Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/WHbC46TdN9nz5MkL15H9FBSjyy4.roa
File: WHbC46TdN9nz5MkL15H9FBSjyy4.roa (raw, json)
Hash identifier: b6nKyxK6ToQmSqgs2r55M4wnKznQgMXtRwTC/+u1i7E=
Subject key identifier: 58:76:C2:E3:A4:DD:37:D9:F3:E4:C9:0B:D7:91:FD:14:14:A3:CB:2E
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 018CC793E42DCBE417D07C8895C3637DE7BC
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/WHbC46TdN9nz5MkL15H9FBSjyy4.roa
Signing time: Tue 02 Jan 2024 00:30:07 +0000
ROA not before: Tue 02 Jan 2024 00:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16344
IP address blocks: 217.145.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:e4:2d:cb:e4:17:d0:7c:88:95:c3:63:7d:e7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Jan 2 00:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5876c2e3a4dd37d9f3e4c90bd791fd1414a3cb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:60:f7:f5:15:22:5e:f3:8a:1e:dd:12:85:
98:c7:a3:93:73:d9:9c:5f:d4:32:d9:92:5e:04:3a:
76:1f:fa:14:a9:98:8e:23:e8:84:c7:2e:4a:12:50:
51:86:8a:d3:cd:39:ac:68:38:1d:de:74:24:7a:0e:
e0:3c:2c:e4:db:c4:71:59:8f:12:39:b3:cd:cd:63:
f9:e5:c3:63:cf:0f:96:84:88:fc:20:f9:5b:84:77:
20:95:c3:d1:5b:a7:3d:c3:48:e4:dd:a5:4b:22:c1:
df:df:2c:40:03:0f:fc:36:29:b1:ce:ab:e8:b3:ef:
c9:da:0e:82:9c:97:46:51:a9:c4:88:66:a3:e7:1e:
7d:86:4b:9e:79:41:33:8f:f2:1a:4b:b7:49:49:d4:
85:e5:7f:dc:ab:c6:43:8c:28:e8:e7:76:3c:cd:00:
35:2c:b7:1b:5d:6d:e3:1e:12:cb:ed:07:8b:25:55:
eb:c6:d9:03:c2:6d:98:65:90:de:59:07:01:46:7c:
b2:9d:c7:e2:fd:68:59:3e:e8:65:92:4c:80:d8:4d:
82:d3:a5:6d:46:ce:ba:69:3d:a0:93:43:59:f2:e0:
2e:06:6a:f7:e5:ad:94:58:28:47:3b:99:3c:d6:7a:
20:31:1e:c3:a1:9b:0c:19:45:4b:64:e6:96:72:97:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:76:C2:E3:A4:DD:37:D9:F3:E4:C9:0B:D7:91:FD:14:14:A3:CB:2E
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/WHbC46TdN9nz5MkL15H9FBSjyy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.160.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:aa:d3:cd:74:60:d3:ba:cd:45:f1:f3:8c:ae:88:c7:e7:c1:
d9:b1:4e:6d:9b:1a:2b:e4:33:3c:ad:76:5e:ca:25:67:5a:e7:
12:2b:46:14:52:33:83:d5:3b:54:e3:5e:f6:9e:29:42:44:9e:
82:0e:71:96:51:32:b8:1e:ed:6a:ce:ef:8e:a7:9d:6c:8e:63:
43:b9:41:4c:6b:09:78:8e:72:03:6c:03:c7:50:c6:8e:d5:61:
80:12:06:bd:01:8e:b3:7e:7c:91:3c:81:d1:6a:90:0b:4d:3d:
6a:7f:75:a2:88:27:7f:ac:95:19:b3:fc:09:20:21:73:32:fd:
f7:ff:d7:00:77:58:77:63:78:3c:98:49:90:00:fc:91:94:7b:
5a:db:f9:d5:45:db:e1:b9:e4:64:15:f6:9b:54:5f:52:da:4a:
97:a2:58:08:60:a8:f5:d3:c8:f7:92:01:76:d7:a3:f4:fb:05:
42:d2:52:cb:81:ad:ff:62:fd:a3:e2:60:7b:4f:00:fc:4a:4c:
d5:9a:84:ef:cc:08:2f:b7:c3:e4:1e:5f:3c:7d:1c:d5:ff:49:
75:01:a1:c1:cd:a8:f9:be:24:c4:64:73:d9:bd:4a:a7:32:52:
aa:e5:96:df:f0:5c:7f:28:c8:af:c3:dd:c3:7f:18:37:bd:0d:
07:a3:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:27:16 2024 by rpki-client on console-fra.rpki-client.org