Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/wg_9uXot0_XxvpPnir6NVKkj9x0.roa
File: wg_9uXot0_XxvpPnir6NVKkj9x0.roa (raw, json)
Hash identifier: vdNzN7kFI7T5up6gFh6VChPP4h+XUBXf9/yfxlVe0Ws=
Subject key identifier: C2:0F:FD:B9:7A:2D:D3:F5:F1:BE:93:E7:8A:BE:8D:54:A9:23:F7:1D
Certificate issuer: /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial: 018CC56DE23760BC2C70ACEEA9C2A47DCDD0
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/wg_9uXot0_XxvpPnir6NVKkj9x0.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204890
IP address blocks: 92.119.45.0/24 maxlen: 24
92.119.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e2:37:60:bc:2c:70:ac:ee:a9:c2:a4:7d:cd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c20ffdb97a2dd3f5f1be93e78abe8d54a923f71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:a8:3a:54:c8:de:c9:f3:cb:79:22:d2:4d:
98:d1:20:e9:13:7d:5b:9f:7c:fa:4f:be:0b:c6:91:
cf:d7:f3:34:d2:12:7f:19:5f:0d:e5:36:ad:35:42:
df:54:ad:12:05:c6:65:ac:d4:bc:41:1b:3e:ef:e1:
31:22:12:17:e4:b9:4c:82:36:4d:2c:15:6d:e4:a5:
73:1e:c4:99:c5:ef:ad:4e:71:b3:b6:74:3b:95:f6:
39:13:be:5a:03:17:88:f5:fc:41:a7:81:e8:05:3d:
72:08:5f:13:93:0e:af:3a:49:49:81:8d:29:19:80:
52:ff:33:95:3c:44:23:27:f7:98:1b:cb:e2:aa:12:
47:60:da:e4:9f:0b:0d:e2:c6:ca:1b:9f:0c:dc:86:
6a:bc:1d:f8:91:69:02:cc:d0:2f:c2:97:4f:2b:81:
28:59:e2:80:22:1a:41:79:d9:10:64:30:5c:8b:a4:
a8:14:7f:c1:37:3e:d3:02:4a:ec:2c:98:42:e2:79:
b8:dd:c2:b0:86:a3:d3:4c:aa:57:a5:54:02:0f:11:
35:af:d8:d3:b9:9e:4a:3e:c5:67:a6:62:83:29:a5:
15:71:02:7b:9a:38:58:04:e2:fd:dd:46:e9:64:8b:
d1:2d:34:60:06:c1:2f:ca:5f:b7:cd:57:b3:7e:03:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0F:FD:B9:7A:2D:D3:F5:F1:BE:93:E7:8A:BE:8D:54:A9:23:F7:1D
X509v3 Authority Key Identifier:
keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/wg_9uXot0_XxvpPnir6NVKkj9x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.45.0-92.119.46.255
Signature Algorithm: sha256WithRSAEncryption
03:87:f9:e2:ec:48:e2:02:76:f5:31:6d:06:f1:42:87:1f:36:
ca:2f:c8:28:a9:ef:b0:d1:19:f3:54:60:a9:10:1d:59:ba:a9:
f4:01:f4:2d:cf:00:38:c7:44:df:9f:cb:e8:8e:34:4b:41:92:
6c:7a:b3:7b:81:f6:da:17:2e:8d:66:59:e5:b9:36:ce:f2:da:
80:ae:b0:f0:10:32:2f:f4:1c:8d:0e:86:88:5f:30:f5:44:c3:
68:f4:c3:5c:04:43:47:10:cc:b1:e5:fe:e6:89:dd:35:a2:ff:
22:3e:73:95:6d:60:01:10:5d:74:c8:8e:56:31:20:23:2c:a2:
3a:47:29:98:25:00:e1:cb:49:c6:70:d0:a7:0a:69:55:9e:dd:
d8:64:de:9e:76:2d:8a:e9:d6:ad:c1:36:1f:55:c5:07:0f:da:
f1:c5:69:61:b6:f7:fb:13:67:19:ad:e5:c8:84:c2:24:8b:04:
55:8a:31:f8:1f:2c:25:92:9f:a3:c5:17:06:d3:93:61:26:4a:
19:2f:4a:48:9c:2d:bd:af:72:dc:f7:d0:b6:c9:c7:c8:bd:b9:
d4:b0:67:e6:75:12:bb:ce:56:59:39:88:53:6e:b1:46:0f:e2:
ce:20:fe:cf:36:62:c6:95:75:7d:78:77:9e:f4:2d:f5:1e:10:
5f:4c:e7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:34 2024 by rpki-client on console-fra.rpki-client.org