Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/WOO8FaZSXaA9M3VAXuIAZLWTk6w.roa
File: WOO8FaZSXaA9M3VAXuIAZLWTk6w.roa (raw, json)
Hash identifier: ZrcpBQwHmOVIMJwt0GH3ZF5Z0HPGFTnlYrNkWrzLU/4=
Subject key identifier: 58:E3:BC:15:A6:52:5D:A0:3D:33:75:40:5E:E2:00:64:B5:93:93:AC
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 018DE6764ACF32E6FEBEAFC87E976AB23158
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/WOO8FaZSXaA9M3VAXuIAZLWTk6w.roa
Signing time: Mon 26 Feb 2024 17:28:48 +0000
ROA not before: Mon 26 Feb 2024 17:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 45.158.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:76:4a:cf:32:e6:fe:be:af:c8:7e:97:6a:b2:31:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Feb 26 17:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58e3bc15a6525da03d3375405ee20064b59393ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:5a:3b:dc:26:b3:ac:a1:52:f5:72:fa:fd:
d7:c0:f6:07:68:31:e2:08:9a:3b:a0:06:8e:67:64:
9c:db:8c:68:ec:4f:94:f1:13:47:9d:f6:b0:ec:f7:
6e:f7:78:8c:ef:a6:55:36:da:c5:78:cc:e7:e4:a8:
33:b7:0c:a0:de:3a:86:ff:bd:67:db:fd:47:d4:ce:
be:c9:2a:2b:4c:97:2d:1f:ad:5e:bd:ba:6e:54:dc:
c9:fe:14:7e:47:94:a3:0c:6e:05:48:3f:66:6d:74:
20:f3:cd:f6:b0:77:3c:74:12:ab:c4:47:e8:8d:8e:
a3:11:54:c4:c1:e4:39:5d:59:63:5d:80:bd:23:26:
66:fb:b4:b5:7c:44:2b:4a:bd:1d:b2:90:55:e9:c7:
94:b7:ed:71:83:f1:3a:26:9c:45:af:b0:cf:52:e8:
68:74:d7:aa:52:d0:a7:63:26:39:ed:e2:17:56:81:
76:d0:aa:22:ca:d7:6a:70:59:5d:58:e9:c1:8a:d5:
4f:0f:0c:f3:a2:7a:19:96:2c:4f:56:99:d2:e5:4d:
41:9b:0c:84:ed:93:6e:ef:68:d7:43:51:b2:03:8a:
13:ab:66:de:3b:fd:c3:ab:da:f6:cf:33:cf:e9:3d:
f4:a8:5a:cd:66:5f:54:f8:da:c7:f6:c8:c7:71:12:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E3:BC:15:A6:52:5D:A0:3D:33:75:40:5E:E2:00:64:B5:93:93:AC
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/WOO8FaZSXaA9M3VAXuIAZLWTk6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.164.0/23
Signature Algorithm: sha256WithRSAEncryption
64:86:06:8e:e5:4e:fe:b1:06:86:b2:ac:44:64:d8:8e:ec:d0:
a2:ac:55:d6:8d:f1:46:9c:fc:dd:d2:95:ff:13:4f:0f:e5:ed:
61:ff:7e:34:6d:a4:5b:dc:9f:b1:85:f4:ae:6a:c3:92:f9:10:
65:a3:c8:cd:98:eb:54:21:fa:2b:58:f2:20:c4:fc:e6:c2:6c:
bf:b3:7a:92:92:6b:2b:2a:89:69:f5:fd:1c:4c:fe:76:cd:12:
04:66:80:bf:2a:22:bb:05:e3:66:26:de:10:ce:97:1c:70:ba:
4f:e3:dd:a2:64:58:90:74:d4:35:53:af:e1:cc:a0:b4:ae:3d:
86:8a:c3:7d:91:42:6b:b0:fe:fc:71:45:c9:33:8e:d5:de:0a:
74:25:3d:6f:36:5a:2f:e7:5c:7f:06:55:c8:1b:a3:a7:b5:fd:
ac:4d:a2:d8:f4:46:85:7a:31:1a:a1:61:30:e5:4c:92:fd:16:
c0:b1:36:18:94:9e:3a:14:6a:af:b6:c9:a1:60:b1:a1:98:6c:
d0:d5:0b:39:eb:96:9b:e1:93:4a:5a:61:4e:12:b1:d1:f5:c9:
0c:f5:01:b5:b6:68:82:e5:f2:aa:98:50:60:60:8a:b2:bd:d0:
4c:c4:67:45:6b:72:c3:81:db:56:5e:64:f4:6c:f9:54:9e:f1:
cf:70:fa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:18:44 2024 by rpki-client on console-ams.rpki-client.org