Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/WKBGbt_bjo09OVvPWazYi9s7pJM.roa
File: WKBGbt_bjo09OVvPWazYi9s7pJM.roa (raw, json)
Hash identifier: K4nWlttWBPfZZidwuqangMTzrAwAV8i/uCfFyNkyUvE=
Subject key identifier: 58:A0:46:6E:DF:DB:8E:8D:3D:39:5B:CF:59:AC:D8:8B:DB:3B:A4:93
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 018CCA99D21004D1904F5E22ECC904ED5DA1
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/WKBGbt_bjo09OVvPWazYi9s7pJM.roa
Signing time: Tue 02 Jan 2024 14:35:27 +0000
ROA not before: Tue 02 Jan 2024 14:35:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208922
IP address blocks: 45.15.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Sep 2024 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:d2:10:04:d1:90:4f:5e:22:ec:c9:04:ed:5d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Jan 2 14:35:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58a0466edfdb8e8d3d395bcf59acd88bdb3ba493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:9e:16:53:e4:db:08:44:c9:f1:a8:73:0b:
c8:33:fb:9c:29:f5:fe:57:18:4c:d2:32:86:2b:eb:
42:89:72:27:62:d9:2a:aa:56:99:75:a7:77:0c:87:
ea:d1:0e:b1:f5:f0:a8:98:0c:b9:db:0b:be:ea:34:
16:17:4f:b1:a2:05:35:8d:3c:19:bd:e4:3b:e4:50:
34:aa:4b:69:cf:e1:89:90:8c:4c:2c:f8:e3:d5:00:
65:3c:0b:58:ce:b2:73:19:80:f5:c5:dc:24:af:bb:
b2:47:2d:35:c5:8d:ee:50:32:13:34:40:32:dc:21:
55:95:7e:a3:1e:8c:6c:33:2b:99:8c:cc:0c:15:8c:
b9:f6:f1:e0:e6:88:4f:68:e0:9f:81:7e:c7:18:2c:
a6:e9:d9:f2:56:60:36:22:94:eb:fd:6e:a2:c4:05:
59:71:13:f1:6d:fb:9b:dc:e7:da:f7:9b:91:ff:06:
2d:d4:9d:7f:b3:1b:1e:15:d8:c9:ad:62:86:63:d8:
12:58:c9:10:79:51:80:f5:55:36:0a:6f:3a:f2:9d:
62:49:89:69:65:dd:e2:38:ef:2e:f7:6c:64:44:93:
50:3a:03:95:85:b7:67:97:46:16:67:7d:f3:6b:ca:
db:23:17:f8:55:78:1d:aa:47:b6:df:cd:94:e9:13:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A0:46:6E:DF:DB:8E:8D:3D:39:5B:CF:59:AC:D8:8B:DB:3B:A4:93
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/WKBGbt_bjo09OVvPWazYi9s7pJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.172.0/22
Signature Algorithm: sha256WithRSAEncryption
87:8b:b9:2a:98:e6:9c:22:8c:b7:14:bf:01:18:35:9a:c9:e3:
44:57:cb:47:d4:04:1e:e1:8d:39:c7:64:a1:78:78:3d:5a:14:
1a:0a:78:79:28:d9:6e:0d:60:eb:3c:e0:b5:a4:72:db:dc:75:
a0:17:71:f0:17:f6:39:e6:14:b7:cc:f9:2d:d2:e8:3a:72:5c:
bc:69:15:5a:35:f4:f5:5a:3f:af:6b:cd:a7:e2:83:25:f9:35:
da:82:66:ac:9b:71:ae:dc:10:fe:0b:d4:b4:b8:82:c2:ef:cf:
56:63:39:44:69:f1:62:b0:91:b5:28:32:80:f7:8a:17:3d:ba:
b1:a5:42:73:2d:85:bd:a8:26:97:4d:bd:c8:01:4f:24:13:fe:
7c:0f:81:34:e3:b5:d3:b9:db:1e:5c:dd:90:ee:70:e2:f9:c1:
71:f3:4f:fd:fd:1e:73:0e:e8:65:90:0a:9a:41:6e:15:bc:6c:
15:18:aa:93:e4:6b:87:43:83:26:05:62:17:71:44:fa:86:6a:
db:94:a2:0f:54:cc:66:af:cb:75:5b:9b:14:fd:9b:f6:2d:50:
db:4e:ce:2b:7a:6d:ce:74:12:c6:48:a9:6c:15:41:1d:18:68:
f3:62:f3:33:d7:96:c2:2d:6c:cb:c6:e8:99:74:71:6b:80:59:
8d:03:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 04:41:40 2024 by rpki-client on console-ams.rpki-client.org