Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wyvTzYumi1EjPn3XZZMByhrPluc.roa
File: wyvTzYumi1EjPn3XZZMByhrPluc.roa (raw, json)
Hash identifier: cyJOXOIg2FZJxv1ZPglhDwRmXSGp5pDNEl//0HuSt8s=
Subject key identifier: C3:2B:D3:CD:8B:A6:8B:51:23:3E:7D:D7:65:93:01:CA:1A:CF:96:E7
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 018CC64B637C67FAF3A5451C52857C18692B
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wyvTzYumi1EjPn3XZZMByhrPluc.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19437
IP address blocks: 212.52.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:63:7c:67:fa:f3:a5:45:1c:52:85:7c:18:69:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c32bd3cd8ba68b51233e7dd7659301ca1acf96e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:41:4c:27:43:02:ea:9e:a3:4d:f7:55:20:
2a:4f:27:80:25:6f:a4:25:57:5a:69:17:82:e4:63:
17:59:38:7f:fa:8d:70:4d:0f:d0:65:28:69:e7:51:
2c:e7:69:af:a0:99:9c:50:1f:9e:1e:6d:dc:0c:d7:
09:61:af:8b:c5:1b:ff:3c:82:57:ff:46:31:6f:a4:
d9:1b:1d:8b:3a:43:2f:3d:c9:80:cd:39:de:6e:0f:
55:29:c6:e3:3b:03:8d:f9:8e:d8:cc:f3:3a:ee:21:
27:1c:74:2a:4d:3f:8c:26:f7:2f:c4:28:f3:8d:62:
d6:47:2c:36:b7:3d:61:10:7f:d2:7c:29:85:4b:73:
e5:72:b7:25:35:1b:87:22:66:40:25:dd:d1:ad:88:
cc:1e:1f:38:3d:20:61:77:22:8c:5b:67:e2:0f:ad:
c9:5c:6e:5b:b9:62:63:ab:59:b0:f2:99:a2:39:c1:
80:1b:90:43:e4:0b:43:5c:14:d3:69:63:bb:73:6f:
0e:43:b8:1f:99:dd:42:f5:26:5d:bc:75:7d:fc:68:
20:08:53:51:75:a8:60:10:29:ed:ca:78:a3:7d:f5:
6c:2e:6f:3b:01:49:03:5b:fc:0d:87:4e:4b:65:e8:
fa:68:3c:9d:ac:80:c5:40:b4:af:f6:17:46:44:52:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2B:D3:CD:8B:A6:8B:51:23:3E:7D:D7:65:93:01:CA:1A:CF:96:E7
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wyvTzYumi1EjPn3XZZMByhrPluc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:0a:ed:b1:61:4b:06:39:72:a4:4e:4c:c3:1d:2f:16:f6:db:
62:f9:7e:ef:8c:94:54:8e:0b:25:f9:f0:4f:40:c6:22:64:7f:
83:38:96:c2:43:ea:af:13:31:46:08:4e:d0:93:67:22:77:49:
07:b0:66:7d:73:c4:45:25:59:30:96:68:4c:34:4a:7b:10:3e:
1b:c5:59:c8:91:09:82:4f:d5:b0:b2:39:0c:45:ce:ca:3f:e7:
e8:ac:7f:ca:bd:a1:93:1a:42:e8:69:32:af:57:14:7c:06:f4:
1a:f7:52:a3:76:df:75:d0:dd:30:4c:78:33:1a:f0:54:00:9f:
18:b0:03:de:47:b3:4e:ba:e7:87:7f:d9:64:5b:b5:e8:f5:d6:
23:3c:0c:fa:6e:46:0c:14:b8:3a:27:b3:10:12:1f:51:d8:11:
f9:35:fe:94:16:4e:74:3a:ae:58:64:74:d0:84:93:ab:48:88:
8a:2c:fa:af:ed:65:89:35:ae:a8:a8:22:e4:5c:eb:38:46:46:
79:e9:4b:c6:0b:7b:1c:07:d8:6e:77:e4:67:e5:17:7e:20:57:
a5:fd:e9:76:79:f7:cc:f9:1c:53:26:da:05:dd:8a:ce:a2:23:
61:e9:eb:6b:a4:76:b9:5b:6e:49:18:55:00:00:7f:b0:1a:eb:
8a:c3:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 04:43:45 2024 by rpki-client on console-fra.rpki-client.org