Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/wHl-FlZJtYlHUVFH6713QS-yMoo.roa
File: wHl-FlZJtYlHUVFH6713QS-yMoo.roa (raw, json)
Hash identifier: jjAeBR6lfy3bKeXrrhwpZAJZm/pLBgAMNUrM7V4kSOs=
Subject key identifier: C0:79:7E:16:56:49:B5:89:47:51:51:47:EB:BD:77:41:2F:B2:32:8A
Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial: 018DDA4E9CE8659D6543527ED43B289EE886
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/wHl-FlZJtYlHUVFH6713QS-yMoo.roa
Signing time: Sat 24 Feb 2024 08:50:01 +0000
ROA not before: Sat 24 Feb 2024 08:50:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59652
IP address blocks: 176.124.128.0/21 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:da:4e:9c:e8:65:9d:65:43:52:7e:d4:3b:28:9e:e8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Validity
Not Before: Feb 24 08:50:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0797e165649b58947515147ebbd77412fb2328a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:89:07:ca:4d:4e:64:64:24:99:f5:23:0b:
d4:02:d5:d3:a2:96:88:80:fe:b8:64:6e:84:ba:4f:
bb:b8:6d:bc:c4:e6:13:a8:33:84:69:7c:36:2b:70:
5c:64:d5:05:cb:c1:09:7d:ac:cc:d5:8f:41:4c:f4:
ce:61:39:b4:58:5a:5d:51:7c:2d:10:fb:00:2a:aa:
8e:f6:6d:4d:16:1d:8a:fd:da:56:c6:44:d1:70:da:
fe:de:ed:51:fa:13:04:34:4f:62:27:5f:d2:87:2e:
cd:5e:b3:62:e5:8e:f4:ce:89:6a:1d:d0:eb:23:76:
7e:1e:3e:57:89:22:ec:3e:dc:c0:97:95:7e:d4:ee:
99:cf:49:b7:95:ad:aa:4b:ad:0f:e4:d7:a8:9c:8f:
b3:91:29:29:37:bf:86:18:80:f2:8b:47:3d:f4:52:
e0:8a:96:e7:75:ac:74:07:e7:e7:00:da:22:a2:1e:
67:94:7f:07:be:70:6c:05:1f:05:01:33:45:73:58:
f1:aa:3b:89:58:52:f9:44:60:4c:5d:62:7e:d1:c1:
8a:3f:0a:85:4e:ef:b7:83:b9:1d:06:2a:9a:e8:11:
d3:61:6f:0f:2e:84:5d:bc:09:5e:19:62:ab:8b:80:
66:c3:44:44:96:48:80:a9:52:61:3c:5e:16:c7:a9:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:79:7E:16:56:49:B5:89:47:51:51:47:EB:BD:77:41:2F:B2:32:8A
X509v3 Authority Key Identifier:
keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/wHl-FlZJtYlHUVFH6713QS-yMoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.128.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:9e:38:5a:cb:43:5f:35:90:6c:77:ca:d2:4e:6d:5e:15:3b:
21:90:43:e9:7c:f0:67:90:54:3b:34:72:15:41:af:0a:f7:57:
df:90:48:2c:64:8b:6d:0f:f3:97:2f:e0:9d:70:47:37:5b:f5:
e3:cc:44:35:8f:e8:19:e0:a9:5e:0e:78:19:82:11:32:7b:27:
48:90:6b:f1:ab:76:33:cf:98:11:25:55:09:0c:97:d3:9c:4d:
91:25:6b:0c:8a:56:ac:be:2c:15:f9:08:62:c0:91:cb:ea:e5:
b0:d0:f0:66:7f:a7:75:b2:7c:c9:ea:b0:82:89:45:85:b9:24:
3d:b5:74:82:51:37:2f:69:3f:af:34:a8:c8:71:44:00:e3:97:
86:17:46:2e:da:47:d8:b5:08:ab:e0:11:56:84:de:68:bb:f4:
e0:e4:2c:cf:8e:1e:d5:db:d5:5e:25:66:00:fd:5a:0e:8e:f9:
c8:3a:bc:bb:97:fc:4a:f8:0a:2d:66:ba:c2:c9:58:b5:81:7b:
ef:6d:ec:05:eb:03:43:aa:cf:7c:23:2a:75:90:e9:fe:7b:fb:
7e:59:f9:02:f4:39:99:05:da:5f:40:39:6a:72:c7:84:f5:8b:
f2:7c:36:6e:47:da:9f:24:91:53:77:84:56:99:f2:2a:58:01:
59:53:58:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:54:07 2024 by rpki-client on console-fra.rpki-client.org