Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/wcs5NN_SHPxt1H_JpGPR-Zj-bUY.roa
File: wcs5NN_SHPxt1H_JpGPR-Zj-bUY.roa (raw, json)
Hash identifier: 7gVcuVy7ed/B+BVvMfO2/WcDANgVjIGy+SZ1FzaZbo8=
Subject key identifier: C1:CB:39:34:DF:D2:1C:FC:6D:D4:7F:C9:A4:63:D1:F9:98:FE:6D:46
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC42559699233FFCCD280E35AED8290C8
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/wcs5NN_SHPxt1H_JpGPR-Zj-bUY.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30475
IP address blocks: 178.218.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:59:69:92:33:ff:cc:d2:80:e3:5a:ed:82:90:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1cb3934dfd21cfc6dd47fc9a463d1f998fe6d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7a:49:a2:05:6d:b4:3e:d7:2c:79:38:38:33:
82:33:8a:78:5f:28:a8:d9:37:78:87:2c:ec:8d:a0:
08:1a:a6:87:c6:d5:46:cf:5b:ef:83:ef:75:60:d1:
99:11:5b:f5:79:d6:4c:7a:c9:f8:5c:a4:45:c9:51:
be:dd:24:18:e8:5f:c9:42:8b:12:42:43:57:5c:39:
a5:3e:af:c1:d8:6d:7b:8d:9e:19:66:12:63:cb:c3:
ed:0d:b6:b1:0a:29:e4:d6:a2:69:39:f5:08:12:07:
02:10:4b:4b:2e:ab:15:9c:1a:81:65:ec:05:9c:5a:
a1:43:ff:c1:a8:67:79:a9:ee:e2:15:23:5f:17:c3:
5f:64:f8:24:7f:a3:a4:52:2d:2e:c4:56:4e:9a:44:
fc:53:77:6a:fc:d7:ba:7d:38:72:6f:a7:23:46:64:
7d:62:4f:c6:6f:d4:08:18:ea:84:8b:8d:88:4c:00:
10:0f:d6:ef:b2:73:e0:2e:25:88:99:59:5b:5b:9e:
5b:98:92:b6:b4:c4:15:af:31:16:a3:86:80:ef:19:
95:52:70:cb:a8:ef:8e:13:d4:91:9d:7d:90:05:ff:
80:1b:d8:f9:f9:af:88:78:22:87:41:57:d9:22:22:
7b:b1:21:38:a5:bb:2d:93:02:54:20:1a:08:3c:78:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CB:39:34:DF:D2:1C:FC:6D:D4:7F:C9:A4:63:D1:F9:98:FE:6D:46
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/wcs5NN_SHPxt1H_JpGPR-Zj-bUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.146.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:38:7b:e9:c2:c7:f5:31:98:f5:3b:60:5a:9f:16:36:b1:de:
3e:96:57:60:77:f3:2c:ed:57:aa:30:19:0e:8e:21:d8:57:24:
f6:09:4b:19:d7:c3:6d:b7:c5:e7:d0:e0:98:ff:4d:14:17:33:
6b:07:9b:75:b9:e9:0c:22:5a:0a:1d:56:fc:54:b1:38:43:03:
f6:2a:7c:f1:67:33:1b:34:05:5f:eb:36:56:78:c8:8f:73:7c:
a0:f2:87:a7:d7:17:9f:18:fc:30:61:31:5c:b6:67:ad:d9:ce:
82:3f:b6:84:13:9b:cc:ca:66:b7:d1:0a:2c:90:68:3c:5b:4a:
80:65:97:ee:aa:04:69:64:b0:0b:73:39:51:45:e3:2c:7d:d0:
6e:37:9f:33:5f:63:f2:4c:63:26:b7:80:d7:df:d0:d3:ac:5f:
54:b9:7d:88:3b:1e:53:6a:d0:af:3e:32:e9:31:c8:93:f9:45:
03:95:d7:70:c3:15:77:6e:fc:87:8d:17:fe:ba:ac:0c:e7:3b:
21:bf:aa:43:e6:0b:1d:0c:2e:84:dc:7b:48:16:7f:91:68:cc:
d3:7c:11:5a:d3:ee:ed:60:81:a5:c2:cb:6e:df:59:aa:17:51:
fa:5e:07:66:3d:05:4d:58:08:6f:40:b7:a4:8e:dc:65:63:12:
45:78:08:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJVlpkjP/zNKA41rtgpDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQwMTAxMDgzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWNiMzkzNGRmZDIxY2ZjNmRkNDdmYzlhNDYzZDFmOTk4ZmU2ZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXpJogVttD7XLHk4ODOCM4p4Xyio
2Td4hyzsjaAIGqaHxtVGz1vvg+91YNGZEVv1edZMesn4XKRFyVG+3SQY6F/JQosS
QkNXXDmlPq/B2G17jZ4ZZhJjy8PtDbaxCink1qJpOfUIEgcCEEtLLqsVnBqBZewF
nFqhQ//BqGd5qe7iFSNfF8NfZPgkf6OkUi0uxFZOmkT8U3dq/Ne6fThyb6cjRmR9
Yk/Gb9QIGOqEi42ITAAQD9bvsnPgLiWImVlbW55bmJK2tMQVrzEWo4aA7xmVUnDL
qO+OE9SRnX2QBf+AG9j5+a+IeCKHQVfZIiJ7sSE4pbstkwJUIBoIPHh7NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHLOTTf0hz8bdR/yaRj0fmY/m1GMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvd2NzNU5OX1NIUHh0MUhfSnBHUFItWmotYlVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstqSMA0G
CSqGSIb3DQEBCwUAA4IBAQB6OHvpwsf1MZj1O2BanxY2sd4+lldgd/Ms7VeqMBkO
jiHYVyT2CUsZ18Ntt8Xn0OCY/00UFzNrB5t1uekMIloKHVb8VLE4QwP2KnzxZzMb
NAVf6zZWeMiPc3yg8oen1xefGPwwYTFctmet2c6CP7aEE5vMyma30QoskGg8W0qA
ZZfuqgRpZLALczlRReMsfdBuN58zX2PyTGMmt4DX39DTrF9UuX2IOx5TatCvPjLp
MciT+UUDlddwwxV3bvyHjRf+uqwM5zshv6pD5gsdDC6E3HtIFn+RaMzTfBFa0+7t
YIGlwstu31mqF1H6XgdmPQVNWAhvQLekjtxlYxJFeAhK
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:33:08 2024 by rpki-client on console-ams.rpki-client.org