Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/WY2Tc6XCVncWPCkoH9qWpkfSBPM.roa
File: WY2Tc6XCVncWPCkoH9qWpkfSBPM.roa (raw, json)
Hash identifier: OESjin4HhIHTDW+/PYLGEu33guen3Etc7CRC6r7TE0o=
Subject key identifier: 59:8D:93:73:A5:C2:56:77:16:3C:29:28:1F:DA:96:A6:47:D2:04:F3
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018CC801DCA89853AD66770574535638D6D4
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/WY2Tc6XCVncWPCkoH9qWpkfSBPM.roa
Signing time: Tue 02 Jan 2024 02:30:14 +0000
ROA not before: Tue 02 Jan 2024 02:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1018
IP address blocks: 209.16.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:dc:a8:98:53:ad:66:77:05:74:53:56:38:d6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 2 02:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=598d9373a5c25677163c29281fda96a647d204f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2c:27:11:79:84:7f:be:ec:9f:15:9f:80:d8:
10:7e:5c:5f:68:63:b6:ca:84:1e:9b:65:d6:8c:b9:
74:85:4d:06:4c:b1:a2:ac:25:c3:42:38:22:80:bf:
36:1b:31:b4:fe:58:53:40:7c:7e:11:9b:21:61:dd:
47:e8:30:19:96:74:6b:53:4e:11:af:0a:44:ad:08:
4b:27:10:83:79:e0:03:18:0a:cc:a6:b3:15:e4:be:
f1:d5:0b:4e:7d:43:12:fe:51:ba:f8:0f:0e:44:68:
ad:5d:b2:f6:c3:51:bf:cd:1e:b6:e7:3b:0c:f9:69:
38:6d:5c:0b:a4:30:93:5f:27:8a:a4:43:2b:a2:cc:
a2:99:ed:7f:b0:4f:97:74:ba:da:84:14:94:13:f2:
91:84:c4:de:63:85:24:50:96:07:be:0e:0d:16:86:
d8:7c:b6:db:77:a5:10:0e:fb:81:57:b6:e5:ec:b6:
a9:96:01:b9:6a:f4:ef:b7:60:68:e6:65:f6:04:9b:
4b:6d:bb:3e:d3:60:f9:46:38:87:4d:93:01:78:54:
ea:80:94:e7:71:ff:90:ad:ce:39:a4:75:5a:99:a3:
79:05:f3:e7:43:1d:9d:aa:95:15:f3:22:a9:cd:b7:
74:ab:90:2e:1d:24:c9:cd:e9:b5:c6:f5:7e:5b:2b:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:93:73:A5:C2:56:77:16:3C:29:28:1F:DA:96:A6:47:D2:04:F3
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/WY2Tc6XCVncWPCkoH9qWpkfSBPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.16.140.0/23
Signature Algorithm: sha256WithRSAEncryption
91:41:94:f2:ed:b8:33:52:58:1c:58:c1:ca:d6:26:e5:28:c9:
aa:47:90:06:62:63:47:7c:c5:3a:08:48:95:2a:78:7a:3d:3f:
57:41:41:31:25:a2:1d:70:16:86:2a:8f:90:03:d3:f8:00:97:
67:b3:8b:71:f5:5c:b1:11:3c:c6:a4:8c:70:da:ec:25:3e:c4:
06:f7:29:53:dc:df:6d:46:36:75:2b:ca:66:00:ba:f9:2f:53:
58:ac:3b:65:b2:f5:d1:eb:c2:aa:f6:0c:17:3d:e6:80:f7:13:
86:1c:a8:68:3a:c2:10:e7:c7:50:75:43:1d:5d:0a:97:57:40:
0a:75:bb:d7:78:f5:7b:ed:b0:67:35:10:fe:02:fc:d2:09:73:
a7:fe:ee:2d:90:9e:73:68:20:bb:f0:2d:b9:fa:22:11:77:4c:
35:e1:c6:89:e5:89:6f:66:ec:8f:a0:51:2f:23:e4:e6:a5:b1:
22:98:d9:3d:ba:01:db:7a:c8:8f:2b:16:28:28:b2:66:e2:30:
1a:3f:f5:dc:c8:a1:e0:93:09:2a:e4:d4:0b:8d:a4:8f:bb:eb:
af:5e:54:9c:57:92:c3:f2:67:0f:8f:37:9e:f6:18:f9:7a:cd:
21:f5:c4:61:4f:45:08:50:17:40:84:89:f7:8e:d4:62:98:a1:
dc:80:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:17:08 2024 by rpki-client on console-ams.rpki-client.org