Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WTcifuRA2Qh0bo7D4HZRW9C2cCM.roa
File: WTcifuRA2Qh0bo7D4HZRW9C2cCM.roa (raw, json)
Hash identifier: LSHaKQfktov8MAe9YqjddUqhXeDZ3ewOsjtG9eKAW3k=
Subject key identifier: 59:37:22:7E:E4:40:D9:08:74:6E:8E:C3:E0:76:51:5B:D0:B6:70:23
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019222A4A84E6BC7FB7BD78D0244D7AE3655
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WTcifuRA2Qh0bo7D4HZRW9C2cCM.roa
Signing time: Tue 24 Sep 2024 06:07:49 +0000
ROA not before: Tue 24 Sep 2024 06:07:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47924
IP address blocks: 45.148.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:a4:a8:4e:6b:c7:fb:7b:d7:8d:02:44:d7:ae:36:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 24 06:07:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5937227ee440d908746e8ec3e076515bd0b67023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:a8:cb:db:8f:96:50:c9:97:bf:ca:99:09:
1b:14:c7:19:2b:e0:13:18:a4:72:1d:e1:b9:d1:02:
b9:7b:76:8f:eb:ac:a5:d5:17:42:f7:09:7a:20:68:
54:af:bb:cc:f1:81:e2:5c:14:61:fa:35:81:f1:24:
fa:38:83:c1:b3:1d:65:a4:51:8c:df:ed:00:b2:43:
fd:93:1f:d0:ab:9f:38:46:39:ec:a0:8c:b5:21:3d:
7c:fb:84:7e:58:26:92:52:e0:e3:a1:c2:39:f9:f6:
a8:b2:f5:77:7b:46:42:71:e0:4e:0f:6c:f6:7c:ad:
f3:2c:e4:b6:4b:5a:99:66:0d:9f:28:53:b9:9a:7b:
2d:69:c2:ba:18:6a:bb:58:6d:74:4b:fa:4b:3a:ef:
50:bd:f8:4a:88:bf:b3:63:1b:84:dc:09:82:05:e1:
0c:c3:7e:82:61:71:fb:cd:34:30:20:76:ba:9b:97:
91:74:18:fe:67:57:c3:96:26:45:ca:c5:68:d6:ec:
a3:f8:5a:a5:6b:45:2e:37:17:ad:c0:52:7b:e9:6b:
63:53:ca:3e:b2:80:32:bb:fe:b6:24:fe:c2:7f:31:
44:f0:87:f4:52:9b:c6:96:1c:53:2f:03:e8:09:7e:
82:d5:0e:44:93:3b:be:0a:ce:f8:b0:5b:ed:08:1e:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:37:22:7E:E4:40:D9:08:74:6E:8E:C3:E0:76:51:5B:D0:B6:70:23
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WTcifuRA2Qh0bo7D4HZRW9C2cCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
Signature Algorithm: sha256WithRSAEncryption
55:82:10:b8:06:0a:33:0f:04:18:65:99:83:0f:2c:b3:1b:75:
0a:dc:bd:60:71:8a:9c:5b:c3:cc:80:15:a5:0a:bf:af:9e:be:
f7:e9:56:30:72:f8:3e:e2:5f:46:c1:56:87:6e:3d:cc:40:22:
4e:62:7f:50:55:e1:0c:97:44:83:0b:87:ee:13:29:32:78:6f:
57:b6:1b:26:99:c6:50:2f:b6:4e:0f:72:90:32:f5:f0:c5:ac:
4e:36:4a:cd:a3:c7:94:16:6f:25:9f:0d:7a:7c:b0:3d:bb:13:
70:9b:9f:43:4b:a9:df:2e:15:9c:b7:77:cb:93:09:89:d6:d4:
49:a3:6f:e2:f6:5c:77:51:56:b3:a8:5e:f2:34:82:7d:aa:ed:
d3:a6:fc:c2:30:21:ff:e5:46:ef:11:f5:7e:3a:9f:ca:6e:7f:
33:2b:4a:72:0f:bd:81:01:5b:3e:17:78:9d:ba:60:17:13:68:
b4:56:8f:06:eb:6f:a4:6b:6f:e4:b1:bb:00:e8:ba:54:12:6e:
e0:42:df:03:ae:ef:e4:98:d4:5d:7b:ba:79:d5:56:62:e7:15:
77:60:ef:be:f0:fa:1b:03:46:89:9a:e5:c3:bf:2d:c3:8b:fb:
0c:a0:57:ab:06:f7:c8:79:5d:7c:d3:0a:b6:7c:fc:65:d3:bf:
f3:b6:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:31 2024 by rpki-client on console-fra.rpki-client.org