Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/wkfqRE_YiW8R8vpAnw7tkrbtBAM.roa
File: wkfqRE_YiW8R8vpAnw7tkrbtBAM.roa (raw, json)
Hash identifier: 9F4crFpUcdx/R6ooV/s2EMaAVwgvFKJAzJOWKP/3xPU=
Subject key identifier: C2:47:EA:44:4F:D8:89:6F:11:F2:FA:40:9F:0E:ED:92:B6:ED:04:03
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 018CC801125340AC1EF307594DFB0BCF1406
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/wkfqRE_YiW8R8vpAnw7tkrbtBAM.roa
Signing time: Tue 02 Jan 2024 02:29:22 +0000
ROA not before: Tue 02 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262182
IP address blocks: 89.32.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:12:53:40:ac:1e:f3:07:59:4d:fb:0b:cf:14:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c247ea444fd8896f11f2fa409f0eed92b6ed0403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7a:be:c3:da:cb:b0:cc:87:39:67:92:1b:f4:
c3:ff:84:7c:11:9c:7a:bb:fb:19:28:cd:0c:d5:32:
e8:ee:ed:db:9d:8c:08:a8:02:83:a3:73:7a:e5:1a:
ab:90:49:9f:ce:5c:53:ac:77:7f:7b:c0:dc:68:53:
fd:31:93:8d:d5:9a:4b:c0:b3:33:34:9a:10:0a:9a:
a1:fb:8d:84:66:51:03:d4:aa:a5:0a:cc:5b:9f:59:
f6:57:bb:1f:1f:66:80:8e:8d:9d:e3:c6:42:30:f0:
65:06:e2:1e:55:f7:72:9a:c1:43:8f:8c:52:31:32:
d5:07:dd:16:ff:84:71:1d:f6:da:83:b3:27:38:00:
f4:62:25:4f:f2:28:71:bc:b4:22:2a:40:ae:af:e0:
36:a3:32:97:4d:35:20:f9:a3:97:78:42:fd:bb:a6:
31:d9:45:5d:8d:d6:8a:e0:5e:38:db:60:60:3d:8c:
a6:27:b8:61:50:f4:08:a7:28:c2:ba:1e:73:f1:4d:
1a:94:95:92:42:3a:1d:85:b1:ae:a0:5e:21:ab:e0:
d8:ec:91:2a:38:04:02:84:88:40:f8:b3:47:cd:be:
f4:c0:76:b1:e8:9f:12:08:90:4d:9f:c8:63:12:24:
88:e8:bd:36:0b:8e:b3:12:e8:13:da:f6:cc:51:cc:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:47:EA:44:4F:D8:89:6F:11:F2:FA:40:9F:0E:ED:92:B6:ED:04:03
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/wkfqRE_YiW8R8vpAnw7tkrbtBAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.178.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8b:20:96:f8:fa:3a:92:b7:2e:12:82:16:87:c8:ff:62:ee:
c4:2b:34:b7:96:a0:73:dc:57:45:8b:51:a3:09:25:a0:0a:69:
ec:8b:61:4f:23:19:d7:ab:74:72:1c:e5:ea:5e:eb:35:40:fb:
98:c7:49:3a:72:c2:36:cb:30:02:8a:c1:59:19:db:24:cd:72:
73:44:98:22:39:b0:11:f8:31:da:a8:de:7f:15:af:73:4b:2d:
de:9f:b7:19:36:07:81:13:78:c1:1d:a3:c3:32:dc:a7:1a:80:
78:95:f3:d7:f8:8a:91:63:9a:ba:4f:70:62:be:ce:93:aa:31:
d3:03:03:1d:75:47:d0:59:05:8a:81:4a:8c:39:d7:10:48:fa:
af:2a:63:9d:df:9c:46:f4:40:36:b2:0e:06:fd:64:24:b9:f8:
67:25:32:9e:51:14:65:1a:5d:33:f8:ae:47:09:75:bc:5f:69:
69:2c:e8:ab:b0:29:15:e1:f1:89:3b:c4:29:41:ea:ea:ac:fd:
d8:ad:fc:8d:c6:75:fa:36:b6:f6:0e:fb:bc:6b:ba:9f:57:05:
32:25:d6:5d:30:47:21:43:93:74:b4:dd:ac:74:e1:24:19:ce:
ec:fb:69:ec:f3:49:2d:92:e4:ae:0a:98:7c:24:71:c1:f5:df:
d3:b8:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:44:56 2024 by rpki-client on console-ams.rpki-client.org