Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/WAXfaCwq8gy5fzYsBVRDCJvR0uM.roa
File: WAXfaCwq8gy5fzYsBVRDCJvR0uM.roa (raw, json)
Hash identifier: B8nMb7XC6UZowviWps22dmdyOLfKfGCFUe4dR5/X0+4=
Subject key identifier: 58:05:DF:68:2C:2A:F2:0C:B9:7F:36:2C:05:54:43:08:9B:D1:D2:E3
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018CC7953198AB84856D9C081A17EE80875D
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/WAXfaCwq8gy5fzYsBVRDCJvR0uM.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46562
IP address blocks: 176.113.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:31:98:ab:84:85:6d:9c:08:1a:17:ee:80:87:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5805df682c2af20cb97f362c055443089bd1d2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:be:c9:63:43:c8:ea:d3:bb:9f:b1:71:58:51:
2e:55:6d:19:73:d4:88:e0:1b:f8:c5:19:e6:52:99:
77:69:ac:45:b2:b1:0e:e3:42:a8:ef:4e:9b:22:ff:
8e:91:a3:9e:f5:5a:56:d1:8a:2b:56:8c:5b:2e:f8:
f4:96:27:13:81:85:11:0c:ed:79:5f:1c:54:55:14:
53:19:07:80:08:0f:f1:2b:1b:d4:c1:4c:53:6f:53:
66:3b:74:35:6b:d5:39:be:1d:fc:86:b3:a4:f1:88:
5d:4b:97:b9:b7:15:18:a1:5e:d2:4d:5f:8d:ff:60:
ed:8a:98:64:8a:c5:4b:ad:30:9c:6d:90:01:c8:80:
80:8b:c5:4b:73:74:a7:91:52:07:da:ed:a5:cb:4a:
cb:e3:c9:66:40:37:47:38:c9:24:07:df:7b:db:25:
06:8c:9e:f7:74:dc:e0:2e:4a:88:81:68:0b:b9:a5:
a2:5a:7c:40:ff:f5:bb:8f:a3:42:9e:5a:bc:ae:11:
3f:26:be:df:50:82:0a:c2:4c:c0:6b:68:6c:5c:ae:
57:8d:b2:92:89:c8:f0:83:72:9c:a3:ac:8b:36:d0:
33:64:96:c1:8d:31:ab:97:c1:64:25:04:10:1d:80:
0d:6c:45:9c:46:17:c7:76:50:b3:68:de:e6:59:52:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:05:DF:68:2C:2A:F2:0C:B9:7F:36:2C:05:54:43:08:9B:D1:D2:E3
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/WAXfaCwq8gy5fzYsBVRDCJvR0uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.98.0/24
Signature Algorithm: sha256WithRSAEncryption
17:26:2e:b5:f8:c7:03:c3:4e:69:33:90:05:8c:da:e6:34:4f:
4e:f7:85:a4:bb:68:03:f7:fc:ae:d6:72:db:73:59:17:d6:93:
fc:54:e3:a4:34:61:2f:9a:a1:66:68:f0:f8:38:63:c3:d2:70:
06:ef:76:29:ac:f8:5d:aa:c3:b5:23:0b:44:8f:96:58:9e:08:
aa:cf:1f:2d:e2:c6:78:e5:3f:9e:ac:53:06:1a:ef:48:a6:51:
2a:9d:26:d6:0c:21:c2:2f:da:9e:5d:02:36:bf:8e:e2:84:07:
90:a3:a5:b5:c8:a1:b0:8f:a1:e3:9c:33:d9:4a:e0:22:f7:7a:
eb:7d:02:81:30:89:29:1f:0d:7b:62:8e:4c:63:be:9f:a5:f9:
89:33:7e:21:b5:b5:2d:33:73:df:91:87:df:52:72:0e:90:65:
aa:21:e3:2b:93:24:bc:12:60:48:f9:07:9f:0a:0c:ae:69:0d:
d9:a0:ec:51:80:85:87:18:39:26:4a:d4:da:6e:fe:4a:c3:ba:
a9:79:c6:16:97:29:bd:66:39:a9:c2:95:9f:e5:2c:4d:db:4c:
8c:83:ea:dd:47:34:79:00:41:0f:27:0b:80:5e:8c:c1:8c:2d:
f7:35:5d:24:3a:50:91:c2:ea:91:0d:cb:37:e8:3d:e6:b5:e7:
bc:0e:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:55:21 2024 by rpki-client on console-ams.rpki-client.org