Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/WNxsdPmHEOad17P3ScTB1Tz9uEQ.roa
File: WNxsdPmHEOad17P3ScTB1Tz9uEQ.roa (raw, json)
Hash identifier: TckXPIvzhA0HXZ8ALeQ84JuiWM9IdgR9X/FlxaLjKxg=
Subject key identifier: 58:DC:6C:74:F9:87:10:E6:9D:D7:B3:F7:49:C4:C1:D5:3C:FD:B8:44
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 018CC56E914DE371BAE4DC437B3F42F6428C
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/WNxsdPmHEOad17P3ScTB1Tz9uEQ.roa
Signing time: Mon 01 Jan 2024 14:30:06 +0000
ROA not before: Mon 01 Jan 2024 14:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44766
IP address blocks: 92.45.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:91:4d:e3:71:ba:e4:dc:43:7b:3f:42:f6:42:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 14:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58dc6c74f98710e69dd7b3f749c4c1d53cfdb844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:fa:62:9c:af:59:16:32:20:30:2d:5e:43:
9f:34:60:89:e9:54:34:31:c1:79:c2:17:f7:77:f1:
c6:55:b4:af:4a:63:0d:78:62:d5:4c:91:a3:40:42:
2c:8b:a6:3f:77:e1:bc:cd:da:d1:b9:83:58:65:1b:
c6:f2:83:63:13:75:72:80:bb:95:59:b3:ab:ce:55:
08:68:24:85:90:80:d5:3e:a1:66:2e:c2:1e:d5:17:
bb:61:8c:ca:27:85:73:87:47:19:0d:38:2b:fd:80:
1c:0a:95:aa:e6:af:6c:54:c3:a0:8c:da:aa:40:1a:
86:d7:66:f6:13:3c:4d:dd:f8:c9:85:0c:fa:c0:c9:
d8:e9:ee:d9:fa:50:75:83:2f:e6:ec:98:c6:2b:7f:
03:2a:2e:04:e2:51:44:95:ae:b5:8e:30:43:93:7c:
8a:72:0e:22:c4:6c:02:e9:54:75:72:b3:1b:a2:0c:
73:ff:13:03:1e:09:93:31:68:af:b2:c0:1d:b3:98:
d1:f1:32:38:cb:c0:e4:a1:b5:72:b8:b4:7b:2f:c4:
c1:06:de:af:c9:dd:46:9f:d8:c1:93:97:87:d5:d1:
09:0a:ac:2d:b2:74:16:2c:2b:52:06:dd:8e:08:b6:
9d:bd:a3:a0:2b:5a:56:9f:7f:cd:00:c3:38:20:03:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DC:6C:74:F9:87:10:E6:9D:D7:B3:F7:49:C4:C1:D5:3C:FD:B8:44
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/WNxsdPmHEOad17P3ScTB1Tz9uEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.45.1.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6b:dd:b9:2a:35:d0:92:5a:fd:86:ee:90:4f:1d:32:36:b7:
8b:65:6e:ad:0e:71:97:80:42:d5:cf:60:37:22:2c:4a:cf:bf:
58:ec:11:df:27:ac:77:27:28:6d:0b:f4:53:db:10:b6:ad:c3:
27:ed:37:62:2f:ea:ec:46:b2:ba:bb:0c:bd:a0:36:40:5c:d4:
02:70:42:7a:1c:eb:97:0d:8b:5d:f4:ae:19:27:da:c8:32:c2:
9f:17:79:c5:56:d5:6d:2b:70:a7:e5:00:bc:36:4c:e5:7b:11:
01:71:23:07:cc:53:e1:a5:e4:54:7c:1d:75:a7:09:59:6c:72:
67:ac:27:3d:7d:c2:af:73:97:7b:9c:42:45:12:5d:da:06:36:
ca:19:b6:b4:9a:64:77:9a:a8:64:48:a9:80:68:3e:23:0c:08:
cc:40:5f:81:de:7e:d5:08:7b:a4:4c:e2:72:62:94:dc:ec:29:
bc:ab:66:91:a4:e8:a9:65:5e:ec:89:bd:65:e6:1b:69:4d:5a:
4b:44:53:d0:27:22:a0:e6:25:34:ec:77:a3:bd:a7:30:38:7a:
ba:fa:e4:75:98:95:9f:29:fe:c0:ac:67:b6:85:38:a0:13:c2:
78:d4:21:c0:a3:49:7d:d5:29:e2:c2:fd:01:10:5a:f9:a3:99:
28:99:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:47:49 2024 by rpki-client on console-ams.rpki-client.org