Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/wblRrkdqz0BMoHYQYXIoLYR3D9c.roa
File: wblRrkdqz0BMoHYQYXIoLYR3D9c.roa (raw, json)
Hash identifier: mQNcivvfX1lIGQUZpX1rBGtJeKuQbVQmWKE71aDxB4g=
Subject key identifier: C1:B9:51:AE:47:6A:CF:40:4C:A0:76:10:61:72:28:2D:84:77:0F:D7
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018CC5003080A315A3DD132B4630DAE5D65E
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/wblRrkdqz0BMoHYQYXIoLYR3D9c.roa
Signing time: Mon 01 Jan 2024 12:29:33 +0000
ROA not before: Mon 01 Jan 2024 12:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 91.208.245.0/24 maxlen: 24
91.208.246.0/24 maxlen: 24
45.10.70.0/23 maxlen: 24
45.10.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:30:80:a3:15:a3:dd:13:2b:46:30:da:e5:d6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 12:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1b951ae476acf404ca076106172282d84770fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:3c:3e:9b:9d:d1:b0:41:df:d4:ca:60:df:
4d:f5:57:ca:6d:5b:40:7e:0e:f0:b2:d6:64:f1:22:
84:3d:42:45:90:d3:07:ea:1b:29:af:de:b7:8c:49:
6e:ae:3c:fd:08:a1:ab:93:b5:79:44:a9:da:34:ad:
4c:d1:af:48:72:42:2c:96:01:e8:fe:64:95:8c:27:
6d:20:ea:ac:c9:a1:c3:54:82:48:b0:40:04:77:73:
85:e0:a6:93:be:62:25:3c:28:96:ac:86:53:a9:a6:
8b:6a:a9:07:c9:c1:0d:44:36:84:d1:20:0d:25:e9:
12:0e:8e:72:90:da:53:df:4b:5b:28:87:3f:33:b7:
16:06:ef:f3:73:df:81:0b:1d:cb:db:33:6a:14:76:
a4:66:ef:2f:44:c8:9a:b5:0a:b3:11:94:2b:4e:c9:
c1:97:37:c4:6e:05:df:c2:e2:a1:1d:88:2d:e2:d8:
0b:2e:df:68:b4:f8:88:d8:1c:75:12:bd:c4:76:34:
83:37:d1:18:c8:31:78:fe:0e:36:91:16:33:07:7a:
30:61:39:71:5d:e8:83:f5:51:27:12:c8:0e:49:70:
e4:d7:51:97:1e:94:20:6d:3a:5a:30:8d:7f:91:a2:
f3:9e:04:38:1d:fe:24:0d:1b:1c:7e:47:56:40:7d:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B9:51:AE:47:6A:CF:40:4C:A0:76:10:61:72:28:2D:84:77:0F:D7
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/wblRrkdqz0BMoHYQYXIoLYR3D9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.69.0-45.10.71.255
91.208.245.0-91.208.246.255
Signature Algorithm: sha256WithRSAEncryption
0a:c5:bc:36:4f:cb:4a:1f:9f:92:c2:a9:5c:a1:0e:b3:d9:c4:
aa:88:3a:da:0f:15:35:7b:fc:31:97:f8:e7:fc:8d:cc:e9:e9:
72:f7:c0:ee:ba:df:59:e6:19:46:3b:3b:89:1e:e2:ea:ae:ab:
43:46:b0:54:ac:59:37:63:9b:5b:5d:c5:1c:14:3c:d7:6c:46:
5d:db:db:b3:e7:4c:76:b5:b2:fb:6b:d6:a4:84:ff:d8:93:45:
ba:7e:2f:65:94:e3:61:52:de:39:4d:e7:81:a4:06:c8:56:57:
17:1e:01:b8:8f:7c:c7:59:43:c1:2e:6f:6a:fe:8c:d6:33:71:
b5:89:10:74:8a:ad:33:bb:ee:04:79:a7:f5:a2:e0:d2:85:73:
94:2e:30:08:6c:48:85:42:5c:b1:c2:c7:76:ac:b1:cc:ec:e2:
df:b1:8b:9e:3a:c0:36:d4:9d:86:6e:05:69:ee:fd:ed:be:ef:
fd:65:da:cd:20:2e:fa:0b:9b:d7:ce:87:6a:63:8f:6c:bc:09:
36:45:33:ce:9b:d2:26:02:ae:02:88:9b:3b:f6:28:cc:05:8f:
31:5d:04:1e:20:c4:1b:71:b2:d2:19:d1:0b:98:15:71:5f:5d:
ae:31:b3:e4:0e:16:56:20:5e:b6:28:13:5c:b8:db:0c:00:07:
ed:c6:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:54:08 2024 by rpki-client on console-ams.rpki-client.org