Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/W087zYuhkkMAJhOSWCKJufB2nB4.roa
File: W087zYuhkkMAJhOSWCKJufB2nB4.roa (raw, json)
Hash identifier: MK6gZDCY9QsGgaExyeq5++n3HtK5q4ORbt0VwJY3dy4=
Subject key identifier: 5B:4F:3B:CD:8B:A1:92:43:00:26:13:92:58:22:89:B9:F0:76:9C:1E
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 018CC501246EA6CE0208862ABD8239FC3C6E
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/W087zYuhkkMAJhOSWCKJufB2nB4.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62329
IP address blocks: 194.61.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:24:6e:a6:ce:02:08:86:2a:bd:82:39:fc:3c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b4f3bcd8ba1924300261392582289b9f0769c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2c:d0:a7:43:73:55:ad:06:7f:3b:0f:28:fd:
68:e0:43:09:83:4f:41:6e:e3:2d:4a:d7:b7:5c:54:
a8:49:62:8a:f0:7a:b4:5e:d9:41:0b:44:4c:58:67:
d3:30:89:93:bd:05:f6:80:54:ac:9c:3b:37:62:cc:
99:d1:e5:83:09:11:9f:8c:90:ce:56:80:3b:18:96:
0d:23:b6:ec:d3:f1:60:34:97:c7:ac:c9:42:ab:b1:
fa:ad:bc:20:02:e3:30:7c:78:17:ef:6b:d0:1f:20:
37:36:ae:e9:e8:9f:1d:d4:b1:16:a7:44:70:67:6c:
1f:f1:57:96:51:57:e0:7b:3c:be:36:97:67:9f:df:
51:53:30:64:d6:35:19:64:42:dc:a5:72:be:4b:a6:
17:f0:8d:7c:9e:fb:30:bb:89:6b:48:54:9a:6e:38:
8d:8b:82:8f:84:9e:e4:b9:9f:32:b2:50:88:a5:aa:
a5:d8:6f:a5:0d:31:7f:01:46:0a:53:ae:93:12:77:
41:e1:16:93:ce:b6:c6:50:e5:34:31:d4:52:bf:35:
f7:2e:24:a5:4b:3a:f0:c0:69:b0:1a:2c:8c:dd:65:
b4:3c:08:77:f7:8c:bb:a2:c7:16:72:05:47:c7:6a:
14:6f:da:6e:87:79:f1:e4:b3:48:70:6f:20:71:11:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4F:3B:CD:8B:A1:92:43:00:26:13:92:58:22:89:B9:F0:76:9C:1E
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/W087zYuhkkMAJhOSWCKJufB2nB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.82.0/24
Signature Algorithm: sha256WithRSAEncryption
32:96:d4:c4:8a:9d:38:65:c3:4a:89:7a:34:31:0d:ab:e8:49:
2c:e3:3c:f1:7b:bb:eb:c1:f1:fc:cf:57:a5:d5:0e:32:5a:b2:
48:44:38:3a:8a:67:9c:10:81:dd:88:0c:ec:53:c4:d7:8f:1d:
bc:f7:3e:67:42:7b:86:07:7d:f4:9a:a2:11:08:86:51:84:5e:
a8:e6:6f:0f:d9:db:72:0a:80:f1:a4:c9:3b:16:3e:00:cc:45:
1e:89:df:b4:ff:37:02:7b:c3:68:bb:13:d5:3a:38:06:23:0e:
15:df:74:82:49:08:00:b9:fb:14:bd:19:a0:9c:f8:b2:6e:96:
00:a8:31:9b:53:3a:2a:b9:56:c0:9c:2e:73:3d:33:6e:35:6a:
ef:49:20:93:b8:f1:4b:f4:7d:af:8e:61:b6:80:f0:69:8b:88:
5d:1b:d7:27:aa:7f:41:b3:83:09:f9:24:3c:fe:5a:bf:30:57:
e2:d7:93:45:cc:3c:b7:7f:7e:df:37:f4:ad:e4:b6:af:be:20:
eb:d4:9c:0c:76:8b:38:12:6b:27:3f:60:a3:6a:39:14:be:f1:
d3:ac:45:c3:b6:01:8a:14:92:00:c2:3f:34:d0:50:f0:c1:9f:
dc:a1:d1:65:e2:ba:b4:b2:18:45:47:f7:c4:a2:27:95:ab:c9:
65:95:44:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:13:26 2024 by rpki-client on console-ams.rpki-client.org