Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/WvUB5CS69G-AaEDOMEhnhYoxFy8.roa
File: WvUB5CS69G-AaEDOMEhnhYoxFy8.roa (raw, json)
Hash identifier: f0nrBauVDmFlSyvR50MrEqyeNj2Xs5A+zEYK39z1W+w=
Subject key identifier: 5A:F5:01:E4:24:BA:F4:6F:80:68:40:CE:30:48:67:85:8A:31:17:2F
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 018CC3489094665801A548B0AE5544F3DDFB
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/WvUB5CS69G-AaEDOMEhnhYoxFy8.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59601
IP address blocks: 94.124.204.0/23 maxlen: 24
2a0d:bd87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:90:94:66:58:01:a5:48:b0:ae:55:44:f3:dd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5af501e424baf46f806840ce304867858a31172f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:7d:13:e9:96:a9:a9:5a:90:97:7b:82:53:
46:38:6e:c1:da:02:8f:cb:8f:c9:53:c8:84:8e:e7:
c4:92:ca:57:9b:10:70:72:0f:46:c6:bd:ff:7e:97:
73:4a:47:0e:ce:f1:55:d7:a3:60:3d:5b:86:5e:55:
5c:bd:54:58:22:93:18:60:67:bb:7e:35:4a:6b:07:
7b:5b:59:40:80:62:96:dc:42:cb:08:2b:63:95:1c:
93:05:04:ab:2f:4a:3d:1f:46:cb:3e:a8:03:0a:e8:
67:21:20:a0:43:dc:a3:23:62:e0:39:06:f9:a6:26:
a8:34:17:bf:80:8e:1d:72:2d:89:6a:e8:1b:ce:a1:
4d:8a:b1:a6:3e:15:dc:b3:02:97:70:80:a7:74:dd:
60:d7:a9:f1:07:d3:cd:df:74:b4:27:c5:fc:ec:96:
40:57:22:81:af:d6:29:53:0d:42:6e:17:42:a2:05:
23:6e:50:d6:d4:10:42:09:7b:bc:ac:91:b5:9a:0d:
da:e3:64:8e:75:d0:16:1b:71:c1:54:25:51:62:cb:
68:f3:b0:d3:75:db:89:02:2b:fe:c9:5e:97:46:b3:
08:3b:95:79:1d:99:6b:6c:e0:be:64:fc:10:da:53:
3f:0e:0f:6c:7b:92:c2:25:33:7c:dd:54:96:9b:18:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:01:E4:24:BA:F4:6F:80:68:40:CE:30:48:67:85:8A:31:17:2F
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/WvUB5CS69G-AaEDOMEhnhYoxFy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.204.0/23
IPv6:
2a0d:bd87::/32
Signature Algorithm: sha256WithRSAEncryption
56:e8:fb:5a:02:1c:ae:cc:00:31:d1:57:70:e7:09:af:14:26:
e7:1a:b9:bc:48:78:51:df:82:b0:04:e2:c8:13:5c:fc:07:f6:
9e:a9:1d:2f:2e:ab:1a:b2:f9:db:66:7d:a3:ed:7a:22:ed:95:
d6:1a:76:0a:cf:c2:e0:d7:6b:d0:f4:a2:ec:37:8f:df:de:2c:
fe:0f:e7:05:3d:a1:c7:6e:2f:c2:61:d3:8c:e5:ca:f7:9c:db:
40:ef:d7:51:60:b4:48:f3:d5:a5:45:98:ce:51:81:5a:53:34:
4e:9e:ba:19:c5:b1:4f:11:53:8f:93:f2:18:31:c6:2a:a2:4f:
8f:79:25:d6:9c:b8:68:3d:d1:ce:7f:5d:e8:99:7d:62:f4:77:
0f:0a:4b:70:d6:d9:5d:bd:90:e7:50:ce:12:17:ee:6d:78:6c:
1a:46:af:5d:10:f0:58:30:a8:d0:b5:28:69:0e:fb:e3:82:ee:
a7:8c:08:b7:d0:66:dc:2c:59:18:da:9c:59:05:2d:43:1b:b7:
69:fa:c3:36:12:37:23:44:3e:14:55:f8:07:5d:82:a6:d1:53:
d1:9f:71:a6:97:87:ed:15:b5:0f:a6:3f:40:3e:d8:23:07:94:
fe:c4:6e:d8:ae:03:92:b8:05:ff:07:4c:9a:d3:cb:19:8a:37:
b6:2d:db:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:07:56 2024 by rpki-client on console-fra.rpki-client.org