Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WKZEG84-shx5CZeoMtYJKfIeqh0.roa
File: WKZEG84-shx5CZeoMtYJKfIeqh0.roa (raw, json)
Hash identifier: lGE1eHDQdvQs5ZzeEPwHeW9djCWeayqg7osiz8NnyRw=
Subject key identifier: 58:A6:44:1B:CE:3E:B2:1C:79:09:97:A8:32:D6:09:29:F2:1E:AA:1D
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018CC801D4DAE140660332B2EE6E9E3F0E22
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WKZEG84-shx5CZeoMtYJKfIeqh0.roa
Signing time: Tue 02 Jan 2024 02:30:12 +0000
ROA not before: Tue 02 Jan 2024 02:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.8.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d4:da:e1:40:66:03:32:b2:ee:6e:9e:3f:0e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 2 02:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58a6441bce3eb21c790997a832d60929f21eaa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7d:44:ae:22:ea:b3:bf:60:19:3d:fd:19:48:
71:be:16:ba:64:d1:e3:bd:bb:e3:8e:cd:97:0f:57:
60:7a:0f:74:8f:f3:17:da:1c:72:5c:e3:fa:05:e5:
af:7b:f3:3a:92:a6:99:ca:5d:27:90:17:d1:67:7b:
ca:4e:14:84:32:37:3d:c9:e7:b6:9d:ff:3f:f7:56:
09:08:c8:de:08:23:74:a5:61:5b:e7:f8:f5:6b:94:
97:24:9a:de:13:8d:9a:94:cc:c0:cc:a0:9a:01:52:
e2:fd:75:77:1d:88:a8:b9:03:dc:92:e0:5c:c8:e4:
90:34:f1:f3:df:a9:a5:aa:1b:03:af:8d:3e:2e:0b:
9e:f2:56:9f:d8:1a:62:60:46:0c:d3:d5:b5:74:35:
f2:38:d1:b2:74:70:2c:14:bf:12:1f:76:e6:ce:f7:
76:61:10:6b:17:08:ad:fb:00:d5:40:d5:a6:62:af:
e8:c8:b8:36:3a:29:43:91:81:8f:ec:08:25:11:b6:
17:64:eb:19:c8:7e:a9:40:dc:b2:b8:13:8b:3f:98:
cb:59:95:48:f6:ea:1b:15:5c:a3:c1:56:90:81:6b:
6c:4f:e4:6a:95:8d:6b:16:0e:4a:89:17:e6:a8:b7:
40:fe:0d:cc:54:df:79:02:bd:ab:cc:76:fc:a4:b1:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:44:1B:CE:3E:B2:1C:79:09:97:A8:32:D6:09:29:F2:1E:AA:1D
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WKZEG84-shx5CZeoMtYJKfIeqh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.33.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d5:2e:34:2e:f0:fb:1b:b5:8a:8f:6d:e4:dc:70:ed:79:19:
91:22:6b:65:28:27:0b:d9:df:7b:09:1c:5a:47:65:23:07:aa:
af:61:69:99:d8:75:ba:10:a5:99:5d:4a:fa:ce:ae:e4:f7:a2:
a7:35:53:d1:ec:73:dd:64:9d:60:d8:e5:2d:4d:15:af:75:5d:
f3:ba:c5:d0:15:8b:5b:b2:ad:c1:b2:08:77:51:c6:c9:33:85:
66:ef:fd:a2:22:87:e5:99:74:9a:e3:2e:58:d8:c3:50:41:8e:
d6:79:32:f8:33:91:c5:74:40:7a:2c:21:19:d4:27:ad:0d:ff:
aa:3d:3d:a5:d9:e1:ca:f9:0b:76:4e:b1:fd:ba:80:4d:64:f4:
ef:c1:d0:46:90:42:9a:e9:3f:70:13:a5:0e:f5:93:46:37:fa:
ae:4e:b3:51:d2:7a:6f:34:cf:27:24:40:d7:03:76:a7:f0:16:
a4:ce:fd:59:4e:fe:95:f5:a0:1c:0e:30:93:ca:dd:2a:2d:7f:
e9:0d:ae:ba:71:93:bb:3b:20:51:09:32:01:98:ae:ce:0b:fd:
3f:99:f9:cc:52:ad:b5:88:25:43:b1:e1:a9:5a:9b:9e:43:d2:
43:8c:30:99:4d:7d:8a:ac:9f:7c:94:55:c0:d9:58:91:16:67:
cd:73:27:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:02:25 2024 by rpki-client on console-ams.rpki-client.org