Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/WyaTch93nnuUdKJN676HRr095bU.roa
File: WyaTch93nnuUdKJN676HRr095bU.roa (raw, json)
Hash identifier: Lq0svvJRjDqd0Lj2Bse0EnlI2MLeVnRy4c6hCJasXu0=
Subject key identifier: 5B:26:93:72:1F:77:9E:7B:94:74:A2:4D:EB:BE:87:46:BD:3D:E5:B5
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018CC348C282626F494A5C5AF15410823BC7
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/WyaTch93nnuUdKJN676HRr095bU.roa
Signing time: Mon 01 Jan 2024 04:29:34 +0000
ROA not before: Mon 01 Jan 2024 04:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39364
IP address blocks: 5.202.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c2:82:62:6f:49:4a:5c:5a:f1:54:10:82:3b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b2693721f779e7b9474a24debbe8746bd3de5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:ab:5d:67:55:bc:d2:2e:fa:3f:74:58:ff:
10:8a:c8:62:d7:41:8b:9f:66:8f:c2:12:55:06:68:
a3:94:b5:43:91:a0:33:b5:58:e1:8e:d9:46:ae:b6:
95:4d:2c:54:6b:49:bf:da:80:20:93:43:bd:b1:0b:
e3:d3:2b:1c:13:14:1b:39:3d:ca:aa:7b:bd:25:e6:
e0:cb:35:ea:27:57:65:b2:c3:8d:df:e5:f1:c3:a6:
27:b1:5f:a2:38:7b:d6:cb:89:0e:ca:b9:5e:90:65:
6c:5b:e8:f5:f3:a8:ba:ce:6b:bd:3f:19:21:bb:96:
89:0b:c0:ff:17:c3:32:c9:99:eb:ed:a1:1e:17:42:
01:60:f5:19:23:3d:ba:03:92:ac:fd:58:cd:83:04:
43:8b:3e:89:52:10:37:87:ed:e6:be:54:1b:24:8c:
ca:27:67:56:4c:5a:21:cf:5d:31:84:80:c7:03:ee:
05:99:c1:80:b6:08:15:72:7c:9e:4e:f8:dd:3c:bd:
36:2a:a6:19:ed:ce:95:af:6c:87:e8:ba:33:ab:69:
13:97:0a:c4:62:db:ee:90:8f:f5:6f:19:22:1c:40:
fa:cd:45:97:33:0c:42:fb:51:8d:99:6f:9f:f5:66:
c0:30:89:49:ff:44:61:94:28:d9:50:4d:62:a3:84:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:26:93:72:1F:77:9E:7B:94:74:A2:4D:EB:BE:87:46:BD:3D:E5:B5
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/WyaTch93nnuUdKJN676HRr095bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.44.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:e2:c4:e1:f7:cc:f2:ea:27:a8:d4:2a:fe:59:23:34:4b:d1:
d2:41:40:67:96:07:96:b3:b8:e1:90:9b:41:25:b2:bb:2d:c5:
c9:29:16:0f:af:d0:4a:7e:c2:2f:72:7c:6e:8c:73:96:21:26:
22:ed:a8:48:9c:20:1a:1e:ac:d8:35:ba:c5:d7:79:04:74:9d:
44:66:20:a9:29:c5:3d:af:30:89:c1:85:33:d1:5c:d1:65:a3:
8e:84:17:d6:81:e5:be:67:fe:d4:a8:b5:44:3e:d1:c7:71:09:
bf:09:33:fa:c2:f0:48:17:28:6d:ee:85:ee:c5:7c:b0:a7:bd:
c2:69:59:68:e0:7c:30:48:f2:23:e8:2c:b6:b4:fe:66:0d:09:
65:fc:cd:3f:d9:48:34:a3:c4:e0:ff:b9:14:c8:bb:b6:c6:0e:
fb:8d:e4:ae:f9:a7:8e:fe:34:4f:f0:c5:79:1e:5d:b3:f9:cc:
f0:3d:db:08:d8:0a:c0:c2:98:fe:03:d0:65:c4:c3:da:5f:fc:
46:e1:cb:7c:bb:c5:db:ef:7f:51:aa:db:c1:f3:04:93:65:9d:
73:6e:16:2e:f4:a7:fe:26:bb:32:d6:03:8e:a3:90:45:21:1c:
d5:c9:e6:2c:f6:c9:a7:20:e9:5f:d6:99:b0:3f:25:32:b6:69:
54:75:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 08:38:24 2024 by rpki-client on console-fra.rpki-client.org