Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/wobsiGaecvD3Me4EiML1OSuabXk.roa
File: wobsiGaecvD3Me4EiML1OSuabXk.roa (raw, json)
Hash identifier: lG8+uFQxOgVFP/L9RiEXpY7SloDvngJXf4DDfL1LHXI=
Subject key identifier: C2:86:EC:88:66:9E:72:F0:F7:31:EE:04:88:C2:F5:39:2B:9A:6D:79
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 018CC86F94D4343C3B998EF3E868087677BD
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/wobsiGaecvD3Me4EiML1OSuabXk.roa
Signing time: Tue 02 Jan 2024 04:30:04 +0000
ROA not before: Tue 02 Jan 2024 04:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49042
IP address blocks: 45.14.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:94:d4:34:3c:3b:99:8e:f3:e8:68:08:76:77:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 2 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c286ec88669e72f0f731ee0488c2f5392b9a6d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:02:2c:6e:81:d2:b9:a6:cc:d2:cb:b4:49:
1b:5b:7e:5e:8b:a8:bb:a2:f0:e7:f5:56:45:6c:54:
fe:83:92:8f:f0:17:53:80:42:8d:1f:19:95:26:79:
a1:0a:3b:ee:86:a7:6b:11:49:7d:0a:aa:b7:5d:16:
b3:fa:da:46:d1:ba:1c:79:73:61:eb:a1:14:77:ff:
68:ab:46:44:ac:3e:70:48:ae:fc:00:77:09:e6:3e:
d5:d2:85:c8:34:eb:5a:47:df:f3:1f:88:1b:e8:31:
27:e4:b5:e0:e1:b5:e0:df:f2:f3:f2:2a:8c:d7:a8:
5d:b3:bf:6c:67:6b:3f:ad:ee:27:99:4d:44:a6:0f:
c1:76:3a:5d:35:13:5a:3c:0e:35:1a:15:c8:df:f1:
17:6f:51:a2:f5:13:71:5e:b1:22:8e:c0:b8:fb:f3:
86:6f:0f:6f:88:3f:ea:db:2a:51:ef:aa:e1:54:39:
bf:18:3e:a4:3a:88:00:2e:b9:ae:00:f0:de:92:40:
59:53:ec:1b:1f:6e:70:a1:52:16:35:97:83:af:80:
70:de:17:70:e9:70:1e:64:ff:dc:0d:c0:4f:ef:d7:
95:fa:88:ab:6d:64:31:9f:6f:53:15:2b:60:28:fc:
23:4b:83:16:e6:0f:92:fe:87:cf:9d:02:63:92:c7:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:86:EC:88:66:9E:72:F0:F7:31:EE:04:88:C2:F5:39:2B:9A:6D:79
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/wobsiGaecvD3Me4EiML1OSuabXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.226.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ac:f8:a0:8f:6e:41:c9:06:4f:74:3c:14:ab:7c:15:ff:2a:
9e:a7:d6:53:1f:e3:ad:7e:16:b2:ef:81:a8:b3:2e:ac:01:ba:
c1:51:67:71:fc:46:54:d1:24:71:87:13:91:bd:9b:3c:95:eb:
f0:30:25:23:c6:2b:7a:47:58:ec:59:0f:60:56:6a:36:98:98:
09:5b:70:ae:50:ed:a8:5c:fb:59:d5:24:1f:1b:b3:08:56:8b:
44:39:c7:8b:29:9f:0a:c4:5b:82:ce:08:93:40:c5:b1:d9:b0:
0c:2e:70:ad:60:b7:bd:28:ec:e0:6d:62:82:6a:62:c7:9a:7d:
6d:13:a2:c3:a5:ce:77:f7:37:ce:61:7a:84:b9:98:02:eb:1c:
91:96:0e:bc:70:73:5b:2a:0d:7d:f0:e0:c2:44:5d:11:72:d4:
cd:dd:62:c0:4d:1a:59:7f:d9:7f:7d:a2:9c:0b:66:a5:80:25:
25:23:e5:1e:38:63:d2:21:3b:45:56:1c:ec:1e:c2:40:ed:9a:
4c:b8:3b:5d:15:f7:42:80:66:8c:26:ab:2c:13:68:c4:5a:98:
64:64:f4:b7:00:aa:cd:59:c5:8d:ff:71:9e:c6:ad:b4:72:0f:
9d:4b:0e:6a:ec:3a:09:0d:37:37:9b:f9:9c:9e:e6:24:62:bd:
2e:62:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:39:15 2024 by rpki-client on console-fra.rpki-client.org