Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/Wjfigbiq0InHSCVrAHJs4du43Hc.roa
File: Wjfigbiq0InHSCVrAHJs4du43Hc.roa (raw, json)
Hash identifier: /+trifN+VX7KNUFqWTbfxUa4D1Ws/nu4la965xrwBHs=
Subject key identifier: 5A:37:E2:81:B8:AA:D0:89:C7:48:25:6B:00:72:6C:E1:DB:B8:DC:77
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 018CC8DF7F04A37C3275430653EF85192C28
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/Wjfigbiq0InHSCVrAHJs4du43Hc.roa
Signing time: Tue 02 Jan 2024 06:32:19 +0000
ROA not before: Tue 02 Jan 2024 06:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8220
IP address blocks: 91.212.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7f:04:a3:7c:32:75:43:06:53:ef:85:19:2c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Jan 2 06:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a37e281b8aad089c748256b00726ce1dbb8dc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:dc:10:06:c0:62:26:57:2e:e1:86:5b:07:
5e:cc:b4:e8:76:fc:fc:f9:e3:8b:5d:6f:39:7e:ff:
d9:f8:88:b5:7a:af:44:85:11:cb:8a:26:ac:5f:3a:
8d:fc:c8:d2:e1:b5:a3:dc:f8:8b:32:46:6c:d2:1b:
41:5c:88:14:08:c3:0b:88:96:49:2f:d5:b1:08:32:
11:b0:bd:34:99:01:47:78:6a:d2:c3:64:cf:6a:5b:
9d:55:a9:9b:c6:40:6e:05:9d:df:b7:61:cb:36:2c:
67:41:70:48:67:f0:e7:3b:a1:3d:a8:37:70:5d:f2:
33:38:86:c3:19:c3:2d:e5:3b:9a:46:13:6a:6d:9c:
91:20:73:37:ac:ff:a8:f6:76:92:fc:5d:12:28:6d:
c7:ba:67:7d:62:cf:24:d0:43:2a:1e:94:dd:24:4c:
e0:7c:1e:22:62:98:b8:ad:92:8f:02:8b:eb:ae:62:
d8:c2:19:ca:f1:9d:1e:fb:26:66:e1:17:52:f1:db:
95:44:65:70:cb:59:34:28:c1:9f:71:41:12:a4:17:
70:e8:3e:43:c5:36:c2:64:bb:a3:c5:02:c2:57:24:
0c:a8:27:1e:68:5f:01:4f:25:56:22:1d:3e:6d:1e:
ca:54:44:c4:00:7d:03:1c:0f:68:d2:33:e8:e0:6a:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:E2:81:B8:AA:D0:89:C7:48:25:6B:00:72:6C:E1:DB:B8:DC:77
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/Wjfigbiq0InHSCVrAHJs4du43Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.43.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:08:d2:ff:06:b0:6a:97:9e:61:e5:1b:52:35:30:80:e2:c6:
a8:5c:b5:6b:4f:7f:a3:35:3f:ff:c9:85:09:3a:66:92:f0:bd:
df:14:5c:49:19:86:f0:25:0d:e6:36:88:af:a7:18:f2:a9:d4:
2e:a2:d5:5d:56:2c:10:a0:9b:b4:53:db:6a:a7:1d:f6:67:4a:
ea:d7:91:09:b3:ec:0b:54:51:8b:63:4c:e6:c2:25:d3:42:78:
3d:f7:7c:44:3f:2f:ab:10:28:94:02:2c:9e:2a:eb:35:a9:65:
6f:b1:c2:23:b0:5a:16:1d:7b:8b:4c:80:c3:09:13:53:76:ae:
fc:d4:02:8b:0e:28:bb:4a:2f:6d:37:8c:33:06:ce:ab:53:37:
5a:a8:97:03:6c:80:4b:f9:65:c5:6c:1e:62:f9:30:0f:0f:17:
73:4b:de:76:b7:df:3f:cc:e5:69:52:02:fd:58:ce:3c:fd:4c:
b6:fb:a0:9a:ef:97:64:3d:b4:67:89:76:e0:fa:21:87:f0:d2:
7d:e4:31:d0:88:58:aa:db:da:56:e5:d8:45:d8:50:bb:e1:bc:
87:a8:49:22:ce:ec:e6:26:d2:6a:0d:13:f7:59:b1:39:4a:9e:
c0:00:97:c3:5d:ac:12:1d:a3:57:4b:8f:8e:d6:6b:b4:d5:84:
7a:f5:a0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:02 2024 by rpki-client on console-ams.rpki-client.org