Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WIsqcvQAMq1ryrDlZgll2R8jldg.roa
File: WIsqcvQAMq1ryrDlZgll2R8jldg.roa (raw, json)
Hash identifier: J5MjOZgGithTbSQnVz6iaxzX1OQ0Lc4P4oYuikpfS3s=
Subject key identifier: 58:8B:2A:72:F4:00:32:AD:6B:CA:B0:E5:66:09:65:D9:1F:23:95:D8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8029A612B2270869C6D9FCBE4264190
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WIsqcvQAMq1ryrDlZgll2R8jldg.roa
Signing time: Tue 02 Jan 2024 02:31:02 +0000
ROA not before: Tue 02 Jan 2024 02:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215951
IP address blocks: 45.90.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:9a:61:2b:22:70:86:9c:6d:9f:cb:e4:26:41:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=588b2a72f40032ad6bcab0e5660965d91f2395d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6f:95:8c:b5:98:89:ba:fb:2b:6e:3f:94:9e:
57:92:5f:93:d5:a3:3a:3e:82:e3:9d:cd:43:a3:fb:
65:6a:8e:98:d1:bb:98:38:8e:4d:dc:4d:1f:b5:22:
19:98:b1:20:49:81:8f:71:67:54:1f:57:1c:cb:c3:
40:b9:da:8e:27:94:7e:ba:4a:99:80:15:2a:05:71:
74:ce:01:45:2e:2c:f4:b7:e1:f3:4b:c3:35:cd:99:
b6:2b:b4:98:1a:2a:da:d8:1f:3f:76:9e:6a:0a:82:
f3:36:22:ad:78:53:d4:fa:d8:6e:b8:d5:19:c4:1d:
f0:de:85:0b:40:03:5a:c7:67:17:82:92:a9:74:fe:
d0:95:79:40:81:2f:44:8b:80:d5:3e:6b:35:97:dc:
bd:8b:c2:53:80:0d:84:a9:77:8c:23:2b:6c:2c:e6:
fd:fa:41:0b:69:3d:ac:4f:c2:0d:b3:1a:55:78:e4:
8f:fe:5c:1c:97:c3:c6:df:98:39:c3:94:98:8b:eb:
2e:09:e1:b3:39:1f:e1:67:58:74:bf:c3:e4:44:32:
1f:8c:32:f7:f1:32:fc:9d:65:ad:30:79:e1:72:ed:
80:09:05:52:5f:7e:24:7e:d7:dc:b1:10:5d:4b:37:
cf:8f:47:32:41:9a:c4:f1:9b:a2:a5:73:e3:b0:93:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8B:2A:72:F4:00:32:AD:6B:CA:B0:E5:66:09:65:D9:1F:23:95:D8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WIsqcvQAMq1ryrDlZgll2R8jldg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4c:df:a2:ec:29:d7:cc:1e:b5:bf:09:51:8d:30:97:3c:0e:
56:02:b5:c4:7d:94:ab:f9:65:4c:bc:70:e5:7c:ae:72:dd:5a:
99:4c:64:72:5e:8d:2f:f9:c0:82:c2:4d:f0:5c:57:76:e4:3a:
02:72:30:f6:40:06:f4:a8:5b:66:1a:06:4d:79:19:cb:22:f0:
38:48:a9:0b:4b:e0:49:89:b4:64:8f:0c:24:a6:26:b8:fc:ad:
37:df:c6:fc:df:17:66:3f:d9:af:ac:cb:c6:b9:2f:1f:b1:f3:
a9:4c:4a:cf:39:ba:51:ee:a4:a1:e7:05:45:63:d2:91:f9:0c:
7e:4c:bc:8f:d0:21:98:be:c3:94:76:98:ca:b0:9d:a4:f7:ee:
cf:4b:d6:52:d2:cb:73:9a:a5:10:30:a9:15:84:05:25:db:43:
33:2b:56:aa:e4:8c:f0:d5:8a:14:ef:2a:df:7d:7f:a7:d4:bf:
d3:32:14:2d:75:76:12:bf:84:01:ae:90:16:7c:2d:6b:2d:e1:
08:51:5c:ac:e0:37:25:9d:76:fd:33:de:0d:2b:da:3d:6e:de:
88:e8:d8:77:6d:d7:9f:e5:1b:76:2c:0a:ee:c2:ff:01:55:f7:
24:93:a9:aa:9b:c4:7d:04:2a:71:ed:56:91:4d:fb:b7:d0:ba:
2d:5a:83:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:58:12 2024 by rpki-client on console-fra.rpki-client.org