Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/_WPTnnqKylIE_TjWJYAgH-WKgi4.roa
File: _WPTnnqKylIE_TjWJYAgH-WKgi4.roa (raw, json)
Hash identifier: itc+xaeYB58W6K7gJvCy9mZb/ld421ZV3AJcHv+RgXk=
Subject key identifier: FD:63:D3:9E:7A:8A:CA:52:04:FD:38:D6:25:80:20:1F:E5:8A:82:2E
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FEE785622CD8E16957937819D576C
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/_WPTnnqKylIE_TjWJYAgH-WKgi4.roa
Signing time: Tue 02 Jan 2024 04:30:27 +0000
ROA not before: Tue 02 Jan 2024 04:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43352
IP address blocks: 91.93.139.0/24 maxlen: 24
91.93.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ee:78:56:22:cd:8e:16:95:79:37:81:9d:57:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd63d39e7a8aca5204fd38d62580201fe58a822e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:fc:67:43:2a:3b:fe:26:56:36:16:b1:26:
f6:a6:91:f5:9a:5b:e5:16:ef:ea:20:f2:4f:78:3f:
d8:da:81:88:f7:79:9e:25:eb:6a:07:a0:a3:e4:b7:
2a:af:fc:a8:ad:21:57:fa:8a:fe:38:69:87:46:ce:
2c:2d:8d:97:02:e7:cc:5e:31:6e:46:09:a9:d0:b7:
b5:0a:0b:86:32:0e:31:89:54:a8:06:0f:4d:2c:31:
80:27:b9:a2:50:aa:72:f0:c5:1b:fa:0f:fe:7f:66:
9a:cc:ff:3c:da:6e:0d:b4:4f:dd:0d:2d:7b:d6:7a:
06:97:c8:6d:ef:1a:b3:af:60:47:80:75:70:b2:d9:
f4:e8:87:68:ab:3b:4b:59:e7:68:e4:45:cb:44:05:
48:68:8b:33:94:5a:21:6a:f9:63:29:40:1a:73:e1:
86:cb:ab:c6:5d:a7:11:01:ac:9a:17:11:02:44:07:
a8:5e:8c:e9:73:f6:db:34:06:6b:5d:5c:e2:62:0a:
db:be:85:0d:18:f5:28:87:01:75:6f:e4:31:68:2d:
03:9b:bf:f7:9f:2f:cb:27:e6:11:a5:b9:01:a2:ba:
c1:ae:89:7c:e6:47:63:7c:dc:74:30:42:15:0b:d4:
8e:03:21:d5:eb:15:3b:04:aa:8e:d7:5b:1d:fd:45:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:63:D3:9E:7A:8A:CA:52:04:FD:38:D6:25:80:20:1F:E5:8A:82:2E
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/_WPTnnqKylIE_TjWJYAgH-WKgi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.93.139.0/24
91.93.155.0/24
Signature Algorithm: sha256WithRSAEncryption
03:cf:16:64:e8:d2:45:5c:5e:81:ff:20:18:ee:69:8d:94:22:
a7:a0:7f:6c:eb:30:a2:49:06:ad:47:21:21:b9:b7:06:81:5a:
4a:c8:8d:cd:e6:47:b7:32:20:00:1f:e5:9b:19:73:e2:86:90:
a3:d5:35:86:1a:7b:cd:fa:d9:4f:63:d3:57:a5:65:df:c7:55:
94:c4:0c:16:15:ee:f3:a5:d0:99:47:dd:89:48:14:aa:43:2d:
a1:1e:b4:85:a2:75:35:b5:46:a4:13:70:9f:74:a4:8e:c5:99:
f0:ba:b8:75:9c:d1:2a:a1:40:55:4d:2c:be:10:1f:85:2c:3b:
9c:74:8a:9e:01:9f:cc:a5:81:ae:b7:25:75:51:91:d1:69:01:
30:6e:e0:f8:ff:72:52:e2:bd:ab:94:fd:03:cf:03:f7:83:32:
27:93:d9:de:0b:37:6b:77:7f:fc:b7:89:da:96:13:5d:e8:ed:
a1:56:76:ed:40:de:af:9b:22:41:03:50:a1:24:9c:f9:0f:7a:
68:b9:80:de:ce:4a:0e:49:ec:a2:84:41:90:b1:3f:79:29:36:
f1:17:97:11:cf:41:c0:1f:ef:c2:ff:f7:f8:a0:fd:30:f0:f6:
78:9a:e9:8f:26:5d:df:00:01:07:b6:7a:07:4e:26:bd:50:1d:
34:e1:01:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:03:55 2024 by rpki-client on console-fra.rpki-client.org