Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/wLJxukTw44pz05fLwYwmNT-WvRQ.roa
File: wLJxukTw44pz05fLwYwmNT-WvRQ.roa (raw, json)
Hash identifier: dHyhSlyfmpGiaTi4SPBAXON/ilyMaOFe/OsftTxOw6g=
Subject key identifier: C0:B2:71:BA:44:F0:E3:8A:73:D3:97:CB:C1:8C:26:35:3F:96:BD:14
Certificate issuer: /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial: 018CC56EC990D59AD90DC0127A3F8C1FA43D
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/wLJxukTw44pz05fLwYwmNT-WvRQ.roa
Signing time: Mon 01 Jan 2024 14:30:21 +0000
ROA not before: Mon 01 Jan 2024 14:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42636
IP address blocks: 91.192.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c9:90:d5:9a:d9:0d:c0:12:7a:3f:8c:1f:a4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0b271ba44f0e38a73d397cbc18c26353f96bd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:97:ab:ca:e2:cf:c6:64:bf:f4:2d:07:d7:
6c:a7:ec:34:50:4a:e9:c9:22:d9:0c:30:37:41:c1:
a7:88:9f:92:99:47:ef:58:33:b1:28:92:f3:07:b3:
04:30:38:2c:7a:78:72:4c:bd:e6:83:ae:c5:f6:0f:
05:96:38:c4:d2:6b:f4:b9:7b:b2:57:d1:0e:7a:3d:
c2:cd:dc:03:68:a9:a2:d5:7b:ea:21:4d:23:8c:bd:
74:5f:9a:50:8a:a8:0d:10:03:f6:99:22:b4:7f:5c:
06:4a:f1:9d:56:92:03:e1:e7:e0:7d:ea:c7:e2:ac:
b5:11:12:8f:a4:01:49:dd:a5:d7:2f:de:f0:cb:f6:
f1:41:73:66:37:91:35:04:29:08:e0:a9:31:32:9d:
02:84:9f:a1:16:36:69:3f:fd:9e:5f:de:10:48:5b:
6a:b9:c4:4b:65:f0:14:3e:bd:08:84:c2:e3:de:cd:
e6:7d:32:53:51:12:23:a9:47:50:6f:05:2e:9f:94:
5b:b2:ca:15:79:ff:d2:f5:0c:71:df:ea:09:38:de:
91:5d:f5:e4:2c:fc:0d:04:77:fa:66:a7:41:fe:1a:
ab:a4:8d:96:36:8d:28:a5:5e:77:e4:59:11:cf:23:
c1:85:ea:7b:ed:10:3e:3b:a4:97:08:0b:b1:35:0f:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B2:71:BA:44:F0:E3:8A:73:D3:97:CB:C1:8C:26:35:3F:96:BD:14
X509v3 Authority Key Identifier:
keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/wLJxukTw44pz05fLwYwmNT-WvRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.244.0/22
Signature Algorithm: sha256WithRSAEncryption
06:bb:3a:4e:76:e1:11:b9:d5:20:a1:eb:15:7e:11:84:aa:83:
68:22:43:fb:0b:7d:47:4f:fc:f9:c0:5f:cb:7b:9b:a2:90:65:
81:20:98:aa:f3:21:1a:9c:79:8c:96:e9:d9:36:b4:fe:78:83:
4c:6a:90:14:71:91:79:e8:0c:16:96:74:8e:9e:0b:b1:2d:67:
07:26:9a:bc:d0:7f:ef:77:30:88:40:6b:f2:3f:b0:01:02:63:
14:0d:81:1a:a0:cd:ff:04:bd:70:ab:c9:b3:46:ab:be:fd:63:
eb:35:28:47:68:93:93:34:48:21:7b:70:a9:a9:57:1a:0b:8f:
ea:a2:4c:a9:13:65:c8:b4:79:33:28:76:77:1c:20:25:64:f7:
db:9e:67:ce:71:c8:a4:cc:9b:34:ee:c5:79:bd:eb:e4:17:a4:
96:fc:bd:1a:ca:e5:0c:8c:ac:f1:00:d8:cb:05:ec:22:30:c8:
44:54:b2:35:a8:c5:69:81:9d:93:e1:f1:aa:66:dc:62:aa:61:
ec:2c:da:5f:f1:c8:9f:94:91:58:96:1e:3e:16:a4:ac:f0:c2:
c4:b4:34:e8:4b:c8:e1:8f:a5:e9:d0:1d:ee:e7:30:06:cc:c5:
dc:73:ab:b7:eb:13:99:48:22:df:82:e7:94:14:f6:1d:2b:b6:
63:69:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:42 2024 by rpki-client on console-ams.rpki-client.org