Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WHGZ5tRBsV7kLGbCXajKd4ikRlE.roa
File: WHGZ5tRBsV7kLGbCXajKd4ikRlE.roa (raw, json)
Hash identifier: dQwpm7G6WkX+iWiUh246TeEDeB34hKhMDx/1M9cekYE=
Subject key identifier: 58:71:99:E6:D4:41:B1:5E:E4:2C:66:C2:5D:A8:CA:77:88:A4:46:51
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79565307C28E7F050EA2D0773635A0E
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WHGZ5tRBsV7kLGbCXajKd4ikRlE.roa
Signing time: Tue 02 Jan 2024 00:31:45 +0000
ROA not before: Tue 02 Jan 2024 00:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62279
IP address blocks: 89.47.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:65:30:7c:28:e7:f0:50:ea:2d:07:73:63:5a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=587199e6d441b15ee42c66c25da8ca7788a44651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:d2:ef:75:ae:41:da:45:87:4d:94:68:85:
69:60:28:ce:de:c2:7b:5a:ff:1e:a0:20:e3:8c:2d:
9b:18:92:d4:f4:4c:59:2c:de:7d:9e:7f:81:f2:9e:
33:9a:0d:dd:08:d3:02:a5:9c:e4:9d:fd:de:bb:14:
b9:44:1a:83:6f:81:27:f2:48:2c:d5:b1:6d:eb:31:
52:71:b6:2c:45:33:f3:f8:89:34:de:17:71:16:bb:
4a:9b:d2:69:80:3e:1d:f5:38:81:81:f6:12:03:1c:
b3:bd:93:7c:3f:75:02:44:c7:a0:f3:1b:58:8a:54:
0d:6a:93:4f:a5:6e:29:7a:fc:f5:8d:fb:5d:7e:09:
b2:b6:e0:0b:da:3b:f0:3f:91:21:66:68:18:fd:e4:
66:90:7b:67:cf:2b:1b:80:00:9d:1f:9f:c8:01:1f:
d0:63:2f:e9:48:0f:4e:4f:d0:89:1d:b5:c4:c2:ff:
7b:9d:e2:30:17:ca:37:9e:ad:67:54:9e:52:ac:11:
76:32:44:27:97:2d:3a:0e:6a:dd:63:d8:e9:ae:3e:
7f:71:2b:31:49:ef:a5:f5:23:24:96:6a:ed:a1:2e:
af:fc:ef:77:08:91:00:2c:d3:bc:07:30:8d:cf:f9:
ef:3a:06:ff:89:16:21:17:00:94:19:a2:15:bf:03:
52:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:99:E6:D4:41:B1:5E:E4:2C:66:C2:5D:A8:CA:77:88:A4:46:51
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WHGZ5tRBsV7kLGbCXajKd4ikRlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.179.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:fd:54:7c:c1:db:13:5f:61:c0:33:6e:6f:5b:50:15:de:31:
d0:78:57:32:5f:56:d7:60:68:1b:f4:35:8b:91:db:f5:61:a3:
d7:66:4f:2d:15:cb:6c:1f:b4:1f:a0:7c:72:a6:f0:01:44:c4:
6a:e3:be:72:86:03:17:bb:5a:30:77:98:ad:db:27:45:96:1a:
5b:bd:02:ab:09:d6:55:1f:0e:37:fc:49:ca:d1:11:1e:e9:1f:
e9:75:82:db:d6:e6:da:22:b2:a4:03:a6:85:b6:97:a2:e5:49:
92:18:a4:da:0d:b5:91:ea:6d:f7:5f:34:6b:31:ec:64:be:ad:
56:ab:df:b0:7a:0e:69:a8:8a:d0:21:ab:dd:1d:7e:ae:73:4c:
3c:81:aa:4a:8b:f4:ed:eb:65:76:76:26:52:d7:ee:00:64:49:
1e:56:48:ed:e7:aa:7f:a8:bb:17:9c:06:0b:d5:2f:98:a8:66:
9c:06:8b:00:a5:3a:5b:81:1c:ba:fd:35:8e:9e:a7:97:e2:72:
16:d9:4d:2c:d5:b1:61:19:b2:29:61:66:3f:53:53:b3:eb:99:
74:b2:ed:6b:8e:a3:7c:8d:b7:ec:75:91:b3:2c:b7:b5:e9:db:
f7:f4:c6:94:0e:69:8f:82:e2:45:2b:6a:3f:59:a6:a1:92:df:
75:1c:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:45:50 2024 by rpki-client on console-ams.rpki-client.org