Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/WGq86xwiEGaE98ArQCdnF2jRLa4.roa
File: WGq86xwiEGaE98ArQCdnF2jRLa4.roa (raw, json)
Hash identifier: 1uv7iDzXZccCB2HkJUdKHPLp85cYmO6jG4gzf8PvtmU=
Subject key identifier: 58:6A:BC:EB:1C:22:10:66:84:F7:C0:2B:40:27:67:17:68:D1:2D:AE
Certificate issuer: /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial: 018CC8DE37ABCD61401B0E675278E1DF3B82
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/WGq86xwiEGaE98ArQCdnF2jRLa4.roa
Signing time: Tue 02 Jan 2024 06:30:55 +0000
ROA not before: Tue 02 Jan 2024 06:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207945
IP address blocks: 78.156.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:37:ab:cd:61:40:1b:0e:67:52:78:e1:df:3b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Validity
Not Before: Jan 2 06:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=586abceb1c22106684f7c02b4027671768d12dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:47:53:a9:c0:be:ea:0d:06:61:0d:e7:fe:
bf:ab:0c:9b:57:f9:b5:35:c1:ea:13:f1:c5:57:bc:
20:cb:33:b8:bf:fe:05:41:25:27:20:49:2f:f3:01:
e4:4a:58:18:06:18:44:b3:43:2e:e9:3a:8b:48:9d:
eb:20:ba:d4:aa:ed:c1:d2:49:5c:b5:10:38:fc:23:
9e:4b:c6:54:9b:f0:50:90:9e:64:d2:fd:71:57:83:
6e:91:4b:14:8d:54:03:91:78:04:04:c7:41:fd:e0:
73:f5:81:ff:2a:7e:e9:d8:3e:55:e2:1b:eb:d2:bf:
8e:42:2a:74:2f:c9:cc:49:01:6a:b4:29:34:d2:e9:
f6:ed:cd:dd:46:9f:11:da:2c:f6:78:68:70:f9:13:
9c:c4:78:04:36:02:cc:61:59:5f:2a:c7:5d:e3:40:
e7:8f:9b:8e:2e:8f:3b:f9:05:ad:5d:60:a7:52:ea:
ec:e0:7d:eb:95:f2:0d:a1:6c:18:9f:92:07:f6:e0:
54:56:b5:b0:84:9b:13:f6:4d:6e:b0:a1:4c:bc:4a:
22:b2:ae:e5:c8:9f:dd:8a:10:d0:e4:07:fa:4d:2b:
c7:9a:29:02:ef:2d:6f:38:d2:20:2c:0b:08:94:80:
a4:c5:47:ce:3d:ad:78:fa:ac:d1:ba:47:2b:66:80:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6A:BC:EB:1C:22:10:66:84:F7:C0:2B:40:27:67:17:68:D1:2D:AE
X509v3 Authority Key Identifier:
keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/WGq86xwiEGaE98ArQCdnF2jRLa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.156.140.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4e:0b:22:90:b8:ac:37:67:12:a0:e4:6d:96:d3:1f:8d:74:
70:f7:30:23:ff:4c:69:7a:fa:6a:b6:63:5e:7b:4b:f4:05:49:
f6:40:fa:6b:3f:8d:fe:4f:96:92:d2:4b:c2:c2:f5:ea:ea:00:
da:c7:f5:69:73:3f:30:53:4e:30:f2:80:8d:ff:62:24:82:20:
53:0c:64:89:61:23:39:ad:ff:c8:2e:2b:f9:96:d1:9f:5b:bb:
0d:46:f1:bd:db:8a:24:b4:7e:3a:bc:14:04:2f:02:7f:a6:1e:
2f:94:31:fc:4e:1b:68:e3:3e:95:24:97:a6:42:7f:4d:5a:a5:
93:67:66:8c:a7:ef:87:dc:75:34:9c:15:5d:c5:6a:47:ee:07:
96:9a:9e:b1:61:c2:2e:02:88:4a:c9:e2:79:61:c4:fe:fa:58:
cd:8c:c7:39:ee:c0:ee:79:05:5c:c0:ca:f6:59:74:fa:d3:63:
89:96:36:31:58:86:03:70:83:65:10:e2:f9:c1:4f:7f:e9:6e:
79:88:69:02:19:fe:ec:09:17:1b:53:18:86:c9:b8:73:79:ef:
7e:37:6f:37:de:d9:46:ec:36:0d:ab:4d:01:4c:50:48:40:07:
3e:de:04:cd:4e:ab:41:25:2e:e8:79:87:61:ce:12:85:47:77:
a6:0c:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:49:04 2024 by rpki-client on console-fra.rpki-client.org