Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/WgVrbRpapLioT0wDoisbm2wFYvk.roa
File: WgVrbRpapLioT0wDoisbm2wFYvk.roa (raw, json)
Hash identifier: RkrfSZ5/RQ3wx+2mxdMw2b2VTLuWJJUYSGvnemK8XxE=
Subject key identifier: 5A:05:6B:6D:1A:5A:A4:B8:A8:4F:4C:03:A2:2B:1B:9B:6C:05:62:F9
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 018CC94DE78A310FD061996175CFEF616099
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/WgVrbRpapLioT0wDoisbm2wFYvk.roa
Signing time: Tue 02 Jan 2024 08:32:55 +0000
ROA not before: Tue 02 Jan 2024 08:32:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42815
IP address blocks: 87.118.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e7:8a:31:0f:d0:61:99:61:75:cf:ef:61:60:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 08:32:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a056b6d1a5aa4b8a84f4c03a22b1b9b6c0562f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:59:87:09:86:ed:6c:e7:9b:f3:ca:1a:f1:
c3:87:5f:ec:cf:8d:6b:02:e4:29:ca:56:50:de:b4:
c4:b2:6b:fd:63:5c:c8:14:2a:03:9b:3e:cf:01:16:
70:0d:7b:6d:c8:1c:9e:26:7a:92:63:a2:88:60:99:
96:a9:7d:bc:5e:b8:1e:80:39:c3:c5:86:a6:8b:87:
8a:16:f4:95:ee:69:ee:8d:37:87:d3:d0:74:a9:8d:
c1:6e:41:08:2e:04:a7:1f:8c:47:15:6c:bd:a1:16:
02:a8:b5:5d:dc:36:40:7c:8c:73:23:63:15:4c:48:
5d:0f:cb:86:ad:d3:7a:f3:46:72:eb:b2:20:d3:5e:
f3:0f:e0:a4:93:55:66:fd:17:5f:95:fa:d5:96:c3:
88:26:16:71:c8:3e:ff:de:11:60:75:78:75:a2:1c:
58:ff:a6:4c:41:38:dd:d7:78:cf:6e:fd:83:c0:8d:
91:49:fd:00:26:72:0a:21:3f:94:d8:a2:f6:b9:5c:
ff:1a:5b:b4:0e:1e:38:ed:e5:42:55:00:1b:09:22:
83:e8:ec:73:7d:17:7c:66:0d:67:f4:9c:6d:7a:ae:
0c:e8:e7:6d:19:46:4a:48:54:1c:79:0a:f6:8f:38:
82:12:51:31:2c:48:f1:86:29:ba:07:00:ae:4e:0a:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:05:6B:6D:1A:5A:A4:B8:A8:4F:4C:03:A2:2B:1B:9B:6C:05:62:F9
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/WgVrbRpapLioT0wDoisbm2wFYvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.134.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f1:60:0b:ab:76:4e:02:1b:6e:1e:33:40:34:0a:75:c2:a0:
ba:20:39:cb:a8:29:2c:e4:5b:e9:3f:8c:00:1d:e2:ad:c1:1b:
08:ca:48:5d:a7:43:a1:c9:fd:c8:87:4c:0e:0c:6a:84:c3:6e:
49:6d:90:97:a2:31:01:d2:65:f4:9e:b1:2f:cf:29:88:37:22:
b6:6c:af:e0:f7:4f:41:12:b3:9a:82:c3:60:2b:28:fa:5a:7f:
1e:40:07:94:4d:85:c1:30:92:2a:f9:3a:8b:44:44:99:c1:85:
72:19:b5:06:4a:5e:22:c3:7c:b3:77:be:d4:b7:96:d4:5e:37:
21:9f:10:9f:dc:80:98:be:fa:c2:93:0e:6f:d7:8b:26:98:eb:
62:f9:3d:61:58:91:08:2f:84:dd:33:73:42:ea:03:4a:e3:b5:
f7:7a:f8:aa:3b:6f:29:97:a9:c7:86:7b:8c:f0:e6:94:a0:fa:
b0:3d:ab:06:ef:89:79:c2:af:ac:89:3a:f6:84:5a:dc:ea:fd:
c1:88:9c:51:65:fc:bc:24:39:22:7d:c9:15:68:9c:a3:8e:5a:
2d:c6:92:21:e4:d1:73:c5:47:5b:d5:0d:89:dd:8f:b1:d5:7e:
2f:f7:48:3a:4e:2b:59:46:2f:ed:39:d9:b6:d7:39:9d:6f:41:
b5:13:b0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:13 2024 by rpki-client on console-fra.rpki-client.org