Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WynRzQQeFRuVFuSuDsg8-DDW2CM.roa
File: WynRzQQeFRuVFuSuDsg8-DDW2CM.roa (raw, json)
Hash identifier: 075RaGPL56WfxsooCITeePG4P/7R3L0JUlTAlJP3yH0=
Subject key identifier: 5B:29:D1:CD:04:1E:15:1B:95:16:E4:AE:0E:C8:3C:F8:30:D6:D8:23
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802D5815BFBAD35792F14F9393E656A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WynRzQQeFRuVFuSuDsg8-DDW2CM.roa
Signing time: Tue 02 Jan 2024 02:31:18 +0000
ROA not before: Tue 02 Jan 2024 02:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 193.235.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 15:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d5:81:5b:fb:ad:35:79:2f:14:f9:39:3e:65:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b29d1cd041e151b9516e4ae0ec83cf830d6d823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:a1:0b:45:3e:3e:40:71:d9:b7:6a:1b:0c:
10:35:4c:e0:0f:62:11:a4:0a:b3:17:85:1e:70:96:
fb:a9:67:5e:f3:5d:a5:b6:b0:71:7f:02:bf:38:17:
62:78:45:cc:91:75:21:c1:22:b6:a3:6e:29:5b:f4:
0e:e0:14:e3:88:82:80:f0:e2:ae:d8:ba:ca:0f:ba:
7c:99:9c:d4:50:dc:1c:30:1f:4a:01:7b:2a:65:d1:
b6:b3:90:88:fa:55:d7:89:8f:a5:db:3f:f7:b0:e8:
5e:5c:ec:11:41:06:36:7e:74:61:16:1a:39:03:79:
89:d7:29:ed:57:05:19:07:ce:4e:a9:ca:4e:1a:c9:
4c:63:ed:9d:e3:0b:c2:6a:2a:e7:9c:d1:58:84:c2:
60:b4:1c:27:fd:20:54:eb:b5:d9:a6:41:6e:09:67:
ec:3f:28:33:e2:80:24:e5:8c:14:f9:ab:0a:39:a8:
b6:5d:bb:52:e9:9d:b7:4c:e8:ef:f8:5e:5a:42:1a:
fe:c4:71:99:d5:42:a1:0c:1b:19:b5:2b:0a:c5:b0:
a1:64:60:6e:3f:87:9d:3f:9c:4f:88:80:82:91:ce:
14:41:5e:5b:3d:f8:79:37:c6:ed:65:39:c1:d5:8d:
cc:c7:b7:ad:5b:3d:6c:1f:10:de:e7:6c:1b:92:94:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:29:D1:CD:04:1E:15:1B:95:16:E4:AE:0E:C8:3C:F8:30:D6:D8:23
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WynRzQQeFRuVFuSuDsg8-DDW2CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d1:89:69:95:92:59:0b:7b:54:7d:83:a7:6a:87:28:56:76:
41:dd:bf:cb:52:d6:6d:78:e6:6b:a9:71:bf:0f:90:d6:ea:ec:
9d:e8:79:cf:f1:9b:2c:12:d7:cd:18:c4:9e:4c:0f:57:04:b8:
5a:d4:09:9a:b9:cf:db:15:71:97:8c:cf:5f:bf:6e:17:f8:62:
46:a1:9d:b5:30:b3:dd:50:b9:9a:d5:08:85:54:c6:77:97:fe:
7b:c9:eb:e8:e7:30:95:13:25:e7:52:60:dc:f1:61:ad:95:65:
70:9a:d9:f8:44:85:39:29:40:32:11:18:e9:9a:58:a9:05:3e:
22:9e:7a:12:f4:58:6f:bf:68:24:9c:4e:4a:4f:d2:c1:f0:a8:
b8:b1:7e:e8:23:05:c5:a9:ea:0e:70:41:1a:e0:58:7c:40:6e:
a6:34:a4:d9:53:ff:2a:4b:97:7e:b6:50:92:a3:fc:78:3f:a9:
32:19:0b:e3:87:92:fd:84:63:0b:4d:9e:91:95:1f:e4:ab:64:
7c:64:2f:98:b3:a0:f8:19:b3:d0:24:8c:df:27:4e:61:6f:2f:
4b:49:c7:d5:22:d5:ff:98:6d:ff:bf:13:dd:ba:51:79:33:02:
d6:bd:bf:9a:83:ba:d7:59:25:93:73:08:3b:17:c2:22:70:77:
81:62:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:49:28 2024 by rpki-client on console-ams.rpki-client.org