Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/wpzhLYSLIiyTZU1eCqovEDJW3Ag.roa
File: wpzhLYSLIiyTZU1eCqovEDJW3Ag.roa (raw, json)
Hash identifier: x8HiFUyE2v/sxJXzYPO50zd8RB5dMWw/e0ed+eq7knw=
Subject key identifier: C2:9C:E1:2D:84:8B:22:2C:93:65:4D:5E:0A:AA:2F:10:32:56:DC:08
Certificate issuer: /CN=5ff283110661a59dbf225d03380acc0838474e56
Certificate serial: 018CC501245ADD92ECFA2757CC9C277FD261
Authority key identifier: 5F:F2:83:11:06:61:A5:9D:BF:22:5D:03:38:0A:CC:08:38:47:4E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_KDEQZhpZ2_Il0DOArMCDhHTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/wpzhLYSLIiyTZU1eCqovEDJW3Ag.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42252
IP address blocks: 77.72.56.0/21 maxlen: 21
91.194.214.0/23 maxlen: 23
91.194.240.0/23 maxlen: 23
2a00:1778::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/X_KDEQZhpZ2_Il0DOArMCDhHTlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/X_KDEQZhpZ2_Il0DOArMCDhHTlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_KDEQZhpZ2_Il0DOArMCDhHTlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:24:5a:dd:92:ec:fa:27:57:cc:9c:27:7f:d2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff283110661a59dbf225d03380acc0838474e56
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c29ce12d848b222c93654d5e0aaa2f103256dc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:46:48:91:73:87:72:82:fe:c3:6f:06:17:
82:a7:0c:3a:75:ff:83:f2:35:8d:db:78:ed:75:51:
39:51:3d:b3:ef:e6:91:28:74:53:ee:68:6f:31:79:
ac:6b:f0:74:91:88:64:b2:46:e8:c4:7d:27:9b:35:
84:3d:f9:2e:72:97:91:19:a5:33:4e:09:48:b8:30:
57:46:d2:42:41:b9:79:c4:69:30:5a:55:58:23:a9:
a0:2a:7f:17:16:b5:5e:18:d5:98:33:0c:44:15:06:
9e:32:3e:e1:0e:b3:00:12:cc:49:ef:34:33:d4:6f:
96:79:a1:94:08:29:48:98:f5:a1:36:ba:48:4b:cb:
b1:e3:b9:18:03:0b:6f:82:98:87:fa:90:4c:83:2c:
72:eb:fa:fb:18:22:bc:0c:a5:75:20:1c:84:f7:cc:
ba:2c:13:ae:de:d0:1f:4b:c8:96:bb:42:ed:e0:f9:
df:b7:f0:18:f3:3c:d8:32:62:10:34:8d:0d:a6:78:
7c:b2:cd:3f:fd:b3:9f:d3:69:78:41:78:b6:48:84:
0c:e2:09:fd:32:a8:b4:a4:76:21:4d:52:81:5a:6e:
3e:4d:ad:17:94:e2:ef:f6:0e:bc:96:fa:ed:3d:b1:
43:0f:ee:69:18:90:07:ba:29:93:3a:21:63:0a:fe:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:E1:2D:84:8B:22:2C:93:65:4D:5E:0A:AA:2F:10:32:56:DC:08
X509v3 Authority Key Identifier:
keyid:5F:F2:83:11:06:61:A5:9D:BF:22:5D:03:38:0A:CC:08:38:47:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_KDEQZhpZ2_Il0DOArMCDhHTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/wpzhLYSLIiyTZU1eCqovEDJW3Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/X_KDEQZhpZ2_Il0DOArMCDhHTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.56.0/21
91.194.214.0/23
91.194.240.0/23
IPv6:
2a00:1778::/32
Signature Algorithm: sha256WithRSAEncryption
42:5b:8b:bd:3f:96:27:c2:d2:62:70:a6:2e:de:bb:f2:b2:bf:
14:da:fe:94:17:df:81:cb:8e:bd:79:16:fc:f6:a5:fa:ad:35:
09:e4:b7:7a:54:a6:4d:73:ca:4c:b5:8a:82:56:95:71:b2:f1:
e4:9e:92:4c:39:66:00:d3:be:56:b1:68:ed:7e:ce:bd:f1:5e:
6e:60:08:7f:75:66:2d:34:ae:41:85:5a:70:9e:2e:2e:f6:fa:
e2:23:f9:98:d8:da:c5:98:cd:ca:51:47:fc:6f:71:ca:ea:5a:
09:ad:e5:0f:c5:d3:fc:4a:de:dc:69:41:35:38:50:4d:0b:f0:
5a:ec:4d:f4:61:d6:6a:05:cb:7f:ce:75:41:88:70:a2:b8:65:
d9:fb:40:db:67:03:0f:bb:44:96:8c:1e:e9:9c:5f:27:09:21:
c3:4f:22:15:7d:56:42:20:cb:a0:96:98:09:fe:57:e6:5d:08:
e9:a7:10:11:70:39:43:33:7b:50:db:26:58:06:59:07:c6:3f:
a1:83:c4:b4:fd:71:4d:26:f1:32:29:f5:da:06:19:35:3b:d6:
62:af:f8:a6:8f:73:9c:44:31:67:99:50:5a:88:69:e9:d3:ad:
42:c8:3e:ad:ca:28:78:4b:29:11:75:95:dc:14:4e:af:9d:6a:
a6:40:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 15:26:17 2024 by rpki-client on console-fra.rpki-client.org