Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/WB8WsV4Ihm_NsVMWS8977-_r9X8.roa
File: WB8WsV4Ihm_NsVMWS8977-_r9X8.roa (raw, json)
Hash identifier: LarGoS+FUixWJnm5px+C1P6jTPnzWq41md19aKiSS3Y=
Subject key identifier: 58:1F:16:B1:5E:08:86:6F:CD:B1:53:16:4B:CF:7B:EF:EF:EB:F5:7F
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 018CC49351AE5C3E8C5891480824AA6813B9
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/WB8WsV4Ihm_NsVMWS8977-_r9X8.roa
Signing time: Mon 01 Jan 2024 10:30:38 +0000
ROA not before: Mon 01 Jan 2024 10:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43561
IP address blocks: 84.54.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:51:ae:5c:3e:8c:58:91:48:08:24:aa:68:13:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=581f16b15e08866fcdb153164bcf7befefebf57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:2f:94:f7:eb:cf:27:03:d7:24:30:0b:4e:
89:25:52:47:be:67:8e:21:37:35:e7:18:94:eb:af:
3e:ff:96:4a:80:aa:3d:ca:cd:aa:f7:06:0e:05:9b:
06:6d:ad:7d:ef:5b:54:0f:3c:77:5c:02:cb:79:b3:
bd:9b:24:b7:1f:92:e1:a9:84:7d:5d:ef:01:27:f4:
4f:b1:0d:56:73:fc:af:61:1f:49:4a:5b:07:1f:dc:
27:c6:2f:09:a7:0a:b2:1a:cb:9e:bf:0e:a6:17:94:
51:3f:7f:9a:37:b0:a9:7f:65:ee:31:2a:61:e1:e9:
7e:df:f9:a2:46:20:9a:da:ea:24:df:e9:9c:6d:59:
95:ae:54:4f:03:5c:c8:bb:45:d3:58:3d:df:a2:f1:
e6:56:87:28:20:b0:c3:e4:c0:a3:4c:12:26:bb:48:
aa:5d:a9:02:72:d5:d0:1d:b2:b8:27:49:ce:96:26:
d3:40:9a:9b:eb:3a:95:40:f8:f1:b6:93:01:ce:e1:
8a:28:b8:f9:7b:3a:48:cf:83:e2:64:59:0b:05:79:
33:59:12:93:a7:e9:0f:bc:1a:03:6a:1d:0a:b6:f8:
c9:25:c5:b1:10:a5:79:78:1d:b3:42:f8:7f:68:66:
82:a4:70:94:81:6e:6e:f5:10:06:87:53:04:3d:11:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:16:B1:5E:08:86:6F:CD:B1:53:16:4B:CF:7B:EF:EF:EB:F5:7F
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/WB8WsV4Ihm_NsVMWS8977-_r9X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.140.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a0:fa:d7:81:78:54:26:35:c0:9f:bf:b2:4d:53:ad:db:f6:
b2:ab:9c:99:9f:16:12:1a:73:5f:af:00:e7:08:f6:70:02:6e:
18:17:43:59:89:da:dc:3f:8f:59:4e:91:07:a8:24:16:d6:c4:
fd:97:d7:e6:f9:ce:11:c1:d9:a5:2b:c4:19:4b:e9:ea:9a:f3:
a8:2b:42:35:8c:e5:2c:2c:d0:cb:dc:a8:f8:5e:9c:50:b8:1d:
a1:f9:76:a4:a6:d5:b5:0a:e5:ed:0b:25:5b:72:1f:2e:77:62:
dd:e4:df:13:8a:63:a9:dd:be:be:d8:3a:e2:c4:25:1d:ea:6c:
59:c8:96:02:43:d7:ef:a2:fd:d5:35:c3:1a:62:3f:a6:1c:3c:
79:64:b2:2d:f3:e3:12:41:40:58:6b:c6:34:cc:67:96:9a:78:
8e:0c:28:49:43:eb:7a:51:b3:d0:74:f1:2f:eb:50:45:f1:0e:
d6:e7:2e:c9:cc:86:85:e3:d9:a8:22:6a:cc:17:38:61:d9:ea:
b7:14:de:8b:c6:1d:df:e7:0a:5f:b0:03:1a:9b:87:ec:20:ee:
c3:a1:b2:1a:59:96:62:9c:d1:e1:6d:9b:b3:76:6d:20:53:3e:
c6:5e:26:28:a2:53:54:9a:97:68:f6:cd:ea:cd:a8:35:08:b1:
e6:9b:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:09:10 2024 by rpki-client on console-fra.rpki-client.org