Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/wTJwZ7INPxxYRxzLWTqwAIQT4AQ.roa
File: wTJwZ7INPxxYRxzLWTqwAIQT4AQ.roa (raw, json)
Hash identifier: 6jZ3G5UDMx/mCgKNTfqi504MAogntY9Hde9qVH6kvME=
Subject key identifier: C1:32:70:67:B2:0D:3F:1C:58:47:1C:CB:59:3A:B0:00:84:13:E0:04
Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial: 018CC94E5A67384E67E50BCC0344BDCB32E0
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/wTJwZ7INPxxYRxzLWTqwAIQT4AQ.roa
Signing time: Tue 02 Jan 2024 08:33:24 +0000
ROA not before: Tue 02 Jan 2024 08:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58221
IP address blocks: 91.239.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5a:67:38:4e:67:e5:0b:cc:03:44:bd:cb:32:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1327067b20d3f1c58471ccb593ab0008413e004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:9c:4d:61:1a:21:05:79:6e:27:c5:f2:32:
27:af:c3:6f:8f:42:ec:2f:35:f5:a8:ba:d7:52:a8:
72:89:cb:74:7b:f2:ff:1f:5f:f7:9a:79:22:d5:6f:
09:40:1d:36:c0:e8:93:11:29:e7:d9:c6:83:7a:98:
65:0e:58:6a:1a:a3:c7:e4:43:8f:4c:c8:58:b4:43:
52:6f:0b:99:33:0a:2e:05:13:bd:83:0d:0b:d6:4c:
61:c7:98:ab:3a:9e:90:90:75:63:59:44:dc:71:68:
b8:c3:cd:9d:62:f0:90:fe:b3:17:21:9b:95:24:3c:
29:33:64:d2:e1:bb:f8:f6:d6:32:67:41:72:e6:e8:
da:85:08:2b:b5:ca:e5:77:87:99:35:5d:2b:0f:13:
b3:f1:47:d1:fb:7c:8a:2f:68:69:1d:00:22:4a:d3:
21:0b:42:36:78:ba:5e:f1:79:96:b0:a7:9f:65:c9:
56:b8:a0:61:ed:63:7c:25:fb:4a:96:47:2c:02:93:
be:cb:64:83:9d:00:2f:82:a9:12:84:58:f3:b8:91:
19:6c:c6:b4:9e:88:55:8f:4f:02:4a:5f:a3:95:77:
ce:38:76:0c:0d:a4:3f:75:2e:8f:64:5e:b6:fa:de:
38:8c:cb:fe:a5:89:b0:6f:0e:53:c6:a5:c2:54:1a:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:70:67:B2:0D:3F:1C:58:47:1C:CB:59:3A:B0:00:84:13:E0:04
X509v3 Authority Key Identifier:
keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/wTJwZ7INPxxYRxzLWTqwAIQT4AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.80.0/22
Signature Algorithm: sha256WithRSAEncryption
64:83:a8:29:10:b6:93:23:58:1d:a8:51:e3:71:48:e1:d4:8d:
f4:f0:3f:18:ed:3e:47:d3:01:0e:13:b3:a7:16:89:5e:6f:14:
84:c8:61:c3:2f:56:d7:12:7a:66:d5:77:b6:18:6c:19:78:40:
8e:ba:22:e7:67:b7:49:52:ce:6d:26:07:88:0b:ac:a1:65:76:
19:7a:e9:ad:8a:40:0e:c6:13:3d:0c:4d:88:70:6d:e9:a1:86:
cc:fa:71:7b:04:cd:49:fe:55:b8:c3:28:62:a5:8e:04:05:7a:
7f:e7:a2:9a:ab:43:63:d8:00:d3:14:7c:04:ec:17:dc:56:06:
a6:0b:2a:ef:b0:59:5d:68:98:f3:39:0a:3a:65:d7:94:d7:ab:
1f:0d:4b:13:fc:bf:1c:b9:64:0b:8f:da:1f:1f:2f:2f:57:9e:
f7:d7:13:45:ab:86:22:48:7a:8f:14:b6:c2:95:47:9c:c0:92:
ba:a1:01:a2:e0:5c:a5:fd:21:8a:9c:d8:75:09:af:b5:8f:e4:
09:c4:bc:a8:8c:87:2a:8e:80:18:4e:cd:0a:95:fb:b8:b2:c2:
7d:8e:05:63:89:49:81:74:4a:a1:7b:72:a5:39:d5:5c:02:a0:
87:22:4a:0d:53:38:b9:ac:9c:7b:37:4d:36:4f:bf:bd:01:e7:
e2:15:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:47:03 2024 by rpki-client on console-ams.rpki-client.org