Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/WR_To3VUJTJlpjrnp73n-YL2W2E.roa
File: WR_To3VUJTJlpjrnp73n-YL2W2E.roa (raw, json)
Hash identifier: 49EC53/iQqS2QYjndOzGBaDzuPPlXgM4Av7GWjFLb30=
Subject key identifier: 59:1F:D3:A3:75:54:25:32:65:A6:3A:E7:A7:BD:E7:F9:82:F6:5B:61
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 018CCA998B37CF710EF191F299CF64C251C0
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/WR_To3VUJTJlpjrnp73n-YL2W2E.roa
Signing time: Tue 02 Jan 2024 14:35:09 +0000
ROA not before: Tue 02 Jan 2024 14:35:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35478
IP address blocks: 45.8.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:8b:37:cf:71:0e:f1:91:f2:99:cf:64:c2:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Jan 2 14:35:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=591fd3a37554253265a63ae7a7bde7f982f65b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:0f:60:05:44:c7:3b:e7:3d:6f:ee:6f:dc:
03:b9:23:fc:51:fd:46:92:8f:90:a1:1a:f1:1e:e4:
d5:8d:86:ca:3a:71:04:01:0a:1b:73:24:d0:1a:80:
88:07:ba:34:2e:79:1d:94:77:e2:cf:fc:13:ad:85:
9a:6b:a9:55:65:76:28:83:d4:f1:b0:7a:65:4d:a6:
2a:f7:ce:ac:46:44:f7:4d:da:99:89:95:94:72:67:
b8:20:d6:b7:dc:69:b6:f9:b2:39:db:35:bc:07:23:
28:b2:ee:b7:6b:37:21:16:68:61:f8:8d:67:71:70:
9e:5f:98:d2:a8:50:3b:1c:6b:ab:39:cc:d5:5d:3e:
b7:26:a9:01:bc:ca:c4:f3:0a:95:48:94:b4:bd:17:
9c:9b:35:c2:00:90:84:75:52:c7:2e:2d:c0:cb:b4:
63:f1:6e:ff:dc:f8:a8:6d:3b:8d:d3:a8:59:77:c8:
e9:ee:a4:de:a4:0b:40:4d:10:c3:5d:d2:3d:8b:a8:
a4:f2:e3:d5:cd:b1:c2:0a:14:52:8b:16:d6:8d:49:
d6:80:43:18:e8:f6:f3:de:6f:0c:7d:e1:55:f8:4f:
ee:46:d6:18:69:e4:1f:65:04:2a:47:47:ba:6f:07:
a9:7c:16:6c:59:81:67:32:b3:e5:67:8e:2d:67:eb:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1F:D3:A3:75:54:25:32:65:A6:3A:E7:A7:BD:E7:F9:82:F6:5B:61
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/WR_To3VUJTJlpjrnp73n-YL2W2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.44.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:63:b4:1f:5f:cd:0b:90:18:d8:93:08:ac:08:f1:48:82:77:
bc:0e:c3:38:fc:82:e0:6a:2b:2f:37:e8:51:93:16:d6:32:c3:
5a:41:04:f9:45:c4:ea:b6:73:4f:b5:e8:23:03:45:c5:ff:2d:
b3:07:f1:76:75:37:04:3c:98:8a:4d:d3:be:91:2a:b5:2e:95:
99:09:54:9b:82:51:7f:7a:81:05:cc:09:4b:9a:b2:78:d8:ac:
36:07:76:19:53:f6:15:7c:31:f1:04:d6:fc:fb:d2:b6:81:4d:
82:1c:3c:10:bd:08:af:d9:e7:45:31:f6:90:d3:b1:ce:84:92:
bf:ad:5c:56:21:53:31:9d:0e:85:fc:33:26:0c:1c:73:13:58:
9e:fa:e9:15:83:d9:bb:de:61:e4:0b:a1:35:3c:bc:62:ee:59:
25:79:9c:f5:67:13:b4:ed:43:4b:f4:b3:a2:ae:9f:d5:71:5d:
71:25:7d:27:82:04:e1:00:18:9f:87:e7:71:c5:e8:83:7f:03:
fe:0d:b3:29:62:b8:13:a5:96:09:4b:41:99:8b:a8:e8:63:15:
13:5c:8f:72:05:ab:31:8d:2e:c0:b7:85:1f:9a:7b:fb:49:6a:
21:f8:e8:33:17:89:21:e7:05:1c:ca:20:87:05:43:50:21:b4:
ce:fb:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:58:46 2024 by rpki-client on console-fra.rpki-client.org