Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/Wnfkj7p3NrGARhce5_993HVvb4c.roa
File: Wnfkj7p3NrGARhce5_993HVvb4c.roa (raw, json)
Hash identifier: kqeV8vl+ieXCZpj6W25sQWhRcg8ltxtiNpsP0Iahibk=
Subject key identifier: 5A:77:E4:8F:BA:77:36:B1:80:46:17:1E:E7:FF:7D:DC:75:6F:6F:87
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 0192282CF81913504412068E121894EA6BCA
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/Wnfkj7p3NrGARhce5_993HVvb4c.roa
Signing time: Wed 25 Sep 2024 07:54:48 +0000
ROA not before: Wed 25 Sep 2024 07:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51248
IP address blocks: 91.209.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:2c:f8:19:13:50:44:12:06:8e:12:18:94:ea:6b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Sep 25 07:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a77e48fba7736b18046171ee7ff7ddc756f6f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:db:28:bc:42:cc:d5:fd:f9:91:7d:95:1a:
07:e6:93:be:f8:19:0a:99:5c:69:fa:f2:62:01:f0:
dc:04:df:05:85:d9:fc:d0:ea:17:61:79:9c:22:d4:
8d:77:d5:31:c6:f4:a3:a5:d7:6d:a3:8f:9e:e3:50:
79:b3:0c:82:e8:e1:cf:f2:e0:5a:54:c1:e4:a2:30:
0c:6c:c2:39:ed:d5:ac:2b:70:78:e2:50:32:81:4b:
fd:06:c0:63:4e:c8:8f:bc:11:a4:ef:8e:27:da:54:
7c:00:f0:49:e0:7c:2b:16:cf:54:06:47:ca:5e:11:
f2:1a:df:c4:2e:79:98:3a:ff:b6:0e:46:0b:c1:53:
8b:48:78:13:cc:fe:1f:00:ef:e2:11:ff:1a:2d:3a:
ac:36:21:9f:14:2f:e4:d1:c4:dd:03:a2:e9:5f:26:
f9:1a:8b:ad:e9:d5:05:8c:be:6e:03:e3:88:f5:de:
c8:54:bf:da:11:6e:bd:ca:77:7f:ad:2d:ce:38:03:
c9:92:3e:ae:9b:9d:2a:4d:f1:41:f4:9c:59:54:e7:
cf:55:84:d5:48:de:ac:b3:15:fd:7d:37:5e:81:25:
5d:4b:25:81:e0:c2:5e:b9:a1:b9:07:2c:83:69:25:
45:6c:a3:09:22:07:92:30:bd:27:dd:c4:04:27:6d:
67:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:E4:8F:BA:77:36:B1:80:46:17:1E:E7:FF:7D:DC:75:6F:6F:87
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/Wnfkj7p3NrGARhce5_993HVvb4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.77.0/24
Signature Algorithm: sha256WithRSAEncryption
82:a4:7e:f6:cd:c0:b7:40:96:bd:5d:de:d7:a0:4f:38:2f:5f:
66:9e:40:ec:ed:d6:ec:40:5e:32:fa:11:f7:b3:9e:5d:71:d5:
2b:ba:39:f5:06:05:77:f9:3e:55:e9:56:bb:c3:7d:7f:ac:7b:
6c:7c:ba:97:13:33:db:19:d0:0a:77:40:ac:64:b8:a4:c0:a7:
10:a4:d9:8b:20:56:67:4e:e0:c4:2a:e6:7c:b9:aa:76:05:23:
fb:cb:6f:a7:49:3f:b9:0f:32:35:78:7f:0c:a8:5e:34:6a:7e:
fd:f4:5f:31:ad:cd:90:83:d9:d6:1e:6e:a6:57:6d:ee:34:f7:
6d:8f:7e:6b:a9:7c:b4:03:94:81:a9:62:0a:bb:23:b3:ca:c0:
cd:ea:d6:85:27:94:9e:5e:92:ec:1c:f3:85:97:bf:7b:6c:0d:
d3:27:62:39:8b:65:8d:3e:f5:a2:d7:9d:3a:1f:66:2a:08:2a:
73:78:3b:47:81:3a:cb:4c:e1:79:1d:ee:a2:a1:e8:b1:92:90:
fc:7f:03:4d:9f:58:48:73:18:ec:01:60:27:93:e6:51:09:cb:
8c:ae:43:8d:05:7c:2e:48:99:ec:3f:a6:b9:33:0a:24:10:be:
b5:60:d7:e2:c3:1e:d4:d5:c8:95:16:d4:ec:9a:9a:a2:af:49:
f8:9f:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:35:16 2024 by rpki-client on console-ams.rpki-client.org