Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/Wn9BzW1rRoxcggvpXQjthajhz8U.roa
File: Wn9BzW1rRoxcggvpXQjthajhz8U.roa (raw, json)
Hash identifier: +RDJWWjKD3e+EnVyN1/7s2gSA8MmupbCWJ8I8qR+VFg=
Subject key identifier: 5A:7F:41:CD:6D:6B:46:8C:5C:82:0B:E9:5D:08:ED:85:A8:E1:CF:C5
Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial: 018CC94DDD39B45086B47EC68AAE7EE98FBA
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/Wn9BzW1rRoxcggvpXQjthajhz8U.roa
Signing time: Tue 02 Jan 2024 08:32:52 +0000
ROA not before: Tue 02 Jan 2024 08:32:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60610
IP address blocks: 45.13.152.0/24 maxlen: 24
45.13.153.0/24 maxlen: 24
45.13.154.0/24 maxlen: 24
45.13.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:dd:39:b4:50:86:b4:7e:c6:8a:ae:7e:e9:8f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Validity
Not Before: Jan 2 08:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a7f41cd6d6b468c5c820be95d08ed85a8e1cfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3c:73:87:a8:d7:d2:67:a2:f8:a2:70:90:f5:
bf:22:a1:75:57:bc:8a:c6:7e:a5:65:8f:30:14:d5:
68:37:a9:9a:a8:26:d3:0b:02:ba:12:70:28:7c:1b:
68:ec:23:72:32:cf:81:32:9b:c0:3c:01:81:35:2c:
e5:f4:8e:46:ff:c5:f2:7c:71:9e:a2:bd:3c:0a:36:
03:1c:45:29:a3:da:54:e2:bc:81:eb:61:23:48:62:
e3:a5:07:2e:ba:b0:ce:09:ec:e2:43:2e:af:07:be:
75:65:5f:9e:30:7f:6a:a6:6c:f5:df:95:59:c5:9d:
9c:77:31:0b:83:12:24:10:5d:19:60:56:a1:a7:eb:
4d:cd:5a:07:95:08:d6:59:fd:03:8b:bb:d4:23:79:
16:9b:92:a5:5e:65:89:b8:0f:e9:aa:48:db:7a:50:
a8:da:e2:42:02:1e:72:bb:5a:cc:37:51:e2:b7:6e:
4a:06:9e:1a:74:b6:b9:a3:af:d5:1d:ab:ec:e0:ec:
14:3d:e4:9a:f1:88:2d:87:39:2c:58:5f:ad:2a:03:
05:37:99:41:67:f3:b2:a1:8c:aa:7b:c7:b9:d1:be:
7f:b3:ef:38:f2:23:9b:4e:6c:ce:85:7f:c3:9d:75:
24:78:1c:ff:38:23:25:18:a4:33:96:2e:94:c2:13:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7F:41:CD:6D:6B:46:8C:5C:82:0B:E9:5D:08:ED:85:A8:E1:CF:C5
X509v3 Authority Key Identifier:
keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/Wn9BzW1rRoxcggvpXQjthajhz8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:b9:55:b5:2d:09:09:10:85:1b:3a:ec:b6:25:8c:28:ef:54:
87:89:0b:04:3e:1d:23:31:45:8f:02:10:71:50:e0:63:89:97:
4f:c4:d7:48:c5:75:a8:f6:df:83:d4:7f:87:51:62:f2:45:51:
fe:ea:2f:cf:78:f8:51:a5:1b:74:d5:c1:1a:00:c0:d1:50:83:
e6:27:74:49:f2:e2:1e:c7:0b:2a:98:e6:59:b4:97:3d:56:89:
33:3e:82:7a:33:17:bc:81:8a:3d:9a:91:b3:0c:c5:6d:4a:08:
fd:f7:f9:c1:ac:eb:5c:4e:f5:9c:5a:5d:1a:a8:49:0b:4d:43:
38:88:79:b6:51:9f:5a:2e:e7:8d:a6:82:81:27:bd:fe:d6:00:
d0:8e:8a:be:cd:5f:a5:43:8e:db:00:95:7f:3e:8a:17:e4:e9:
50:da:ce:41:05:76:3a:05:e0:e9:af:75:6a:e7:ed:cd:d7:8e:
a4:4b:e3:5e:b4:62:fc:02:17:aa:7e:96:7b:64:ca:10:0e:70:
08:79:87:ad:d2:5c:90:be:2e:1b:59:32:aa:ee:bb:32:d3:a8:
bf:ab:d1:12:77:b4:59:35:60:63:15:28:fa:46:6c:0e:fb:3c:
a5:6a:94:c5:d4:f8:d9:92:82:f0:24:ad:e1:82:86:5c:82:cb:
fc:9a:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:06:43 2024 by rpki-client on console-fra.rpki-client.org