Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/WkWmbvD5DEGbmuNrOwspSsGHL1o.roa
File: WkWmbvD5DEGbmuNrOwspSsGHL1o.roa (raw, json)
Hash identifier: r+LZX22QV4pgM1K+3iVTmmGJsYaqfqDvNl48S29PWQ4=
Subject key identifier: 5A:45:A6:6E:F0:F9:0C:41:9B:9A:E3:6B:3B:0B:29:4A:C1:87:2F:5A
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018CC794F22EC8C02DCBC03B1FC068E31256
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/WkWmbvD5DEGbmuNrOwspSsGHL1o.roa
Signing time: Tue 02 Jan 2024 00:31:16 +0000
ROA not before: Tue 02 Jan 2024 00:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396426
IP address blocks: 45.141.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f2:2e:c8:c0:2d:cb:c0:3b:1f:c0:68:e3:12:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 00:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a45a66ef0f90c419b9ae36b3b0b294ac1872f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:7d:80:56:2e:cd:cd:08:59:1c:16:38:68:
e9:99:8c:e0:13:d7:9b:8e:31:3f:1d:fe:dd:b1:a7:
00:b5:5c:c8:92:2b:4b:d9:6e:f9:70:37:5b:75:47:
7d:e0:04:c2:1f:ee:19:64:75:2f:a8:0d:9e:6b:53:
d7:1c:65:77:f2:b3:66:2b:59:34:df:f3:97:4c:e9:
0a:06:71:c2:7b:34:de:40:4a:d4:b7:f0:2a:08:93:
5a:5f:51:0d:61:04:94:46:04:70:80:a6:29:05:b1:
53:e3:33:93:06:17:2c:da:69:b8:5b:ab:1c:61:55:
c2:c6:db:d7:40:e0:81:55:09:89:9f:6a:54:aa:93:
7e:c9:ce:10:ed:38:38:64:c3:4b:e0:ed:b7:eb:57:
95:7a:06:28:30:c6:7c:a1:21:eb:20:ef:76:ea:9b:
9c:68:8e:ad:af:b0:eb:4c:d6:93:1b:98:ce:60:af:
8a:50:02:be:db:13:0d:b3:a0:34:90:5c:98:11:88:
76:f2:d9:ac:56:cc:64:d5:7f:a2:7c:34:83:ff:d0:
03:f9:8c:29:8c:45:dd:3a:b0:71:a8:b0:0e:00:b2:
c9:7d:e6:55:b0:ea:42:fc:c7:3d:bd:51:48:63:af:
87:37:1d:c4:fe:d3:1e:c1:72:ad:48:fb:f6:18:2c:
41:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:45:A6:6E:F0:F9:0C:41:9B:9A:E3:6B:3B:0B:29:4A:C1:87:2F:5A
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/WkWmbvD5DEGbmuNrOwspSsGHL1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2b:7e:35:7c:16:f5:ba:fe:83:a3:c6:c2:33:ec:29:bb:47:
66:01:0d:78:69:35:6c:b1:b3:27:1a:fe:33:3e:b5:dc:42:d0:
43:85:9f:c7:bf:e0:98:9e:1c:b9:54:b1:71:5b:e0:1f:a6:b0:
0e:74:f4:b5:ad:30:d9:76:34:00:8f:6c:e3:f9:7a:83:ff:a8:
5c:ac:d0:10:05:45:8d:fa:d7:ca:5b:a0:66:60:4a:5f:5c:58:
1e:7b:cd:5f:37:8d:1d:be:be:8a:57:1c:fa:4f:9f:19:73:8f:
6d:b9:af:ba:c7:61:bf:74:c6:ea:3c:46:e4:7d:e7:20:ba:21:
49:3f:76:3d:f5:d2:bf:0a:58:05:d8:1c:43:14:af:3c:1e:9b:
2d:91:04:e9:d5:67:7a:ff:de:cd:4f:2c:bb:f7:3e:2b:87:93:
8e:f6:ad:1b:d1:e7:3b:41:00:6e:23:e3:ae:b2:4a:b5:a2:2b:
74:d7:1b:c9:43:25:f6:09:62:7a:93:1e:13:9c:f8:3c:26:85:
01:ec:6e:28:e0:46:35:4b:f3:02:96:47:8f:f4:e7:48:3c:a3:
94:01:7a:bc:99:cd:1b:91:a0:ba:61:66:01:c5:99:7b:25:27:
5d:46:cd:57:e0:45:eb:63:68:c2:59:73:29:d7:ef:60:fb:ab:
cc:d8:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:25:54 2024 by rpki-client on console-ams.rpki-client.org