Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/WeKadrUA1dZDa4eu2SJNZ_C2VeE.roa
File: WeKadrUA1dZDa4eu2SJNZ_C2VeE.roa (raw, json)
Hash identifier: 2oGYb99mwJBfcG3zhMzzLJuDlCpHxbEv/dL2Qew3fsc=
Subject key identifier: 59:E2:9A:76:B5:00:D5:D6:43:6B:87:AE:D9:22:4D:67:F0:B6:55:E1
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018CC56E650BB60BE2238BA606EDD64E294B
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/WeKadrUA1dZDa4eu2SJNZ_C2VeE.roa
Signing time: Mon 01 Jan 2024 14:29:55 +0000
ROA not before: Mon 01 Jan 2024 14:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216300
IP address blocks: 217.196.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:65:0b:b6:0b:e2:23:8b:a6:06:ed:d6:4e:29:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Jan 1 14:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59e29a76b500d5d6436b87aed9224d67f0b655e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:bf:72:d7:e2:af:f6:56:5c:5f:70:8f:7f:
60:a1:c7:1e:3e:65:4f:47:1e:ae:60:e9:19:8d:a1:
f2:4c:09:d1:ca:e3:5d:29:52:87:73:e1:ff:ce:88:
d7:c4:80:28:d9:ae:50:a0:60:b2:b3:93:78:71:21:
33:54:97:f0:32:91:7f:74:c9:58:ab:76:e7:ff:99:
af:ec:b9:f1:95:73:c7:be:0b:75:5a:d3:f4:c3:e7:
54:96:96:ed:00:b7:c0:d5:ac:07:4a:a3:41:c1:df:
5d:8c:55:27:10:8a:26:95:28:36:83:23:21:95:6d:
13:e6:8b:f1:c0:9f:f0:3f:56:0c:d2:04:cd:b8:a3:
1c:e7:64:93:b9:b4:73:4f:f5:55:9c:23:be:e1:31:
87:41:95:0d:2b:e5:27:e0:a4:ec:8b:e6:d5:d7:fc:
77:9d:1d:f2:2c:35:40:c0:a6:37:92:8e:99:ab:99:
a9:3f:d3:05:9d:41:a5:51:19:c4:95:8f:34:6d:a3:
c7:c5:a4:bf:a9:4e:00:50:78:8b:10:3a:40:51:e3:
d4:6f:a9:20:63:44:fd:be:36:0f:91:56:d6:d1:ee:
df:f4:d5:92:ff:97:d2:77:b0:b1:67:d0:88:e7:17:
ff:19:fb:2c:d2:9b:ba:17:fc:6b:6e:c2:30:3c:60:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:9A:76:B5:00:D5:D6:43:6B:87:AE:D9:22:4D:67:F0:B6:55:E1
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/WeKadrUA1dZDa4eu2SJNZ_C2VeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.97.0/24
Signature Algorithm: sha256WithRSAEncryption
35:27:68:27:01:73:dc:78:49:17:26:02:76:26:c2:32:c3:ed:
24:07:d7:46:30:e7:b8:dc:7d:e1:bf:bc:71:4d:dd:d8:02:e4:
f5:2e:6e:ac:59:5b:3f:1e:b0:08:dd:4c:22:ff:32:68:a4:74:
ca:66:b1:3d:a1:4f:1a:fc:7f:22:43:cb:24:9d:52:17:02:56:
3b:2f:aa:09:89:16:d8:9c:eb:b6:f9:e4:7a:48:7a:c8:02:f4:
23:0d:31:17:17:6a:1d:03:27:70:cb:a9:7f:b6:48:4c:08:d6:
4a:b3:43:95:a7:32:f2:e5:d4:73:e2:55:8b:30:e1:b7:76:b1:
16:6b:6b:77:06:23:b7:b4:b9:dc:7f:fd:70:89:46:22:22:fb:
8a:43:3b:4e:85:78:fe:26:34:54:20:a7:b9:74:48:71:de:df:
0e:a0:ee:fa:c6:be:f2:06:92:db:d3:90:4d:0a:10:e6:e7:44:
aa:db:f0:8d:b8:ef:b0:c9:57:a5:95:a5:1a:74:85:00:2e:15:
37:f7:53:86:14:3e:b5:76:b8:23:a6:65:04:24:a4:3e:1a:f8:
eb:bd:0a:86:3d:eb:c8:7c:b3:e0:60:10:f8:2f:d0:e2:df:f3:
f5:4a:41:62:26:73:10:f1:50:e0:8a:8c:98:3a:36:d4:9f:a3:
e9:bb:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 17:47:27 2024 by rpki-client on console-fra.rpki-client.org