Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WLHMfSSIbsu50jTse_cW583SPEY.roa
File: WLHMfSSIbsu50jTse_cW583SPEY.roa (raw, json)
Hash identifier: +SlRc3SA4/GHUBWi0JjZYwUfGVqfvPOiHqU/BXBA0LY=
Subject key identifier: 58:B1:CC:7D:24:88:6E:CB:B9:D2:34:EC:7B:F7:16:E7:CD:D2:3C:46
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0192C37A2E1AC14459AC696CC339F3E0DEE6
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WLHMfSSIbsu50jTse_cW583SPEY.roa
Signing time: Fri 25 Oct 2024 11:40:17 +0000
ROA not before: Fri 25 Oct 2024 11:40:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62563
IP address blocks: 89.21.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:7a:2e:1a:c1:44:59:ac:69:6c:c3:39:f3:e0:de:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 25 11:40:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58b1cc7d24886ecbb9d234ec7bf716e7cdd23c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:98:ff:b6:be:57:d6:e4:12:9a:77:39:46:
be:36:34:0b:03:eb:9c:c9:01:b1:ed:a1:fd:a1:bf:
2e:a1:d2:dc:d6:6e:6e:5d:2b:04:4a:d3:8a:2a:5f:
7c:e8:4e:1b:46:8d:d1:81:56:43:ac:5b:84:4d:a8:
4e:86:93:53:b4:74:ad:fe:97:53:78:43:44:69:ed:
43:5c:e6:e1:f6:cd:c3:a2:f8:7a:77:d5:e0:5a:b1:
71:3c:2a:ab:e1:8e:a6:25:11:88:2e:17:3e:72:93:
0c:56:94:5b:98:a7:38:8d:cb:9b:cb:99:33:f3:7b:
b6:ac:e9:77:d8:ec:96:a8:e0:9e:97:d8:74:cd:5a:
dc:0c:fd:9a:27:36:d7:ee:61:8e:a0:bf:25:6e:19:
08:01:69:4e:8b:4f:81:f2:b0:a9:43:c5:f1:d8:30:
6e:e8:48:8a:55:59:76:0c:e6:2b:83:46:cd:23:5b:
ab:ad:4f:5b:d7:41:d4:bd:c4:45:6f:fd:b0:02:83:
a4:7f:7f:8c:58:10:1b:b5:d5:67:89:8b:93:99:72:
27:cf:03:c4:ed:93:c6:de:00:c0:3c:1b:14:37:bc:
ad:9d:f0:2b:5b:16:a1:66:c8:64:3d:82:ab:8c:56:
62:a1:97:3a:6e:81:5e:f1:6e:76:3d:0c:ce:d0:98:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B1:CC:7D:24:88:6E:CB:B9:D2:34:EC:7B:F7:16:E7:CD:D2:3C:46
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WLHMfSSIbsu50jTse_cW583SPEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/24
Signature Algorithm: sha256WithRSAEncryption
12:40:8e:74:4f:b6:1d:5a:5a:78:52:98:4c:6c:2e:4c:31:00:
0e:34:e6:a1:13:87:bd:63:e7:ab:60:0f:bc:a7:f0:8a:51:74:
52:e2:49:65:b8:a1:0a:f4:5d:e6:2a:c2:cf:9f:fe:dd:73:f9:
46:56:7b:35:0a:c5:a7:b9:28:ec:10:bd:4f:e4:97:de:30:e7:
1d:d8:02:92:01:c6:d5:9a:13:d9:0c:1c:c6:34:ef:f6:e8:c8:
26:fa:76:05:75:1b:38:56:bb:1f:02:ee:99:9f:64:bf:d6:5f:
72:f4:d9:36:e8:e9:81:56:a1:cf:a7:61:ca:65:ea:ba:ff:b0:
2a:e0:88:2e:2f:39:86:84:b2:c1:e2:e3:1c:13:1a:40:56:67:
12:b8:6e:ac:cd:ff:d0:51:90:8f:30:ca:77:2a:30:73:23:20:
f2:97:e4:2b:ae:d2:d3:c9:34:4c:0c:da:bd:40:12:b5:c1:7d:
f2:2c:93:5a:76:58:a7:cb:1e:70:12:8e:5d:4e:a7:59:c1:62:
d5:98:e1:14:5b:33:95:80:d1:cf:50:09:4f:85:d7:84:10:ec:
84:72:54:2f:dd:6a:42:c7:dd:95:e3:6f:76:1a:7c:f9:9d:2c:
74:25:9d:72:82:a0:bf:8f:75:df:17:0a:68:cc:98:00:ed:d4:
ec:56:bc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:36 2024 by rpki-client on console-ams.rpki-client.org