Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/WOk7zPgPYADufPZ38odTc-IfDG4.roa
File: WOk7zPgPYADufPZ38odTc-IfDG4.roa (raw, json)
Hash identifier: edPtQ4lqbYhhMC83EKTlSlqOwUhsKEBe1bLyR3N9xKU=
Subject key identifier: 58:E9:3B:CC:F8:0F:60:00:EE:7C:F6:77:F2:87:53:73:E2:1F:0C:6E
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 0190188085DD295D66419DE39EE95A5862C5
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/WOk7zPgPYADufPZ38odTc-IfDG4.roa
Signing time: Fri 14 Jun 2024 20:46:34 +0000
ROA not before: Fri 14 Jun 2024 20:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50818
IP address blocks: 5.182.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:18:80:85:dd:29:5d:66:41:9d:e3:9e:e9:5a:58:62:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Jun 14 20:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58e93bccf80f6000ee7cf677f2875373e21f0c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:2a:b2:65:3a:a3:5c:cb:f8:42:40:c9:dc:
92:5a:ec:70:02:5a:33:d3:be:c3:3f:ba:33:d5:5a:
f2:67:c6:ac:6e:ac:6d:d9:a2:71:26:22:e8:fd:37:
df:5d:6a:26:fe:f7:ea:9d:66:13:dc:50:ab:71:83:
36:a1:ca:16:d4:33:b5:6c:37:81:71:cc:02:a7:34:
d0:ee:4a:f4:a6:24:1d:c2:6c:0f:e2:7e:e3:1a:90:
95:7e:80:9c:b8:6a:fb:49:df:f3:81:9b:55:6f:eb:
85:64:db:25:00:07:82:04:99:05:27:33:4b:00:f4:
77:34:97:c7:ef:38:87:4a:21:20:80:6e:aa:64:c6:
37:59:ce:78:5b:eb:d4:59:69:e3:42:e5:29:50:51:
69:81:a1:9e:b8:db:02:72:fd:ed:64:41:4e:8e:45:
d0:71:2a:2a:5d:32:2b:8f:2e:11:a4:b4:45:12:5b:
90:9b:3a:a6:62:86:bd:71:6f:22:15:08:41:09:91:
4f:38:58:29:54:71:cc:ad:cb:9c:54:3a:18:b9:b7:
f5:4f:ef:5f:02:df:ef:ea:09:57:e3:a5:9d:ca:5d:
e0:33:b8:7a:4d:3e:b2:b5:7e:60:a7:36:00:88:9c:
59:7d:eb:51:b1:3d:87:b5:4b:4e:1d:35:ca:82:60:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E9:3B:CC:F8:0F:60:00:EE:7C:F6:77:F2:87:53:73:E2:1F:0C:6E
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/WOk7zPgPYADufPZ38odTc-IfDG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.136.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:58:0f:d5:24:2e:e0:db:6c:16:70:50:a1:27:d3:21:e1:c4:
72:b9:30:17:8d:e3:a8:32:a5:ac:47:f8:03:d8:97:93:ec:f2:
93:70:97:7b:29:8a:4f:19:d7:50:56:e4:fe:a1:66:90:fb:4b:
1d:5b:60:06:e5:72:66:9f:ae:5d:dd:bf:3b:15:09:ef:e2:99:
ba:ca:70:20:ee:c5:6a:b1:a8:58:17:82:c5:81:96:70:b8:1d:
82:d7:78:75:5d:f3:8c:ed:e2:46:6f:95:93:38:95:3e:06:e3:
b6:6a:53:5a:af:6c:5c:10:eb:0e:29:2f:dd:a1:3c:63:0a:e0:
32:ae:5e:95:e2:0c:eb:0c:c0:46:55:9d:24:6f:d4:1e:c9:1e:
a8:b4:16:a1:18:c2:c8:6c:1f:e0:ad:aa:db:8b:0e:29:6e:0f:
cb:02:6a:e7:6e:99:d7:5d:99:6b:69:eb:fd:90:33:9b:24:e4:
21:3d:57:e1:9b:26:e3:2a:98:c5:9d:61:94:fd:29:02:e2:0d:
88:fc:3d:06:31:74:02:d2:68:c4:8d:60:61:63:df:6e:92:0e:
96:d5:53:fb:32:50:94:c3:00:d8:02:38:aa:49:33:64:0e:ca:
32:21:ef:a3:2a:9b:3f:7d:a6:af:3f:6a:ab:db:ad:42:b0:40:
4f:0f:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:14:49 2024 by rpki-client on console-ams.rpki-client.org