Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/wbBdIZ72KmkGPINWNX-dv5PQlvI.roa
File: wbBdIZ72KmkGPINWNX-dv5PQlvI.roa (raw, json)
Hash identifier: RyHYhPLqMM0Zs8CjVO4mQya9Yecue77o/Ld42R+L3ns=
Subject key identifier: C1:B0:5D:21:9E:F6:2A:69:06:3C:83:56:35:7F:9D:BF:93:D0:96:F2
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 018CC7933A479431A791911FFC0CEAFDE9D6
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/wbBdIZ72KmkGPINWNX-dv5PQlvI.roa
Signing time: Tue 02 Jan 2024 00:29:23 +0000
ROA not before: Tue 02 Jan 2024 00:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209155
IP address blocks: 91.211.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3a:47:94:31:a7:91:91:1f:fc:0c:ea:fd:e9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1b05d219ef62a69063c8356357f9dbf93d096f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:b8:7c:3f:73:33:94:5a:8f:18:6c:c7:b0:
48:36:48:04:c9:29:ec:8a:dc:8b:a8:a9:a4:03:84:
22:96:be:23:5a:67:2d:ca:8d:10:93:b0:3e:e2:d0:
59:95:fc:13:99:24:82:22:8c:6a:4e:fc:d1:db:97:
15:ac:fb:d6:80:27:a4:3d:51:d2:ab:67:d7:06:d2:
fb:a3:4e:61:6e:68:62:78:be:72:cf:81:df:bb:3e:
01:e8:5c:81:f8:f0:f4:3e:be:5d:ce:e5:0f:a4:aa:
02:47:b9:08:8a:53:92:7d:06:09:02:6b:dc:07:1e:
fc:69:66:b6:10:13:56:62:e5:1f:c6:8e:d6:19:fd:
ae:17:7a:44:ab:42:39:f1:e0:14:e1:ee:d2:3f:a1:
7d:8d:59:40:cf:71:32:98:f5:f7:fb:c5:09:e2:37:
33:20:e8:d0:a7:5c:ac:c7:48:b9:68:0d:b6:02:5e:
11:2b:78:d3:b0:d8:05:83:a0:cd:7f:c8:68:cd:47:
ea:c1:05:24:4c:a4:df:df:06:3c:10:15:39:9d:96:
67:e1:04:cb:72:55:71:28:72:57:a2:2a:b7:04:db:
cd:25:2a:7f:25:81:7d:28:a4:6b:af:f0:dc:fb:5e:
03:3f:3b:92:ff:68:b0:99:59:6c:94:e7:ba:47:63:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B0:5D:21:9E:F6:2A:69:06:3C:83:56:35:7F:9D:BF:93:D0:96:F2
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/wbBdIZ72KmkGPINWNX-dv5PQlvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.90.0/24
Signature Algorithm: sha256WithRSAEncryption
57:27:9a:74:50:8f:7f:f2:6e:0e:96:41:fa:93:38:ba:1a:bc:
27:34:46:a8:fb:68:bf:40:e8:e0:f4:2c:ec:96:fd:7a:58:8b:
e5:ca:53:2c:0e:81:7a:f3:3e:c9:a1:37:d4:62:76:93:33:a2:
b6:5c:f6:39:2f:35:cd:db:c1:63:c7:77:6b:6f:a4:5a:f9:0e:
06:54:5d:36:d1:ef:63:5b:cb:34:6c:64:ae:ef:9e:5e:59:e4:
e7:5e:4d:ce:76:5c:08:68:f0:50:a4:d4:ef:7f:ff:f5:be:1e:
85:1d:77:61:f9:98:ce:4d:f2:ea:44:0f:cc:65:8e:af:c8:45:
de:a4:86:1a:28:34:ef:73:c1:05:5d:c0:f9:d4:8f:5d:9f:2f:
ef:21:4c:bd:a1:b7:19:72:52:27:4d:68:bd:3e:e7:31:f1:1e:
ef:e5:58:1b:55:3b:9e:51:c5:46:f2:79:5d:c4:63:c0:24:4a:
02:29:d9:a1:5a:05:bb:81:f9:01:88:e5:41:29:92:83:43:a8:
e7:3a:ec:67:eb:92:2f:46:fb:fd:3b:59:d7:61:d1:22:7c:b5:
df:e8:b4:6d:3c:be:25:7e:c8:b3:f4:30:fa:d9:05:d7:e6:25:
2e:b0:c9:fc:78:93:a9:b5:4b:ba:48:30:c6:ba:0e:82:fe:f5:
78:b4:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 09:20:31 2024 by rpki-client on console-fra.rpki-client.org