Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/wJIwB-WtaZrrHIFdBBYgxn6GD1E.roa
File: wJIwB-WtaZrrHIFdBBYgxn6GD1E.roa (raw, json)
Hash identifier: NqHmt7h+5fdv7B8QFPA7P2zaKRzx/fSTSqwwDs0WBdA=
Subject key identifier: C0:92:30:07:E5:AD:69:9A:EB:1C:81:5D:04:16:20:C6:7E:86:0F:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 018CC7277638BA3DD32CEE5B05EFED4A410D
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/wJIwB-WtaZrrHIFdBBYgxn6GD1E.roa
Signing time: Mon 01 Jan 2024 22:31:41 +0000
ROA not before: Mon 01 Jan 2024 22:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62336
IP address blocks: 213.244.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:76:38:ba:3d:d3:2c:ee:5b:05:ef:ed:4a:41:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Jan 1 22:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0923007e5ad699aeb1c815d041620c67e860f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:89:d2:12:b2:4d:af:e3:44:71:70:74:c1:
e8:99:ce:ee:36:5e:50:e7:e6:70:e1:5a:28:c8:52:
db:d7:74:f8:7c:67:07:cd:bf:44:cd:d7:36:95:65:
5e:57:14:1a:1b:49:51:c2:1e:66:99:e3:49:bb:5b:
83:9d:5a:2a:a2:af:49:0c:11:17:ae:3c:8b:c1:97:
c5:6c:c4:c5:c8:15:93:36:c0:c8:82:8e:5c:df:2c:
59:81:bd:75:ff:41:26:a1:54:4e:de:7b:cf:5d:ae:
80:f1:b0:7c:55:ff:d0:9d:15:c1:34:a0:63:30:99:
29:64:de:df:2e:bc:67:a2:97:b7:00:59:d2:73:6d:
f6:99:13:aa:6f:d1:5a:1d:af:bb:8c:42:0f:4f:6a:
fa:71:7c:c9:95:40:2b:26:55:39:6c:37:32:f1:6e:
32:83:1c:02:60:9b:c3:97:81:b4:d0:07:53:9d:2c:
09:d3:57:f7:24:68:ba:4d:37:14:72:5e:df:ac:15:
b2:0e:a9:2e:66:27:fd:b4:47:b9:70:11:94:6b:5c:
a5:01:0a:18:32:f0:a5:be:ce:d7:ee:9b:43:14:a5:
93:c6:b8:8d:31:e0:54:6c:5b:1a:37:f6:7b:c8:fa:
64:0c:d7:4f:f7:11:51:10:6c:ce:b8:d3:db:60:1e:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:92:30:07:E5:AD:69:9A:EB:1C:81:5D:04:16:20:C6:7E:86:0F:51
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/wJIwB-WtaZrrHIFdBBYgxn6GD1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.244.48.0/20
Signature Algorithm: sha256WithRSAEncryption
76:e6:f0:26:ae:8a:f9:2d:55:54:05:ac:d6:c7:e9:71:27:05:
bb:89:33:15:9d:40:af:e4:ec:73:c6:23:6d:f8:4c:84:12:70:
e9:80:c2:96:93:dd:82:49:6d:97:97:3c:4b:52:be:8e:1e:4c:
f3:d4:16:87:c2:d2:77:88:58:b3:24:a8:b6:33:a1:2f:64:4e:
7a:ca:bc:23:cb:7e:b6:39:cb:df:3b:dd:1d:fb:24:8f:3a:f2:
c2:1e:ba:d1:63:ad:05:4d:79:d3:39:a4:a5:3a:d3:1a:52:d2:
11:5f:50:da:e2:bc:c4:fe:b5:8a:19:72:dc:7b:a3:10:9b:12:
a4:c1:7e:45:d1:03:5b:b3:20:6d:e7:53:01:c2:10:3c:9a:21:
c2:a8:0b:d7:58:bd:76:19:02:dd:8d:00:c1:59:3d:64:ed:16:
a3:78:03:16:92:8e:a6:df:f3:ac:f9:d2:9b:f7:ff:60:e0:18:
96:02:8c:b7:6c:e8:40:70:d5:4e:05:5c:22:59:ca:cb:a7:08:
6b:9a:0d:72:11:e0:51:1d:59:4d:92:3e:52:00:16:4e:6d:c5:
bb:07:c5:74:b9:b1:9d:1f:35:d0:a6:e3:f2:b8:ba:e8:33:b8:
52:fe:dc:29:37:98:2f:9c:33:78:3c:07:1d:3c:b2:ab:df:81:
3d:7b:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:41 2024 by rpki-client on console-ams.rpki-client.org