Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/WtnuAKhWC_VhXzT39FOhtKJzrgc.roa
File: WtnuAKhWC_VhXzT39FOhtKJzrgc.roa (raw, json)
Hash identifier: 3qOeXt7ocAgY14Cllhi7BOnczc1aHBvUhhMcdTPLsG8=
Subject key identifier: 5A:D9:EE:00:A8:56:0B:F5:61:5F:34:F7:F4:53:A1:B4:A2:73:AE:07
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 018CC26D817F4872B79C3A264296FB321B34
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/WtnuAKhWC_VhXzT39FOhtKJzrgc.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44127
IP address blocks: 195.93.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:81:7f:48:72:b7:9c:3a:26:42:96:fb:32:1b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ad9ee00a8560bf5615f34f7f453a1b4a273ae07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fc:7c:e5:69:ef:2e:f2:f9:6a:36:4c:df:e7:
36:d0:71:d2:78:f6:50:d1:f5:34:a6:dd:74:10:9f:
be:76:ab:9c:2c:3f:9f:56:a9:1a:1d:a5:77:fa:95:
0b:6f:69:9e:8e:87:82:78:53:f3:ee:02:13:d0:a3:
c4:f9:5a:9d:dc:01:ed:c1:db:52:8b:c3:00:0a:65:
62:22:f2:0d:49:7e:c0:66:f8:2d:5e:31:d7:76:78:
6e:1c:12:76:1f:fa:fc:b6:ec:8e:ec:b0:38:1a:2a:
35:b6:2b:ac:23:a9:37:d6:3d:d9:53:cb:7a:e7:f9:
b1:bb:8b:db:1e:0f:9d:9f:2c:9d:7c:29:f5:34:15:
74:87:07:d8:b4:6e:f6:76:68:46:da:d1:94:73:c3:
53:9a:2f:6c:a6:22:9f:6a:30:38:66:26:17:8c:7e:
f2:04:15:97:16:c4:a3:26:6e:b9:5a:32:de:1a:52:
23:06:3f:b3:6d:bb:be:aa:25:d5:7d:48:39:b3:48:
26:d6:0b:9e:6c:22:00:55:b3:5b:b3:9d:0a:f6:b6:
43:a2:28:38:6b:ac:46:e4:b7:65:67:c8:fc:f0:f6:
c2:c8:1d:58:4e:91:75:90:f9:bb:64:4e:9f:26:32:
8f:61:f5:a4:76:46:a3:7c:c3:ea:78:28:3d:28:c9:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D9:EE:00:A8:56:0B:F5:61:5F:34:F7:F4:53:A1:B4:A2:73:AE:07
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/WtnuAKhWC_VhXzT39FOhtKJzrgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.210.0/23
Signature Algorithm: sha256WithRSAEncryption
62:5d:df:aa:6b:2e:eb:ff:4e:96:08:39:1a:23:a3:df:29:da:
2d:86:d2:60:93:df:3b:4a:ac:a1:9a:36:b6:9b:70:28:6f:f9:
b5:a5:a2:64:08:97:ca:31:12:5b:9c:60:44:ec:44:f6:8e:62:
52:2f:98:91:b4:29:08:aa:a1:b8:53:c2:d8:3d:04:b9:03:f8:
c5:c9:e8:f6:bb:47:f8:b9:6c:70:41:77:cc:ec:7a:a8:98:ee:
1d:95:99:63:87:ba:0a:0c:44:b8:72:9b:79:be:63:82:65:48:
86:6a:2f:a4:c6:9f:8c:bf:38:dd:04:bb:ac:ad:ad:a2:e4:c9:
6f:4b:94:74:88:73:59:12:7f:a6:08:68:42:96:f7:25:3f:ab:
ed:a6:16:f2:11:fa:23:0a:e0:d9:0c:cc:bf:f4:bd:7f:55:6a:
0a:5c:16:c5:e4:9b:67:4f:9f:95:72:11:45:ee:cb:6d:a8:a0:
c1:0b:62:5d:0a:c4:af:9f:7c:43:90:9a:fb:3a:35:db:93:95:
61:ab:4e:2c:d8:94:c8:62:6d:89:ca:6d:82:d7:db:c1:46:64:
f0:b0:78:85:76:bd:97:81:82:48:e6:c2:03:8d:6d:ff:d9:fc:
62:f1:bf:77:4e:97:54:b2:c4:85:e7:0e:fa:59:4b:2b:a4:18:
37:98:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:47:58 2024 by rpki-client on console-fra.rpki-client.org