Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/WlxasG-BTt9LkAJWxrdjqnEmCSA.roa
File: WlxasG-BTt9LkAJWxrdjqnEmCSA.roa (raw, json)
Hash identifier: n1W7pHw1uoyFDkY7v7R8QIoARwDtkYlpdDWBd8Id0g4=
Subject key identifier: 5A:5C:5A:B0:6F:81:4E:DF:4B:90:02:56:C6:B7:63:AA:71:26:09:20
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 018CC94E60AE4F42C74CFFE269A61C0B7E49
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/WlxasG-BTt9LkAJWxrdjqnEmCSA.roa
Signing time: Tue 02 Jan 2024 08:33:26 +0000
ROA not before: Tue 02 Jan 2024 08:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 141.98.209.0/24 maxlen: 24
2a12:96c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:60:ae:4f:42:c7:4c:ff:e2:69:a6:1c:0b:7e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a5c5ab06f814edf4b900256c6b763aa71260920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:8f:0e:97:de:95:1b:95:66:15:89:00:32:
b0:ae:1f:a9:93:51:62:ec:4b:1f:06:e0:07:05:2a:
da:f3:0e:16:f0:9c:2a:ac:53:02:c4:57:38:4d:de:
81:82:82:aa:77:a8:2e:8b:a4:cf:42:ac:9a:d4:24:
39:a0:37:5a:86:81:c6:8d:bb:b9:ca:09:e4:78:d0:
c4:c3:72:86:25:9f:9a:b9:06:ac:9a:c0:87:c0:85:
25:f3:99:eb:80:0a:93:5b:75:d1:ef:9c:88:1b:36:
77:80:73:51:b7:3d:e8:b6:f3:f4:b6:9b:52:57:b1:
c8:30:1b:4f:2b:e5:15:4d:ed:7a:27:b8:49:ba:2a:
63:9d:89:7a:6d:9c:5c:a9:d0:a8:b4:8f:8d:7f:77:
b5:c6:c9:34:c6:6a:e6:d8:40:9a:bd:46:42:95:45:
f0:83:d6:b6:5e:0c:a8:a1:6e:8e:96:b5:87:26:f1:
ab:5d:79:c9:4a:9b:fa:bf:20:6c:7d:88:b5:ba:56:
90:ca:cc:e8:a2:64:ba:a9:22:8f:e6:09:a7:c5:6c:
25:e0:5b:53:59:b6:fb:9c:c4:e9:95:28:78:04:13:
17:82:28:80:c6:51:68:62:21:53:6e:8a:32:7e:57:
00:46:1e:3b:2d:b1:eb:01:ea:08:9f:75:a1:f5:57:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5C:5A:B0:6F:81:4E:DF:4B:90:02:56:C6:B7:63:AA:71:26:09:20
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/WlxasG-BTt9LkAJWxrdjqnEmCSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.209.0/24
IPv6:
2a12:96c0::/29
Signature Algorithm: sha256WithRSAEncryption
b0:27:ab:1e:22:23:c6:3e:e8:7f:65:9f:ca:37:03:0a:b8:a5:
6d:84:04:b6:c3:d9:57:9f:b5:37:7e:ed:f2:25:e6:53:46:05:
16:79:86:85:88:df:b0:7b:9b:c0:ea:30:c2:bb:63:79:d4:61:
48:d2:36:b6:05:4f:ac:ef:00:13:26:06:9c:8a:ef:ce:95:08:
94:17:5c:8e:35:ae:dd:1e:da:14:3a:6c:e8:ba:a9:50:74:57:
fe:ac:d6:df:2d:dd:0d:dc:f1:8f:31:8a:b8:0a:19:d3:52:b3:
8f:5b:30:0b:b6:fe:c1:18:1e:61:5a:d1:b1:0f:0e:35:6e:a9:
18:47:e7:6f:d8:c8:ca:1b:ab:84:1e:f7:31:a2:a6:1f:04:4d:
88:a9:38:50:f3:59:27:a7:9c:f7:59:37:c7:b5:5b:ce:2c:55:
c0:00:f6:24:43:d7:db:06:c6:49:dd:9d:cb:78:ad:c9:42:a5:
25:ee:63:a8:8b:41:da:ad:0c:45:9b:11:69:84:16:ed:5a:a5:
84:a4:d1:53:80:d4:b9:22:43:69:3d:8e:9f:54:33:16:29:e5:
3f:fe:a7:a3:63:8a:76:1e:b8:fd:0f:4e:55:e3:68:86:93:8c:
12:cd:31:03:f9:89:57:ac:3f:07:af:9a:9e:c4:a1:57:c5:c8:
db:7e:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:32 2024 by rpki-client on console-ams.rpki-client.org