Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wJZFm7JfdVEfF4LwgNnUFjsWCQs.roa
File: wJZFm7JfdVEfF4LwgNnUFjsWCQs.roa (raw, json)
Hash identifier: hhZt79QBhYO+4vym5Wf3P6N7A3XjF1TNX/Fn0aJRgV0=
Subject key identifier: C0:96:45:9B:B2:5F:75:51:1F:17:82:F0:80:D9:D4:16:3B:16:09:0B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019179B3A8323F339624E80DCD2351BE95A6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wJZFm7JfdVEfF4LwgNnUFjsWCQs.roa
Signing time: Thu 22 Aug 2024 10:48:22 +0000
ROA not before: Thu 22 Aug 2024 10:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47516
IP address blocks: 45.87.120.0/24 maxlen: 24
91.132.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:b3:a8:32:3f:33:96:24:e8:0d:cd:23:51:be:95:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 22 10:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c096459bb25f75511f1782f080d9d4163b16090b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:09:68:3c:3f:05:85:87:32:f7:9a:61:36:
99:13:40:c5:0d:09:bc:e0:a3:df:99:80:c1:bf:f2:
5a:7b:6a:68:90:12:f4:37:ce:ef:f8:58:11:70:94:
cd:ed:5e:d0:6d:52:4e:cb:3c:ec:0b:3b:82:9a:38:
77:71:65:b2:1a:0e:6d:e3:f9:36:64:8d:d8:a6:89:
ce:92:03:ec:3f:5b:aa:94:64:d8:47:84:fb:cc:90:
87:06:ff:12:75:b6:27:19:8c:6c:e9:24:4d:fc:30:
b3:e9:45:56:5a:d8:91:03:63:90:79:59:53:72:99:
e8:36:04:69:7d:8c:a4:51:02:79:0c:2e:c3:16:79:
b7:a4:bf:3e:b5:94:64:ca:f2:eb:8d:0a:0d:9c:a2:
24:18:06:08:1d:0f:27:9f:ee:a7:98:79:b8:fa:1a:
35:ca:ec:05:79:d6:0b:e9:07:8f:a8:ff:d0:1c:6a:
ab:84:32:e2:30:1a:5a:9a:5a:8e:4e:7c:6e:be:75:
ca:5d:8e:ee:67:69:28:72:99:c2:9f:47:86:3f:97:
b7:eb:e4:15:98:21:08:6f:24:d7:45:51:ae:ac:3e:
74:3d:4c:27:0f:4b:77:af:5b:df:a3:54:ee:e5:c6:
3e:eb:17:df:7d:33:46:21:88:70:78:13:7e:87:5c:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:96:45:9B:B2:5F:75:51:1F:17:82:F0:80:D9:D4:16:3B:16:09:0B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wJZFm7JfdVEfF4LwgNnUFjsWCQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.120.0/24
91.132.49.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e0:61:8f:45:af:8b:da:76:e7:55:91:2f:0f:5b:e8:b4:82:
cf:76:61:a3:d5:22:aa:f4:eb:2d:2a:e9:69:96:48:bf:44:e0:
cc:e7:f1:4b:84:d4:60:89:ca:c9:21:1a:68:26:a0:c6:eb:ca:
b1:de:9a:ff:0f:cb:02:54:1c:22:cb:68:1b:f7:41:3c:ef:1b:
6f:43:2d:3c:7a:af:92:84:8f:37:7a:4d:e4:38:27:5c:22:0c:
c7:41:ca:07:2d:20:0a:c8:62:97:bb:39:d9:63:97:f2:1a:94:
41:a1:73:e0:be:9f:95:a0:bd:0c:c3:b4:36:26:95:d0:3c:ef:
c9:3a:c2:06:35:fb:d2:a3:78:89:f4:c1:14:c4:29:94:d1:a5:
4d:21:f3:49:e4:fd:66:e5:be:14:39:9e:8c:06:eb:75:4a:a5:
c4:b8:46:2c:a6:39:6d:b0:db:f4:87:79:e0:6c:55:07:3a:e8:
f7:0d:49:fd:54:67:49:07:fd:aa:b2:43:58:37:46:9e:b4:1f:
ab:77:e6:40:0b:45:2b:27:65:3a:cd:fe:30:a4:ab:df:5f:39:
94:67:d1:74:45:ef:1a:c5:68:0a:75:1c:ae:be:5e:af:df:2d:
a3:ec:bc:c1:2c:9e:8c:21:36:b8:75:77:18:64:26:89:89:a8:
f6:3a:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:14:36 2024 by rpki-client on console-fra.rpki-client.org