Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/WkNOdA0LAhNEhuk2E5g1CiLlkKk.roa
File: WkNOdA0LAhNEhuk2E5g1CiLlkKk.roa (raw, json)
Hash identifier: FPj0ICKn85BjeEYM8SIDX4sX+6SU6e2dVZ2dBqAO40w=
Subject key identifier: 5A:43:4E:74:0D:0B:02:13:44:86:E9:36:13:98:35:0A:22:E5:90:A9
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018CC2DB632D08904CCC45F0D6C39C53ABB7
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/WkNOdA0LAhNEhuk2E5g1CiLlkKk.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47122
IP address blocks: 193.22.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:63:2d:08:90:4c:cc:45:f0:d6:c3:9c:53:ab:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a434e740d0b02134486e9361398350a22e590a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fe:81:0e:58:d6:f5:8d:cd:78:1a:95:53:4a:
6a:83:54:a1:a0:0b:a7:1f:32:19:fe:e3:31:78:1e:
6e:69:30:db:90:0c:a3:4c:17:c8:da:bb:3a:88:49:
6e:7a:1b:c3:36:29:67:a9:c6:76:0f:a4:48:c2:f8:
da:17:dd:05:1f:5d:66:26:97:81:a4:9d:05:27:f3:
57:99:d6:a7:4b:e5:a0:4d:ac:7b:aa:0e:35:ab:df:
2e:14:8c:19:f3:39:28:8d:a6:e5:59:4d:dd:16:b5:
bc:40:b0:71:4d:bc:d4:fe:a6:9c:d2:f8:f4:dd:11:
a1:4f:9f:44:a6:43:0c:19:e8:5a:6f:30:20:1a:d7:
b3:de:84:6a:cc:17:f3:cb:c1:46:0c:4c:99:4a:89:
c8:f3:78:28:5f:43:4b:1c:de:74:55:cc:b8:26:50:
38:87:02:78:a0:c8:20:ad:32:6e:01:55:e2:39:fb:
a8:ad:fe:29:26:5c:f0:d2:32:bd:c0:e9:17:4b:24:
f8:6f:26:38:5f:dc:8e:34:7a:3f:db:d3:8f:7a:9a:
54:b9:b1:73:29:57:91:41:19:8f:01:32:6b:c2:01:
b8:58:f8:43:cc:24:fc:6f:e8:cb:b3:63:3e:e5:0a:
35:70:51:5f:f9:78:bb:2d:28:57:a5:59:c4:11:b1:
ba:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:43:4E:74:0D:0B:02:13:44:86:E9:36:13:98:35:0A:22:E5:90:A9
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/WkNOdA0LAhNEhuk2E5g1CiLlkKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:30:bf:e8:d6:4b:2c:4a:30:02:c1:ed:d1:ce:14:63:db:4a:
73:9c:40:ab:32:a7:be:04:bf:93:eb:17:75:93:ab:d5:73:a8:
ca:be:fc:63:13:70:ec:11:7d:f2:9d:af:5d:77:ad:fb:4a:7b:
fd:3c:e7:8c:21:0b:e4:cc:52:c4:45:02:0f:36:72:cd:b5:90:
cb:2b:d8:93:4b:e0:5c:eb:ce:d0:bf:5e:18:68:08:0c:8e:38:
c9:f9:03:c2:a9:cf:39:59:d1:9b:7a:fd:55:d7:9b:71:f1:b0:
18:a8:4f:14:e4:99:e9:e5:90:0c:09:55:57:db:7f:12:20:48:
b1:5a:d5:ba:82:f6:47:07:0a:b0:26:e6:cb:20:27:f6:53:73:
06:86:37:ca:c0:63:d5:0b:8c:8c:03:37:db:75:12:05:7b:f9:
41:09:49:1f:97:7a:c5:d0:33:68:49:58:eb:b5:45:0a:50:b4:
85:c2:ff:60:35:1d:9e:8f:26:33:2f:52:17:44:e4:73:2a:8b:
f9:f8:b2:54:20:49:01:19:43:57:ca:d9:13:ec:bd:06:49:a7:
fb:b4:cb:00:00:f4:07:7d:54:3e:e7:73:09:6b:80:79:f1:26:
49:f9:1d:d1:72:3b:29:dd:70:2c:ee:b0:68:80:56:a3:b3:a0:
31:dd:b5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:47:38 2024 by rpki-client on console-fra.rpki-client.org