Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/WnPvbOr-0Oq7kEpC7eyWTyqQ66I.roa
File: WnPvbOr-0Oq7kEpC7eyWTyqQ66I.roa (raw, json)
Hash identifier: 3wczcT8sdyHCvyi0d0O6704L5t6iFuUCr4a72PF4ygk=
Subject key identifier: 5A:73:EF:6C:EA:FE:D0:EA:BB:90:4A:42:ED:EC:96:4F:2A:90:EB:A2
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 018CC34964AF88B614640027B53C38B98FD3
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/WnPvbOr-0Oq7kEpC7eyWTyqQ66I.roa
Signing time: Mon 01 Jan 2024 04:30:16 +0000
ROA not before: Mon 01 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199224
IP address blocks: 77.74.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:64:af:88:b6:14:64:00:27:b5:3c:38:b9:8f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a73ef6ceafed0eabb904a42edec964f2a90eba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:e5:00:d9:69:ae:3d:26:a5:db:2d:be:1d:
0b:45:5a:8c:25:ad:ab:9a:e2:1a:11:c3:05:f5:f3:
87:75:62:11:fe:3e:08:e7:49:68:45:47:21:3a:2c:
c3:ab:13:ea:c3:40:4c:ee:b6:24:47:af:ed:ed:93:
01:4d:07:69:37:0e:63:df:ff:b6:48:c2:5d:18:be:
9e:83:f4:04:2f:0e:71:b7:15:3d:8d:c1:31:77:23:
22:76:92:8c:a9:0b:bc:f8:65:63:d5:bb:49:a3:df:
45:9e:93:e4:f6:92:ae:38:e2:af:f7:c9:26:7e:5e:
4d:d8:a6:19:0b:95:2e:c0:e7:c9:35:d2:4e:50:9d:
74:a9:fe:dc:cc:a2:5e:6d:d8:8f:e6:3c:39:65:0f:
e4:76:51:fd:65:14:01:07:36:34:89:66:e0:e5:85:
b3:79:5b:de:84:af:b9:03:b1:d4:8f:0e:53:96:72:
c2:30:63:b4:2c:5f:6b:34:27:20:51:96:7b:fb:2e:
91:ba:55:98:bb:03:2e:84:1a:37:40:fd:28:03:fd:
7f:7b:3b:c1:b1:be:56:89:ba:74:a5:fd:dc:f8:32:
3b:9d:30:e8:75:df:44:f8:e3:df:b8:7c:c5:4c:bc:
d9:8a:f6:af:43:a8:81:09:1c:7c:b8:9b:24:7a:70:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:EF:6C:EA:FE:D0:EA:BB:90:4A:42:ED:EC:96:4F:2A:90:EB:A2
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/WnPvbOr-0Oq7kEpC7eyWTyqQ66I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.104.0/23
Signature Algorithm: sha256WithRSAEncryption
42:65:4b:50:6a:55:e2:4c:14:25:a5:a9:56:c9:c3:98:0b:48:
a1:e1:75:51:25:2a:0f:98:22:b5:cb:a9:78:d8:8f:66:f4:89:
56:f6:53:b1:dc:a7:3a:41:6e:d8:26:ae:69:51:72:e9:3b:7c:
e9:a0:1d:f9:93:65:f7:61:5b:fe:2c:37:c2:2b:fe:c2:15:b4:
55:99:a8:f4:9e:70:34:f4:3f:4d:8b:4a:6d:d4:34:ae:f4:da:
52:ba:31:64:cf:07:b2:0d:1f:32:a1:45:0a:95:f7:8c:a8:60:
b5:96:e0:49:2a:52:f2:5c:80:e5:ee:ca:0f:77:10:e9:bd:d0:
18:56:99:ba:27:4f:18:55:98:d2:11:31:d2:fc:96:ec:36:ae:
6b:5b:8f:90:f3:fc:9b:61:b3:0b:dd:ff:12:4d:e3:a3:fd:c6:
52:87:3a:03:77:88:b4:3f:1a:89:e6:4b:8e:07:8f:8d:23:c5:
33:c2:f8:a9:48:07:48:d4:ef:08:83:4f:ca:c0:74:0d:c9:1e:
ad:0c:15:6d:aa:7c:3c:94:e3:2f:a7:93:82:5f:20:b6:14:9b:
37:96:58:ef:2b:16:fa:85:e5:37:89:77:f7:3a:d1:6b:d6:e3:
9c:10:47:f3:b6:2d:c7:a2:d3:df:08:9a:bd:6c:c0:0e:19:3d:
52:cc:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:39 2024 by rpki-client on console-fra.rpki-client.org