Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/wsCA0kUAyFbDaRjj6hjp27fTWSk.roa
File: wsCA0kUAyFbDaRjj6hjp27fTWSk.roa (raw, json)
Hash identifier: p8Jz3RqjsW3wkgsPi3xJhPcjMPRscYaKdJGUs5WDy2s=
Subject key identifier: C2:C0:80:D2:45:00:C8:56:C3:69:18:E3:EA:18:E9:DB:B7:D3:59:29
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 018CC50090630A5DA4A512DD9B2B12551FF5
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/wsCA0kUAyFbDaRjj6hjp27fTWSk.roa
Signing time: Mon 01 Jan 2024 12:29:57 +0000
ROA not before: Mon 01 Jan 2024 12:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199062
IP address blocks: 91.103.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:90:63:0a:5d:a4:a5:12:dd:9b:2b:12:55:1f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 12:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2c080d24500c856c36918e3ea18e9dbb7d35929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:67:11:74:ec:81:72:60:7c:a4:59:d7:21:a9:
76:65:45:dd:a5:bc:f3:6e:ec:e0:85:e5:b0:74:00:
0d:b8:86:23:21:58:af:c3:54:68:88:b3:f0:e4:14:
99:c1:11:48:ed:39:6e:70:e5:bf:a7:87:ac:e8:6c:
a9:3e:9d:74:d6:94:4c:ac:bd:ea:23:98:e2:da:d8:
ff:2a:a3:15:ea:a9:97:78:96:5f:7a:9e:1c:3e:c9:
0c:76:3d:a7:41:5b:d1:7b:b0:0d:d2:55:62:ff:db:
78:59:fd:e0:65:d0:fd:e3:03:05:52:ac:ee:c2:8f:
83:65:ff:90:fd:5e:36:64:60:1c:ff:85:af:53:1d:
3d:38:2b:3c:0b:45:98:f0:6c:fe:96:24:3a:1e:1a:
fe:b0:09:9f:61:3c:23:6e:a1:b6:7c:b8:c3:c0:a3:
e4:7d:55:3f:ba:08:71:5d:1d:67:e6:64:8d:4d:90:
d8:0e:b4:41:36:bd:42:01:06:c8:0f:33:28:1e:94:
74:c8:24:b4:fc:cc:c9:20:5a:51:55:92:c4:54:f0:
7c:90:1d:90:fb:ce:1c:a8:c1:fd:5f:a9:28:18:cd:
66:ea:b6:18:03:7a:23:d3:eb:c8:a6:4f:da:03:80:
a7:4b:ed:59:08:bd:03:e7:16:62:28:54:6c:54:43:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:80:D2:45:00:C8:56:C3:69:18:E3:EA:18:E9:DB:B7:D3:59:29
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/wsCA0kUAyFbDaRjj6hjp27fTWSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.58.0/24
Signature Algorithm: sha256WithRSAEncryption
98:53:5a:bf:a4:ee:ee:ca:94:74:97:da:8a:c4:68:48:7e:67:
81:9d:2d:d5:93:43:0b:f3:1f:fe:0c:cd:f2:41:0e:a8:0e:a8:
67:1b:9f:82:3f:2a:3d:27:66:cc:da:3b:33:e9:3f:b5:88:36:
fb:ba:63:d7:44:33:d6:5d:b2:31:66:ff:b2:79:94:da:57:05:
1f:06:19:d0:4e:b1:52:d2:7a:f4:89:dc:24:d2:fa:29:65:0d:
a9:2c:63:9b:e0:f1:56:01:f8:8a:26:75:55:5c:52:35:56:d6:
46:9d:a2:ee:30:c5:91:fc:24:7b:3f:ab:f7:d6:6f:d6:21:96:
5b:e7:38:bb:99:da:71:c3:ea:0b:c7:18:08:b9:e6:52:4f:8b:
e8:da:0a:85:a1:aa:57:98:6a:a6:b4:30:50:f8:66:31:69:eb:
c0:5f:e3:d6:77:ba:4f:54:c6:b8:ec:8c:51:70:7f:94:13:a6:
dd:b4:4a:7f:f0:95:b9:00:40:14:ee:2c:28:54:62:a1:24:a1:
94:4e:78:1a:fb:64:19:88:ec:2d:f2:1c:0f:6c:e0:60:2f:28:
a7:71:9e:c7:22:dc:69:2d:54:49:30:2b:31:26:75:42:55:27:
79:aa:06:e0:6e:65:83:01:5a:cd:d1:a2:92:6b:7a:79:26:f8:
93:e9:be:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:35 2024 by rpki-client on console-fra.rpki-client.org