Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/NKpdi18nUi3GAAxXY-e86fOF_wg.roa
File: NKpdi18nUi3GAAxXY-e86fOF_wg.roa (raw, json)
Hash identifier: IZOOUww+C4Y4YDhXFB7dqJwXMobBYrovuW33kVNL3sQ=
Subject key identifier: 34:AA:5D:8B:5F:27:52:2D:C6:00:0C:57:63:E7:BC:E9:F3:85:FF:08
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 018CC424FE39581009AC313596F710A0A540
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/NKpdi18nUi3GAAxXY-e86fOF_wg.roa
Signing time: Mon 01 Jan 2024 08:30:07 +0000
ROA not before: Mon 01 Jan 2024 08:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6878
IP address blocks: 93.188.242.0/24 maxlen: 24
46.29.96.0/24 maxlen: 24
160.44.192.0/21 maxlen: 21
160.44.200.0/21 maxlen: 21
2a00:da8:fffb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:fe:39:58:10:09:ac:31:35:96:f7:10:a0:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jan 1 08:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34aa5d8b5f27522dc6000c5763e7bce9f385ff08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a7:14:62:6b:65:8b:d4:70:67:ec:20:e4:44:
f6:72:73:d4:53:6b:49:80:ec:7e:09:6b:d3:ee:eb:
f8:33:89:01:dc:32:58:c2:db:31:0a:92:de:d8:36:
1c:35:63:69:15:7d:69:b9:85:85:c1:73:9c:72:cc:
fa:f2:de:3a:08:b3:e5:4c:85:0c:b5:af:83:66:45:
4f:8e:2c:f8:02:b9:cb:81:47:5c:47:bd:96:30:d7:
c4:ef:17:ce:e0:30:39:e3:31:38:c6:7b:30:48:e6:
4f:66:d1:98:5b:68:17:87:d4:b2:a6:21:92:d6:5e:
fd:54:0c:7e:74:5f:ad:88:32:a6:5d:a5:6d:87:03:
87:e0:e8:4d:ce:97:e2:be:30:4a:b1:11:23:ac:7c:
e2:4f:75:71:6b:9e:74:b3:e9:7f:c2:1e:68:2e:e5:
a0:7d:1c:a0:3d:ea:fb:a4:d6:78:b0:cf:b3:e7:d4:
21:78:15:60:60:98:ea:f9:74:0b:ab:38:d3:aa:2d:
95:6a:f2:e1:ee:e6:bc:c9:3b:b6:b7:b6:b6:76:41:
6f:45:97:17:1e:18:30:68:70:73:cb:26:da:2e:b2:
33:b6:8c:66:e7:da:94:ab:0b:37:9a:e6:50:6b:bc:
e1:74:1e:02:37:58:5a:ec:4d:dc:87:2d:7e:88:d4:
7a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AA:5D:8B:5F:27:52:2D:C6:00:0C:57:63:E7:BC:E9:F3:85:FF:08
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/NKpdi18nUi3GAAxXY-e86fOF_wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.96.0/24
93.188.242.0/24
160.44.192.0/20
IPv6:
2a00:da8:fffb::/48
Signature Algorithm: sha256WithRSAEncryption
23:de:f4:22:2d:6f:3c:25:a2:2f:37:68:de:44:a4:2e:b7:b9:
da:a0:b4:63:78:23:07:b0:60:c0:f1:65:4d:9b:8c:d9:4c:e9:
cd:07:d9:fe:fb:85:09:2d:1c:02:89:fb:8c:aa:09:96:bd:e4:
a9:a3:87:9a:6b:33:78:46:ac:68:20:83:53:7f:12:bd:df:49:
71:d4:31:d8:6a:d6:f4:3c:5a:86:fc:06:22:3f:f3:52:f8:22:
2a:83:67:b4:6d:c1:58:3c:16:84:71:b1:8d:cb:10:95:91:7f:
55:b9:67:a2:71:a6:87:0f:64:d7:63:0a:a3:66:f9:8a:67:83:
a5:44:58:52:cf:de:3e:63:4e:a6:40:c3:67:d8:bb:b8:8b:4d:
39:d3:ba:e3:69:f0:be:f6:56:28:64:9b:ca:1c:5f:ba:53:ff:
e6:dd:e6:38:3d:b1:48:9e:61:4a:a4:13:fa:dd:68:08:e7:f1:
99:75:6d:46:7c:25:2d:7b:fb:0c:9c:f0:f3:ae:1d:ec:e5:b0:
82:36:3f:cc:5a:89:ed:c1:15:1f:b1:09:c6:e6:5a:2a:76:90:
ad:6c:b0:33:7f:93:29:8d:94:4b:e6:28:1f:6d:c4:f6:61:98:
44:75:77:67:16:1e:5a:f3:29:ce:b9:56:57:d5:2a:5e:b5:9e:
1b:e9:1f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:14:36 2024 by rpki-client on console-ams.rpki-client.org