Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/Wq_YeHfxuSt71bK3QZZ0UpbikkQ.roa
File: Wq_YeHfxuSt71bK3QZZ0UpbikkQ.roa (raw, json)
Hash identifier: 5ls54/mw/KTX0tCQErllYc2b+fPCSqz93J7wARJdS54=
Subject key identifier: 5A:AF:D8:78:77:F1:B9:2B:7B:D5:B2:B7:41:96:74:52:96:E2:92:44
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 018CC9BCCA836C04EB94222765E7EF7D28BE
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/Wq_YeHfxuSt71bK3QZZ0UpbikkQ.roa
Signing time: Tue 02 Jan 2024 10:34:02 +0000
ROA not before: Tue 02 Jan 2024 10:34:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48837
IP address blocks: 91.236.58.0/24 maxlen: 24
91.212.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ca:83:6c:04:eb:94:22:27:65:e7:ef:7d:28:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Jan 2 10:34:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aafd87877f1b92b7bd5b2b74196745296e29244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:85:41:ca:c4:1e:f1:85:c1:c6:fb:7e:ed:
88:77:e1:66:5a:48:2c:57:11:c8:b4:6c:c2:20:25:
76:1a:f1:a8:66:88:96:da:3e:e1:c2:44:dd:87:37:
b9:1a:5d:b7:6f:0e:6d:95:2e:14:80:b9:cc:18:d8:
f3:77:4d:1e:84:c6:5c:a6:31:78:ed:29:f7:55:fa:
7e:5d:77:a4:29:12:92:17:6d:92:d6:9a:0d:89:66:
df:f1:74:06:84:42:cf:2a:cb:7c:36:92:f7:5f:71:
75:b6:47:af:84:c5:4d:a1:69:96:8c:04:e1:9b:d3:
ac:1d:e4:82:52:a7:b6:8e:6b:ba:2e:df:ce:0c:ef:
11:ee:b6:89:29:88:0d:2a:eb:27:0c:4b:1d:16:83:
11:b5:4e:bf:d2:cd:08:13:9f:f7:c3:da:04:36:64:
88:28:78:94:f0:1f:02:46:e3:84:00:6f:9e:dc:3a:
12:76:16:6c:b9:25:ab:1a:84:1b:b6:54:73:c6:ca:
f1:59:20:2c:64:7b:94:02:ea:69:b6:57:82:ff:73:
22:37:b5:1a:d2:57:39:00:08:07:21:f9:8f:02:43:
26:e9:94:27:ed:1e:fe:22:05:55:db:60:c0:27:fe:
73:6a:c7:b3:be:78:43:34:49:51:81:1c:09:4a:47:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:D8:78:77:F1:B9:2B:7B:D5:B2:B7:41:96:74:52:96:E2:92:44
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/Wq_YeHfxuSt71bK3QZZ0UpbikkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.66.0/24
91.236.58.0/24
Signature Algorithm: sha256WithRSAEncryption
52:29:c5:12:8f:86:06:5f:c5:c2:f6:37:93:54:87:33:5d:02:
18:dc:1b:b7:96:f2:5c:7e:7a:23:82:e6:39:39:e6:87:89:3b:
c8:5c:6b:e2:cc:02:b2:f1:4f:75:a4:9d:5e:8a:84:73:91:1c:
0f:0f:0a:30:86:4e:9a:fc:d0:b5:1a:11:c1:ea:a9:29:03:70:
8b:bb:f5:a5:64:70:6d:8d:b4:21:67:a4:62:41:fe:02:d4:d7:
45:de:ef:ce:4e:d0:55:cf:8d:5e:26:1e:d1:0a:c1:2c:ac:37:
60:ff:dc:db:e0:d1:b9:4b:01:36:a0:87:b0:86:08:de:0f:ba:
f9:78:e9:20:a7:34:66:91:bc:3f:65:ec:67:04:60:30:c4:a6:
06:59:e1:46:70:19:98:f4:24:e9:8a:f6:d0:e7:97:08:38:62:
a9:ee:db:22:ff:f0:f0:06:d5:5e:bd:cc:ad:5c:f1:84:25:e6:
52:8c:f0:d2:61:a6:4b:d9:01:53:5d:ba:b5:28:7d:73:7a:ba:
d3:c7:e5:53:80:09:a4:fb:bf:82:e3:bf:e8:41:01:10:c6:f8:
86:ff:40:26:ed:4f:ac:4b:99:a3:2a:7e:96:62:9c:c0:11:ed:
68:5c:11:9e:b6:9a:f7:07:49:38:37:b9:0a:31:fc:19:d4:8e:
72:a0:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:36:00 2024 by rpki-client on console-ams.rpki-client.org