Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/WYH5t_IDqHo4h-kLeWieLfGujP4.roa
File: WYH5t_IDqHo4h-kLeWieLfGujP4.roa (raw, json)
Hash identifier: 7y9JsWgXocfxA0wugurTOnM90yj7YzacfMhlmkasEeQ=
Subject key identifier: 59:81:F9:B7:F2:03:A8:7A:38:87:E9:0B:79:68:9E:2D:F1:AE:8C:FE
Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial: 018F57C5431ED58542DC5FA10600005ABDA6
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/WYH5t_IDqHo4h-kLeWieLfGujP4.roa
Signing time: Wed 08 May 2024 10:34:56 +0000
ROA not before: Wed 08 May 2024 10:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 95.128.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:c5:43:1e:d5:85:42:dc:5f:a1:06:00:00:5a:bd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Validity
Not Before: May 8 10:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5981f9b7f203a87a3887e90b79689e2df1ae8cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:8d:5e:a8:14:96:eb:2c:f0:2b:cd:63:30:
8f:fe:91:66:75:e8:4b:fa:32:1a:10:83:64:e1:f4:
56:74:03:74:eb:40:00:5a:7f:c0:b5:5b:60:c0:6b:
61:1e:bb:51:8f:37:cd:ac:ea:0b:bf:c6:3d:26:91:
75:df:0f:73:ed:29:c2:62:88:82:f2:92:3c:76:62:
e6:0b:1c:8e:2b:cf:9d:e5:ed:66:a5:4d:9a:0a:5c:
4b:51:de:64:b9:73:f6:9d:b6:d9:e9:5d:5b:02:7a:
14:b7:19:ce:a2:5a:cd:2c:2e:11:59:6a:2d:75:51:
2e:ae:a8:39:77:72:52:66:b3:13:38:95:21:d8:54:
5c:77:45:01:c0:fc:fc:1b:30:a4:00:e4:c8:88:71:
d6:52:39:05:e0:9d:b2:af:cf:59:c0:79:7b:32:fc:
b2:0b:07:45:00:6e:f1:68:a6:f2:50:e9:d7:7f:e3:
e0:db:25:a5:46:7f:bb:8a:40:1b:e4:2b:b0:38:79:
f9:cc:75:4f:cc:e8:6e:52:f0:9a:bb:df:31:71:03:
12:88:ed:fa:a0:89:04:ac:6a:07:2e:e9:3d:87:9a:
c0:92:24:c7:91:10:d0:9d:df:7c:f7:06:73:37:11:
14:98:b7:f3:bc:32:5b:9e:60:b1:7c:6c:7b:b7:ca:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:81:F9:B7:F2:03:A8:7A:38:87:E9:0B:79:68:9E:2D:F1:AE:8C:FE
X509v3 Authority Key Identifier:
keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/WYH5t_IDqHo4h-kLeWieLfGujP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.197.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d6:ea:bd:dd:88:c8:50:a5:f7:0e:47:eb:cc:34:74:f1:18:
e4:6f:24:f1:40:78:27:e1:0a:48:f7:04:98:5d:94:ed:4c:a4:
4c:71:a7:01:98:f7:14:8a:bb:43:c7:52:5d:cf:fe:b5:65:9a:
50:4d:9b:17:77:71:f2:be:42:e8:ba:5b:f2:ae:e9:ee:2e:e8:
25:4b:2c:0d:45:7c:23:f7:20:50:f2:c4:ca:5a:9d:56:4a:06:
d5:95:54:4d:ba:3c:57:bc:bd:43:bc:11:c0:0b:fc:b9:b9:61:
3f:2b:d4:35:3c:18:e1:88:5a:8a:03:0d:9b:18:0e:63:a1:a8:
ac:29:ef:cd:e5:39:02:ce:0e:89:0f:e4:c2:5b:ff:41:7d:11:
d8:21:a4:64:51:ca:00:77:1a:c9:33:e6:cd:c2:41:e2:54:5d:
21:4d:bb:f8:16:a3:b3:dc:0b:3e:55:03:c7:9f:5c:5f:12:2a:
96:9c:86:e8:47:a9:53:f3:7c:97:10:98:03:0c:c0:a2:d3:dd:
eb:c7:70:8d:e6:f2:a5:2e:56:a3:3d:01:b1:36:55:7b:18:a2:
3c:cc:70:84:59:f8:b3:08:23:1e:90:6f:2b:44:fd:f5:7e:09:
3f:1b:23:28:61:a1:90:d7:5a:f5:91:35:9c:bb:bd:93:b9:9c:
05:1f:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 07:57:50 2024 by rpki-client on console.sobornost.net