Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/Wi2IQSaeGcWj_EX-KPGgqSZaF0g.roa
File: Wi2IQSaeGcWj_EX-KPGgqSZaF0g.roa (raw, json)
Hash identifier: iia64R5Vu73DUpnIMzID3uTPUUSs2z7q8lhKfEgLd8I=
Subject key identifier: 5A:2D:88:41:26:9E:19:C5:A3:FC:45:FE:28:F1:A0:A9:26:5A:17:48
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 018CC5001C6A253113CB24A1EF55915ED29F
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/Wi2IQSaeGcWj_EX-KPGgqSZaF0g.roa
Signing time: Mon 01 Jan 2024 12:29:27 +0000
ROA not before: Mon 01 Jan 2024 12:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 109.232.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1c:6a:25:31:13:cb:24:a1:ef:55:91:5e:d2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a2d8841269e19c5a3fc45fe28f1a0a9265a1748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:8f:d4:77:79:15:71:0a:ec:e5:8f:30:da:
08:e3:38:57:cf:95:92:0a:9d:a8:9b:41:93:ff:a2:
69:94:9c:98:94:b3:7c:59:e9:03:f3:ec:18:dc:d5:
61:44:74:f1:bd:c5:eb:a3:89:c0:18:6e:ab:9a:11:
f7:1a:5e:0b:21:cf:ba:69:dd:8d:1b:02:2f:8c:7b:
05:92:f0:ac:4b:68:7e:28:da:43:67:43:05:ed:4f:
10:87:04:42:3c:12:04:dd:ab:66:e3:95:9e:3d:f7:
8b:9a:d9:23:aa:4a:2e:ff:be:c0:7f:0c:71:11:77:
ca:06:d4:df:c3:7b:58:52:a2:39:bc:49:42:8a:b8:
c3:25:8b:17:a3:7b:8a:c8:18:b6:ed:b8:4b:0a:09:
c0:b2:6c:93:16:d2:28:13:f3:1b:e4:8b:f0:46:38:
96:61:87:e2:62:7b:36:eb:29:17:62:27:a5:05:71:
b2:3e:de:f5:a5:b2:d9:b0:85:11:58:81:b1:ac:6a:
45:cc:40:55:cc:2d:11:0f:4e:f1:17:0a:e2:3d:8a:
15:43:f2:fb:f9:25:3b:18:71:8f:9b:af:cc:f4:06:
05:0d:05:47:ef:1b:8c:b7:2e:93:cd:0e:cc:99:6d:
6c:1f:e0:9f:68:e5:d4:ce:7a:73:14:86:1c:d9:1c:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2D:88:41:26:9E:19:C5:A3:FC:45:FE:28:F1:A0:A9:26:5A:17:48
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/Wi2IQSaeGcWj_EX-KPGgqSZaF0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.88.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:25:e6:61:6f:7a:b3:b5:d8:8e:8d:0a:5e:bb:c0:1e:9f:fc:
33:46:19:fb:56:44:43:e4:49:7a:da:0c:bc:4f:e4:0a:f0:06:
dd:f3:88:3c:95:be:6d:a9:ef:6d:3a:b6:01:81:97:4e:ec:06:
a4:08:03:7a:9b:9f:51:d5:26:47:a4:c0:de:3f:43:54:ed:c2:
a2:3a:6d:6d:45:5a:9f:91:ad:0c:85:c0:f3:96:c1:2a:82:da:
46:ee:c7:72:2d:11:94:4c:b2:1c:95:3d:25:1e:1d:f5:6d:4c:
46:9c:31:7b:d3:8b:24:5f:33:b1:7e:1b:b0:11:36:f9:2d:d1:
7b:aa:65:a2:e5:64:b4:70:ce:2d:9f:1b:01:84:aa:5d:5f:04:
48:34:9c:da:ad:1e:18:ce:7f:07:45:67:cc:1f:a3:c3:f6:7d:
da:92:f8:e6:89:d1:95:71:5f:06:9e:88:e3:18:e1:7c:d4:0d:
8c:cf:2b:12:50:6b:36:da:f1:b6:fa:4b:07:75:d0:b1:67:b0:
32:c3:b5:7d:d8:9c:dc:93:7d:4b:a6:ed:6e:3e:6c:dc:33:f9:
41:86:ce:04:24:b4:72:e0:b5:17:94:b4:2d:b1:48:5d:4f:12:
14:4c:33:ab:07:cf:24:e5:16:84:1b:8d:88:46:53:14:bb:2f:
27:06:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:11:52 2024 by rpki-client on console-ams.rpki-client.org