:eb:e1:92:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59c73a27c9a00e9f4a7cda801a04db7caa9a5e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:fc:6d:0c:2a:9f:46:68:01:b8:f0:83:5f:
c0:78:7e:ff:87:4a:9e:bd:ed:9f:c8:b0:73:ff:2d:
45:a3:ca:fd:e5:10:10:af:09:5d:a2:b1:d5:cf:7f:
59:a1:6f:8c:96:fb:31:b4:bd:bc:f4:e9:04:c3:f8:
14:e7:29:bd:fd:e1:b9:dd:7a:3a:f9:04:c1:6b:05:
86:37:0e:3b:20:89:e8:a5:98:be:1b:4b:30:5c:f7:
60:13:ce:c0:b1:12:8f:df:e7:10:d7:2d:77:f9:80:
c3:f7:ca:2e:8a:5f:e8:26:51:d3:56:cd:26:05:9e:
58:73:cc:e2:f5:6d:2d:c7:5c:3c:39:db:74:4c:68:
ad:5f:3a:9f:17:52:f7:cc:f4:fa:71:46:f7:65:50:
27:f2:68:11:ad:a7:fb:b4:3a:df:57:cc:15:5c:58:
b1:e0:0c:23:9b:20:f2:10:77:e1:9d:9d:35:72:60:
20:04:3a:83:2e:df:7e:3d:b3:13:4d:5b:84:d3:c2:
82:c6:cc:54:42:a0:d6:93:16:f0:cc:a2:a2:73:4e:
1c:2c:71:5b:a4:30:d9:cc:a1:a6:c9:f4:30:2b:32:
5a:a1:e2:4a:e5:bb:c7:4c:28:a6:3a:21:3f:4f:18:
15:2a:42:74:84:a2:94:e0:ac:2a:87:7d:05:60:84:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C7:3A:27:C9:A0:0E:9F:4A:7C:DA:80:1A:04:DB:7C:AA:9A:5E:9C
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/Wcc6J8mgDp9KfNqAGgTbfKqaXpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d9:26:cf:ac:be:04:b6:e7:d9:b7:4d:6b:13:a4:d5:0b:9a:
82:2c:dc:09:15:16:11:c0:9d:56:2d:c2:c9:6d:b5:c2:94:84:
99:32:27:3f:bd:87:a5:5d:59:e4:98:55:4e:7d:e3:a4:e6:a5:
58:88:76:e9:08:c6:2a:d9:39:a4:1a:ff:eb:c5:c4:3d:46:e7:
f2:78:b6:c1:cc:f1:62:6d:a8:a3:08:6d:15:e5:36:54:4c:8c:
eb:a5:60:47:d9:14:6b:9a:93:7c:9f:df:ce:74:ac:56:a5:13:
3c:5f:69:d9:79:6a:b0:02:27:fd:c8:93:48:40:26:56:f0:de:
62:81:63:35:8e:cc:5e:b0:7e:ce:7d:d0:db:37:4b:ef:c1:0b:
ff:a7:7c:35:bd:cf:af:44:23:84:9a:44:55:84:ce:1b:c4:91:
18:7b:43:0a:f1:35:c8:3e:66:6f:b3:75:83:ae:80:21:05:ba:
6c:00:4b:ed:62:cc:95:65:67:6a:4b:63:0e:e4:62:1b:86:93:
c2:d3:22:79:bf:3d:cb:5f:7f:24:46:b0:f9:c7:a2:b2:9a:25:
16:28:10:1c:a0:4e:f8:f4:45:af:bf:1a:ff:32:d9:b5:fd:18:
2c:e3:ef:60:39:43:ad:90:8d:7e:fc:4f:13:c7:5f:4f:33:27:
80:ff:e5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:27:28 2024 by rpki-client on console-fra.rpki-client.org