Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/WdaIr-CVhcMIdbM-SuOVSm7er5M.roa
File: WdaIr-CVhcMIdbM-SuOVSm7er5M.roa (raw, json)
Hash identifier: ywpGd+gFKEwmFL8RERDkvjnkT8k04VvAC1VukzBfKT0=
Subject key identifier: 59:D6:88:AF:E0:95:85:C3:08:75:B3:3E:4A:E3:95:4A:6E:DE:AF:93
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 018CC49373E22688B80D6B6A1D30A8ED9049
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/WdaIr-CVhcMIdbM-SuOVSm7er5M.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15457
IP address blocks: 62.169.72.0/22 maxlen: 22
62.169.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:73:e2:26:88:b8:0d:6b:6a:1d:30:a8:ed:90:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59d688afe09585c30875b33e4ae3954a6edeaf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:3d:d7:0d:09:75:dd:fc:cb:fa:3c:92:3c:
54:fc:7b:45:0e:70:55:60:4c:c5:43:ab:eb:bf:79:
eb:b5:c3:10:56:80:a1:52:07:6c:57:bd:87:a6:5a:
46:15:72:d3:12:53:41:26:85:33:c6:f0:18:9c:c7:
36:ec:b2:39:84:3c:2d:03:91:f6:cf:63:9b:dc:b7:
7d:12:16:95:12:01:b8:dd:4c:d7:13:bf:0a:d9:5c:
89:1b:55:7b:f2:f2:92:b4:0b:f5:eb:9c:50:67:d4:
22:f7:f3:2f:ea:ba:2c:b1:fe:22:0d:9c:f4:52:e0:
24:1b:69:63:1a:7c:53:35:c9:b4:01:75:23:f8:b3:
d3:25:73:ab:1d:51:33:6c:bd:37:70:3e:72:d8:e4:
46:61:fb:25:4a:de:d7:67:a8:c4:48:52:e9:3c:f0:
a5:2e:d2:65:5c:90:e4:1c:f8:15:7d:58:98:1f:93:
3e:e9:ce:fb:59:df:d9:0c:ec:53:5f:8c:13:06:c7:
b2:64:7a:c3:26:67:fc:eb:51:fe:b5:cf:f0:c2:b2:
46:c0:f4:58:a2:12:39:b9:d1:d3:ef:19:16:ae:b5:
ef:24:a1:91:f8:20:2c:10:77:10:8c:6c:1d:1f:c5:
e7:bf:5e:c5:19:e6:8f:f8:17:d9:3f:96:5b:7a:ce:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D6:88:AF:E0:95:85:C3:08:75:B3:3E:4A:E3:95:4A:6E:DE:AF:93
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/WdaIr-CVhcMIdbM-SuOVSm7er5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.72.0/22
62.169.80.0/22
Signature Algorithm: sha256WithRSAEncryption
59:a1:64:88:61:84:ab:b8:ab:ec:41:1d:25:d0:78:ad:dc:6a:
42:90:49:94:a2:1d:0d:d7:59:6e:ce:f7:a3:32:16:4d:8e:a1:
b0:8a:79:28:11:8f:c5:20:7d:42:29:8f:87:67:9b:24:23:d3:
ef:b6:09:e7:43:09:83:4a:9f:72:b1:01:74:c4:f0:a2:2a:0b:
25:72:28:66:88:bd:c7:e5:a9:31:cd:70:9c:15:4d:b1:6d:98:
e9:e1:f2:fd:4a:d5:ca:49:3a:6d:ff:2d:7f:29:e7:da:57:b2:
f8:59:20:f0:ab:59:a2:5b:5d:61:f9:eb:93:bc:bd:e8:94:fb:
ed:d7:12:76:15:b0:9b:cd:b4:76:07:86:fa:a4:f0:5c:19:72:
81:dd:d3:36:40:5e:d3:cd:a2:e3:f4:53:b2:d1:b9:db:7e:b0:
e3:e2:1a:4d:23:bb:ad:73:53:51:71:38:1d:28:e2:78:4e:14:
12:11:37:a4:ab:90:81:8c:31:91:55:82:64:b4:08:34:56:06:
52:f5:13:e6:af:ad:b0:f3:83:e3:63:06:8e:0d:1a:df:84:74:
fc:c7:34:8b:b5:0b:f0:29:b7:90:86:62:30:96:91:06:68:6d:
e9:86:a3:e2:e5:86:42:d7:87:61:24:3e:59:15:38:c5:70:2c:
fa:99:34:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 12:59:09 2024 by rpki-client on console-fra.rpki-client.org