Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/cwBil2_OTLVF3u04npsE75B0B9o.roa
File: cwBil2_OTLVF3u04npsE75B0B9o.roa (raw, json)
Hash identifier: TSO1iNEtrUb1SvEehyfQsvq695XbEilv8O+/6QYDGVc=
Subject key identifier: 73:00:62:97:6F:CE:4C:B5:45:DE:ED:38:9E:9B:04:EF:90:74:07:DA
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BCA09CC0EA441F9403CBFB09C4707A
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/cwBil2_OTLVF3u04npsE75B0B9o.roa
Signing time: Tue 02 Jan 2024 10:33:51 +0000
ROA not before: Tue 02 Jan 2024 10:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1133
IP address blocks: 145.90.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a0:9c:c0:ea:44:1f:94:03:cb:fb:09:c4:70:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=730062976fce4cb545deed389e9b04ef907407da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:c5:30:0e:84:85:73:b2:8b:d3:b8:a3:83:
4c:35:cf:c1:c6:02:a7:5d:32:8a:a8:55:ee:10:84:
55:42:d9:9d:37:38:ff:2f:1f:52:b4:c8:4c:2c:3b:
72:be:df:fb:99:82:ee:72:5e:05:d5:1e:9b:2a:6c:
09:77:c7:78:0e:10:48:ae:a0:21:03:80:bd:92:1c:
cf:c5:57:6f:cb:ed:96:67:ff:3e:53:f5:87:3e:f3:
fe:5e:93:0a:bb:7f:2b:61:80:ed:6d:fd:91:3e:bb:
83:50:4c:ac:cb:11:20:e6:b7:a0:d1:ec:bf:f6:87:
7e:30:72:06:3e:c4:8c:b5:b5:a3:c5:e0:00:68:23:
57:7e:83:39:97:86:08:a6:f4:88:97:e5:8f:be:82:
a3:88:64:de:c7:5b:2c:83:bb:bc:54:df:3a:00:84:
47:10:e7:b6:b0:b4:f2:6c:c0:42:76:0c:38:08:f3:
c6:64:ab:eb:32:69:55:0e:b6:7b:57:27:d6:78:ad:
ea:c0:fa:e9:d1:c3:cc:a2:4d:c0:30:be:61:36:37:
b2:71:77:41:50:ac:1c:d0:37:2b:cd:c8:eb:0d:ef:
35:a8:cf:2b:3b:6d:e4:e0:a5:3b:89:b7:0b:c9:ad:
78:bf:60:b4:32:64:1e:bb:86:23:d3:b4:08:2f:d5:
7e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:00:62:97:6F:CE:4C:B5:45:DE:ED:38:9E:9B:04:EF:90:74:07:DA
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/cwBil2_OTLVF3u04npsE75B0B9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.90.8.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:eb:5c:fd:49:3b:dd:fd:4f:f5:58:0d:b0:7d:dc:42:1d:9a:
af:c8:55:78:b2:ee:a2:c2:84:ca:cd:08:0b:15:de:13:9b:02:
cc:f6:e4:7b:05:87:36:ef:6a:05:34:5d:76:ac:74:dd:55:f5:
ea:ec:50:0f:f9:b1:07:f2:00:87:cc:72:bf:b2:dd:85:f0:f9:
95:36:b6:01:e5:f5:89:00:b6:33:fe:50:0a:3a:c5:c6:84:a1:
d1:4d:da:c8:22:b6:d6:d8:90:b3:12:d9:42:8e:a4:8b:d5:43:
9a:ff:f2:39:4a:6a:61:bd:82:c7:79:1d:24:fe:f5:03:13:1a:
cc:d3:44:33:3f:7e:dd:48:0c:83:e9:d4:d9:17:b2:34:51:3c:
3f:b9:8b:64:cf:18:fa:4d:51:4d:71:a3:db:99:3a:a6:b2:18:
e5:d9:b3:fa:b1:74:0d:30:0d:13:b2:93:ba:66:fe:7f:8e:a2:
91:e4:d8:64:be:f2:9a:55:9b:b7:ef:dd:72:ef:ce:30:3b:14:
7f:28:85:04:70:ba:23:5d:85:48:38:9d:00:fd:da:43:ae:3b:
35:7e:62:d7:18:dc:6a:55:34:1c:69:0e:a9:85:3a:7c:a8:74:
40:f4:1a:0d:83:6d:e3:2c:5d:aa:cb:47:51:92:5b:b4:a0:98:
29:7b:82:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvKCcwOpEH5QDy/sJxHB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjQwMTAyMTAzMzUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzAwNjI5NzZmY2U0Y2I1NDVkZWVkMzg5ZTliMDRlZjkwNzQwN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPfFMA6EhXOyi9O4o4NMNc/BxgKn
XTKKqFXuEIRVQtmdNzj/Lx9StMhMLDtyvt/7mYLucl4F1R6bKmwJd8d4DhBIrqAh
A4C9khzPxVdvy+2WZ/8+U/WHPvP+XpMKu38rYYDtbf2RPruDUEysyxEg5reg0ey/
9od+MHIGPsSMtbWjxeAAaCNXfoM5l4YIpvSIl+WPvoKjiGTex1ssg7u8VN86AIRH
EOe2sLTybMBCdgw4CPPGZKvrMmlVDrZ7VyfWeK3qwPrp0cPMok3AML5hNjeycXdB
UKwc0DcrzcjrDe81qM8rO23k4KU7ibcLya14v2C0MmQeu4Yj07QIL9V+oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMAYpdvzky1Rd7tOJ6bBO+QdAfaMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvY3dCaWwyX09UTFZGM3UwNG5wc0U3NUIwQjlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkVoIMA0G
CSqGSIb3DQEBCwUAA4IBAQBf61z9STvd/U/1WA2wfdxCHZqvyFV4su6iwoTKzQgL
Fd4TmwLM9uR7BYc272oFNF12rHTdVfXq7FAP+bEH8gCHzHK/st2F8PmVNrYB5fWJ
ALYz/lAKOsXGhKHRTdrIIrbW2JCzEtlCjqSL1UOa//I5SmphvYLHeR0k/vUDExrM
00QzP37dSAyD6dTZF7I0UTw/uYtkzxj6TVFNcaPbmTqmshjl2bP6sXQNMA0TspO6
Zv5/jqKR5NhkvvKaVZu3791y784wOxR/KIUEcLojXYVIOJ0A/dpDrjs1fmLXGNxq
VTQcaQ6phTp8qHRA9BoNg23jLF2qy0dRklu0oJgpe4I7
-----END CERTIFICATE-----
Generated at Sun Jun 2 05:23:35 2024 by rpki-client on console-fra.rpki-client.org