Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WQTK7ODDgsSFiU4F18PENMrI_iU.roa
File: WQTK7ODDgsSFiU4F18PENMrI_iU.roa (raw, json)
Hash identifier: HC/TLCKmCaGgXE8sGyV5q+erT36y4bhTSh10AX8jx+w=
Subject key identifier: 59:04:CA:EC:E0:C3:82:C4:85:89:4E:05:D7:C3:C4:34:CA:C8:FE:25
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0190E9B83FF11EF3C8B289E721470EE34DC2
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WQTK7ODDgsSFiU4F18PENMrI_iU.roa
Signing time: Thu 25 Jul 2024 11:48:04 +0000
ROA not before: Thu 25 Jul 2024 11:48:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 167.160.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:b8:3f:f1:1e:f3:c8:b2:89:e7:21:47:0e:e3:4d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 25 11:48:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5904caece0c382c485894e05d7c3c434cac8fe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:e2:df:74:29:5e:2a:5c:79:97:1a:bb:14:
e9:4e:04:14:e1:10:c4:18:14:cc:b8:84:b5:90:d2:
38:85:df:e4:16:09:07:27:42:a2:f5:3d:83:c5:dc:
5f:84:d9:b9:03:9c:e1:23:2f:7e:b5:d6:c8:78:9e:
b2:13:0b:d4:3e:bb:4b:f4:66:12:66:34:81:9a:a4:
cd:6e:5a:dd:24:61:ca:a5:ed:7d:2a:b1:14:f7:e6:
ab:64:a6:7b:eb:aa:df:04:c9:ca:19:1f:50:1d:db:
fe:f5:9b:4b:e8:d6:ee:32:e7:09:2c:61:14:47:cb:
25:85:f3:27:85:3b:34:aa:32:13:f3:23:a6:e1:69:
44:fd:b1:94:66:7d:ae:55:4c:c4:1e:88:ee:f6:03:
59:16:79:9a:ef:6b:e5:a9:ce:f7:88:d5:c6:b6:3c:
f0:04:a3:69:47:a5:1e:0e:52:ea:1e:13:b1:2e:e2:
dc:b1:ad:b7:bf:38:c9:ce:d8:29:36:6f:42:a5:a6:
a3:16:3a:b7:15:95:79:67:a8:4d:8e:50:0d:b8:6e:
34:16:25:40:e1:44:91:b4:c0:a2:43:47:72:61:6b:
72:fb:2f:9b:c9:b5:d7:f5:c3:72:68:09:c2:11:cf:
94:19:98:19:66:7d:ef:4a:75:a8:29:60:59:1a:53:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:04:CA:EC:E0:C3:82:C4:85:89:4E:05:D7:C3:C4:34:CA:C8:FE:25
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WQTK7ODDgsSFiU4F18PENMrI_iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.12.0/24
Signature Algorithm: sha256WithRSAEncryption
93:9d:40:eb:d3:51:cd:b2:60:b1:97:7d:7d:32:ee:f2:4d:da:
52:40:d5:57:6b:45:4e:e1:00:ae:9c:6b:79:ba:84:bd:68:92:
08:48:78:8d:81:2a:78:fd:91:d2:13:55:24:82:9d:b9:3a:8d:
4d:92:da:20:22:d6:61:cc:6d:6a:0f:91:e1:59:72:9b:cb:eb:
52:57:2f:92:e5:ca:c0:0b:31:49:c4:a8:bd:f8:b2:8b:7f:02:
5d:fa:ac:2b:36:ed:21:93:f0:28:f8:9d:67:4a:a7:0a:90:23:
60:71:14:cb:26:4d:4b:1c:60:e8:fc:1f:8c:05:8a:f5:f8:31:
28:55:0a:af:87:aa:88:d6:dc:85:4a:74:25:41:df:7e:5d:cd:
87:8c:74:cf:bd:e5:8b:01:d6:fc:5b:db:d1:1a:ba:e4:5e:6f:
c6:80:28:de:91:7f:13:6c:af:f2:17:a8:91:e9:72:16:53:3b:
96:a0:ef:47:2a:c5:01:c4:6a:97:03:6a:7e:de:0a:09:5a:cb:
e1:03:9a:4f:b3:ad:cf:49:d2:cf:07:44:60:e8:89:c2:54:bb:
52:c7:92:84:d1:77:ea:45:57:14:87:c6:2b:5f:00:ab:f7:66:
29:ff:9e:d1:30:9f:7a:2d:13:6a:df:9d:2b:de:5c:10:c6:0a:
c8:e9:0e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:25:15 2024 by rpki-client on console-ams.rpki-client.org