Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/mWBT37rnC7-5rHFa14Q2ABY5Xuc.roa
File: mWBT37rnC7-5rHFa14Q2ABY5Xuc.roa (raw, json)
Hash identifier: +TO2k6XlHCVpnv9loASG+vskCIzuVuQ5jrG55dXAFdM=
Subject key identifier: 99:60:53:DF:BA:E7:0B:BF:B9:AC:71:5A:D7:84:36:00:16:39:5E:E7
Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Certificate serial: 018CC500FC74EAF94E73E282F53C32BE5A81
Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/mWBT37rnC7-5rHFa14Q2ABY5Xuc.roa
Signing time: Mon 01 Jan 2024 12:30:25 +0000
ROA not before: Mon 01 Jan 2024 12:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198307
IP address blocks: 91.226.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fc:74:ea:f9:4e:73:e2:82:f5:3c:32:be:5a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Validity
Not Before: Jan 1 12:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=996053dfbae70bbfb9ac715ad784360016395ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:6e:d4:63:06:ab:5d:89:94:97:30:ab:cd:
53:7c:28:35:a5:71:f4:86:1d:23:72:ff:ac:83:82:
f6:f9:b2:6c:90:34:70:63:77:af:ec:65:67:4f:26:
d2:83:b4:56:d2:a3:d4:2b:d8:df:0b:09:75:d2:6f:
57:1b:da:ec:1a:42:91:ab:12:6a:b6:cc:21:83:42:
60:27:c8:00:1e:cb:57:ec:11:7f:67:f7:d5:e5:ae:
90:a8:12:29:93:29:3d:4e:f3:5e:24:0e:12:71:32:
09:dd:3f:6e:ff:c3:e6:c7:a5:57:c0:0c:05:74:64:
a7:cd:e0:60:bf:8d:d8:25:7b:b0:eb:22:39:7c:12:
ff:7b:dd:7f:99:93:38:7e:0a:66:1b:ed:99:19:f3:
13:29:7f:47:b4:d7:a1:85:f9:38:7b:b8:b5:3a:5c:
b9:4e:47:d5:26:67:aa:fe:b1:86:d8:ed:3d:58:d0:
49:4a:b4:28:58:80:f7:c1:64:d6:38:69:28:6e:b0:
67:84:a5:12:33:5e:6b:3b:f4:ce:72:c1:5f:d8:a3:
f6:81:37:fb:05:01:39:ae:60:3b:b3:f8:15:ea:c9:
4c:ba:73:ba:cd:f9:0e:9c:03:7e:73:42:9e:bd:8b:
45:ee:b4:4e:02:82:88:38:e7:b9:fe:cf:f7:07:75:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:53:DF:BA:E7:0B:BF:B9:AC:71:5A:D7:84:36:00:16:39:5E:E7
X509v3 Authority Key Identifier:
keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/mWBT37rnC7-5rHFa14Q2ABY5Xuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.77.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7a:e9:f6:d6:ac:cf:54:e6:54:0a:ff:b7:34:93:5c:58:69:
a1:e5:f8:58:e9:f2:22:ef:d3:5c:c2:10:26:94:40:ec:15:be:
fc:00:ca:6e:d6:e8:45:5a:48:75:6d:dc:48:c0:8b:5f:d9:93:
ed:d5:64:a1:8c:52:57:65:6e:f8:3b:da:e0:0b:b6:23:7a:d2:
39:d6:7d:b8:b9:b8:d8:e5:09:35:e0:21:c4:56:b7:9d:63:5c:
f2:80:ef:75:00:5d:82:48:9c:8e:ed:c8:30:b9:22:eb:37:6f:
cb:e8:f6:0c:da:91:8b:1a:e8:89:a4:15:eb:23:bd:83:8b:7c:
24:ae:70:2d:92:76:f3:64:9f:98:6e:72:ce:4a:1d:d5:d9:25:
1c:6e:12:91:47:b6:d0:48:68:da:39:8d:53:a1:53:b6:c7:ca:
62:9a:30:9c:ca:d5:7a:04:21:0b:4b:65:44:3a:eb:f5:dd:b1:
92:59:d0:16:21:96:cf:6d:c7:c2:cb:8d:0c:cd:17:60:86:17:
4f:6b:a1:f3:e7:36:5c:58:63:ba:07:cb:8e:bc:7e:fa:09:9e:
c2:23:e0:eb:6e:76:99:38:bd:83:2f:ac:df:17:9c:f1:70:db:
cb:d3:93:10:b9:45:ad:f8:7a:a5:3a:f6:d3:28:56:fe:59:77:
70:57:64:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:08 2024 by rpki-client on console-ams.rpki-client.org