Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/WCXa3q0MtZjG9uSQ3_FRTb_SMic.roa
File: WCXa3q0MtZjG9uSQ3_FRTb_SMic.roa (raw, json)
Hash identifier: gbrqf3MK5EB9GSSNdxCzUN2nZSKZeCQQYmqkk3SUW5g=
Subject key identifier: 58:25:DA:DE:AD:0C:B5:98:C6:F6:E4:90:DF:F1:51:4D:BF:D2:32:27
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018F2017E0DBC6ABDC7B9DEA842FA5095D22
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/WCXa3q0MtZjG9uSQ3_FRTb_SMic.roa
Signing time: Sat 27 Apr 2024 15:06:26 +0000
ROA not before: Sat 27 Apr 2024 15:06:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59895
IP address blocks: 91.217.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:17:e0:db:c6:ab:dc:7b:9d:ea:84:2f:a5:09:5d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Apr 27 15:06:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5825dadead0cb598c6f6e490dff1514dbfd23227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:d8:13:b3:07:84:98:9b:5f:0b:ba:ec:f2:
96:46:bb:7c:73:ed:5c:0d:9c:ed:50:4a:48:7b:ba:
78:1a:eb:3b:0c:08:01:59:6f:86:4d:70:0a:c7:94:
09:32:00:75:7d:b5:5b:3d:b0:3e:32:b3:47:09:73:
0d:2c:40:b3:73:43:9c:50:66:19:30:c7:80:88:7d:
88:20:1a:f4:94:1e:27:25:fe:18:88:93:30:29:b2:
2e:c5:7b:d9:66:d5:b8:2f:cb:a6:2b:b6:e1:67:60:
86:02:85:b5:52:f7:cf:11:68:e9:af:d0:40:7c:17:
99:c8:92:08:a0:0b:5c:65:58:c0:12:07:78:3e:4a:
1a:43:0c:5d:25:be:b8:8a:16:a9:02:df:7e:fe:0a:
49:d8:12:c4:7f:7b:fe:19:15:27:e7:1b:a1:e7:26:
ec:d5:0c:b2:2e:b7:93:9d:7c:e2:35:22:56:fe:e2:
39:c1:af:61:20:0e:3f:d2:d9:18:61:2e:9c:f0:13:
d3:63:80:84:9f:6f:9d:59:9e:d4:c3:3b:34:66:50:
dd:57:62:c7:9c:2d:9b:ac:30:bd:f0:c8:4e:1e:84:
e4:66:bb:5c:54:90:5a:e0:f7:7f:d6:92:9c:49:fe:
ec:8e:4d:ab:62:3f:80:27:07:07:a6:b8:e8:8d:7d:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:25:DA:DE:AD:0C:B5:98:C6:F6:E4:90:DF:F1:51:4D:BF:D2:32:27
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/WCXa3q0MtZjG9uSQ3_FRTb_SMic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.162.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:65:e9:f9:bf:33:f5:80:92:c2:23:83:fc:9f:b6:5b:9a:22:
f3:34:fe:da:01:0b:2d:4b:8e:97:2c:e1:e1:d1:03:f8:36:ae:
f5:16:e3:74:6a:2e:3d:14:14:45:78:0b:f7:1f:9e:cd:d8:cd:
cd:58:10:0c:78:47:31:0a:bd:83:a7:ce:17:67:6b:2d:d6:67:
c4:0b:52:12:46:29:7b:01:5d:93:4e:a8:d6:e8:22:a5:ad:7b:
b4:ad:0f:9b:76:06:8a:f2:21:c8:78:ab:f8:d2:cb:42:6e:c9:
13:31:c1:31:c3:e7:86:2b:d5:53:d5:02:d2:ea:7b:67:64:ad:
64:b7:81:e5:f2:fe:70:eb:8f:b0:00:bc:01:ae:8b:04:35:2e:
3a:7d:fe:74:8c:a2:1f:e9:9e:37:95:67:5a:a7:33:ff:8e:89:
02:62:ad:50:72:30:03:e7:c3:77:41:79:18:14:00:2d:1f:30:
05:0a:f3:65:54:d6:99:67:60:95:19:45:72:bd:84:13:2c:41:
71:84:c4:f6:eb:bd:0f:17:b1:47:6e:32:55:85:9f:e4:1a:78:
04:aa:c9:47:9a:8c:11:0a:96:0f:b0:d4:64:b6:c4:b8:e7:90:
6a:95:c5:61:8c:b9:47:9f:17:14:a7:cf:41:f7:5a:f8:2a:d8:
ed:6c:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:27:44 2024 by rpki-client on console-fra.rpki-client.org