Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/WvquLfoBWB-lSojS4j3duhjaOfc.roa
File: WvquLfoBWB-lSojS4j3duhjaOfc.roa (raw, json)
Hash identifier: Kjht5i+kXveB46V9eg1ak0lgxqIrp+RsZmxkygdEoVM=
Subject key identifier: 5A:FA:AE:2D:FA:01:58:1F:A5:4A:88:D2:E2:3D:DD:BA:18:DA:39:F7
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 018F9F62D1CEECC0717E32637DBBF1D765FA
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/WvquLfoBWB-lSojS4j3duhjaOfc.roa
Signing time: Wed 22 May 2024 08:20:04 +0000
ROA not before: Wed 22 May 2024 08:20:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.93.64.0/24 maxlen: 24
193.93.65.0/24 maxlen: 24
193.93.66.0/24 maxlen: 24
193.93.67.0/24 maxlen: 24
2001:678:890::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:62:d1:ce:ec:c0:71:7e:32:63:7d:bb:f1:d7:65:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: May 22 08:20:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5afaae2dfa01581fa54a88d2e23dddba18da39f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:e1:71:4f:63:76:aa:fe:18:72:65:a5:52:
ea:a7:eb:fb:fd:e7:36:05:c4:d7:4b:24:93:16:aa:
bc:6a:61:10:c6:6e:7c:34:bb:a9:24:f4:19:1a:c6:
dc:94:d0:2b:cf:d5:f1:85:e4:af:5f:52:0d:52:ee:
b2:5e:a4:08:f6:33:a6:46:5a:6c:6a:37:c7:13:1d:
15:74:04:3e:33:19:08:55:08:b5:4a:65:06:db:bc:
2f:42:f0:bb:48:83:24:e0:22:ac:df:73:2a:22:53:
5f:ae:ad:ee:3c:5f:b2:17:ae:33:5d:90:d7:14:e5:
1b:d0:2c:50:a9:a3:9a:a8:5c:00:13:f8:ed:ff:5a:
54:52:f0:99:bf:df:52:d0:00:0f:fb:7c:f0:b9:58:
d1:4f:af:43:db:d5:1c:71:40:ba:9c:59:a1:0c:51:
83:69:7a:51:ee:12:06:a8:f1:fc:43:46:c0:00:9b:
ec:e8:57:22:3a:c6:e5:96:a2:c9:65:12:2e:32:b5:
4d:b6:13:a0:a2:2c:70:31:da:f4:9d:88:46:ec:bb:
7d:83:b5:30:3e:66:d8:f0:34:26:52:45:a7:49:85:
d3:bd:4f:9e:70:20:65:a7:58:07:71:d0:2a:07:cf:
a4:de:3e:5e:44:36:49:45:a4:19:2d:26:69:23:6a:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FA:AE:2D:FA:01:58:1F:A5:4A:88:D2:E2:3D:DD:BA:18:DA:39:F7
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/WvquLfoBWB-lSojS4j3duhjaOfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.64.0/22
IPv6:
2001:678:890::/48
Signature Algorithm: sha256WithRSAEncryption
84:ab:f8:59:d4:88:97:e6:d7:b4:39:6d:ef:11:54:30:d4:32:
2c:aa:9d:8d:7e:b4:eb:83:ab:77:d0:a1:cd:fd:f0:ab:6c:2f:
d3:7c:e8:7b:9f:ac:f0:db:bb:e5:c4:2b:8b:fe:73:86:1e:01:
58:57:e5:1f:b2:cd:6a:46:f2:ad:be:c2:5b:fc:69:9c:c3:38:
0d:b0:69:bb:49:1e:05:41:95:1b:b8:e9:06:3b:a6:07:52:d4:
5f:56:80:3a:44:ff:52:18:de:fb:bb:0d:56:81:61:02:07:f6:
4e:e1:49:77:ce:60:bf:94:74:85:4e:d1:9a:44:63:ae:1f:c6:
2a:1c:59:ef:b6:a0:85:22:a3:c1:7f:0f:8d:be:6f:05:9e:d6:
8f:2f:95:41:d1:91:d2:69:b9:77:38:75:64:3d:d1:c5:ad:cd:
38:96:3f:93:b3:01:78:74:e8:fb:bf:e4:3a:ee:e1:65:c8:6b:
21:0a:00:a2:c8:72:60:b6:09:ae:7c:d3:58:5e:90:30:f0:1f:
5d:55:d9:10:4f:a8:6e:28:d2:f4:e6:b6:a5:2d:86:17:ec:8c:
2f:e5:c1:53:e7:6c:b6:de:e6:1c:dd:fb:97:eb:ed:2d:17:ee:
37:9a:26:f3:c5:9a:56:0e:f1:8c:06:99:dd:49:43:75:4e:f3:
bc:57:d9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:10:16 2024 by rpki-client on console-ams.rpki-client.org