Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/WzNFl30SpTGro4t1aTCIojupjOk.roa
File: WzNFl30SpTGro4t1aTCIojupjOk.roa (raw, json)
Hash identifier: igNH8Jfb+KjGNL+hvMQ+ENVPWn2UsTTD7oMm+mKGLjQ=
Subject key identifier: 5B:33:45:97:7D:12:A5:31:AB:A3:8B:75:69:30:88:A2:3B:A9:8C:E9
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018D78F0AE7D0F80329329AE058BC89D7F85
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/WzNFl30SpTGro4t1aTCIojupjOk.roa
Signing time: Mon 05 Feb 2024 11:04:15 +0000
ROA not before: Mon 05 Feb 2024 11:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215579
IP address blocks: 152.89.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:f0:ae:7d:0f:80:32:93:29:ae:05:8b:c8:9d:7f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Feb 5 11:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b3345977d12a531aba38b75693088a23ba98ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:15:56:7a:7f:c8:48:29:9b:30:33:de:d2:d5:
c0:58:2c:d1:c6:bb:cb:58:fa:4a:2d:1f:14:08:3f:
92:67:ce:56:8a:d6:4c:81:ee:1d:18:f1:e5:31:10:
f5:27:32:56:5d:0c:6f:53:5b:2e:9c:a1:65:ad:aa:
34:e1:75:e3:01:4e:8c:1d:46:6f:49:41:60:23:14:
9b:08:ec:94:a5:a0:a7:cd:0d:9b:0a:35:4d:9d:05:
80:ae:8b:b7:33:2b:67:9d:fa:4a:d0:94:83:d9:48:
d5:04:82:4b:fe:ff:af:3d:b0:1d:1d:4c:0a:05:d9:
fa:3b:d6:da:5c:d7:ac:db:ec:62:d6:42:16:34:bf:
cb:45:f2:2c:53:82:87:97:c1:21:b5:b5:af:e4:b0:
13:6a:de:7a:00:d8:8a:c0:87:fb:19:59:8b:5e:cb:
9a:7f:33:3a:6a:47:c9:35:3d:62:d5:2e:6f:8c:54:
8b:61:5f:2f:26:5d:b7:32:c1:7d:6f:e0:e5:75:19:
fa:14:d8:6e:4c:83:8d:1f:31:00:93:bf:c9:1d:92:
1b:7a:3e:02:e5:64:55:bf:9a:d7:74:cc:9d:4e:8d:
5c:51:96:9b:08:a3:5c:22:88:06:90:11:e2:1c:b2:
86:85:d3:e0:4b:36:9a:51:1f:bd:cd:42:55:2d:ee:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:45:97:7D:12:A5:31:AB:A3:8B:75:69:30:88:A2:3B:A9:8C:E9
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/WzNFl30SpTGro4t1aTCIojupjOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.195.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fe:2e:6b:dd:88:e2:74:c7:65:60:27:27:8d:64:4a:ee:91:
d4:5d:d5:7d:84:26:14:13:7b:56:08:ca:1f:aa:80:16:b5:b3:
d1:ed:bd:2a:26:4f:4f:51:ce:de:3c:06:7b:5d:ba:80:a5:58:
e2:aa:79:2f:0e:61:e3:1e:a5:f5:9a:06:8d:fb:c3:c2:a7:f6:
07:03:b5:0b:50:8d:42:be:31:c0:25:54:3a:70:cc:0d:78:f6:
8b:bb:9c:4f:4e:f1:29:df:00:57:9f:d2:12:f1:6b:f2:26:a9:
22:21:38:a1:28:da:f3:c6:bf:ca:7a:6b:40:d6:08:25:fd:23:
c4:cc:7b:1d:3a:fd:43:ec:33:9e:e9:c2:68:e3:e8:26:f7:18:
33:94:ac:b5:f3:ca:57:bd:e0:49:b0:50:b0:0e:b5:5a:66:e2:
6e:bb:7d:28:96:7d:8a:1d:4d:d5:c8:92:77:1c:22:35:2c:84:
85:25:a1:5d:c7:74:e4:9b:29:2f:6c:4a:5e:72:d3:9f:73:a4:
f2:d2:b4:b8:72:16:8f:9e:39:82:42:cd:53:cc:6e:ba:82:7c:
0b:4b:fa:bc:c9:5f:42:02:71:05:bc:0c:f1:79:26:52:58:36:
44:23:75:3e:28:df:e0:b3:4d:ce:7b:a9:bc:88:b7:00:7d:d6:
73:0b:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:50 2024 by rpki-client on console-ams.rpki-client.org