Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/wb9NbtVtsQLgqZRBjngwKIc9AqY.roa
File: wb9NbtVtsQLgqZRBjngwKIc9AqY.roa (raw, json)
Hash identifier: vcaS36zKdaefNlG1eIzFa4s2xjRoVqjYEFtqPWgxNZ0=
Subject key identifier: C1:BF:4D:6E:D5:6D:B1:02:E0:A9:94:41:8E:78:30:28:87:3D:02:A6
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 018CC5DC5A027A3E5E88F06CB2CE5CDAE24A
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/wb9NbtVtsQLgqZRBjngwKIc9AqY.roa
Signing time: Mon 01 Jan 2024 16:30:01 +0000
ROA not before: Mon 01 Jan 2024 16:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4651
IP address blocks: 163.171.105.0/24 maxlen: 24
163.171.108.0/24 maxlen: 24
163.171.106.0/24 maxlen: 24
163.171.121.0/24 maxlen: 24
163.171.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5a:02:7a:3e:5e:88:f0:6c:b2:ce:5c:da:e2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Jan 1 16:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1bf4d6ed56db102e0a994418e783028873d02a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:b5:42:eb:6b:32:00:dc:96:39:37:0e:49:
9c:39:e2:67:3f:e6:83:eb:e4:8b:cc:3b:9a:f2:3f:
3d:c3:c8:2a:b7:df:8c:06:a2:6b:33:2d:f0:44:18:
48:84:bd:f0:b0:da:b8:0b:b7:b3:ff:44:c3:04:24:
66:c7:ea:03:a3:f9:03:66:06:0c:50:bd:9d:75:01:
54:2d:18:1e:a8:cb:b3:8b:b1:83:8c:57:5a:f8:c9:
39:43:4c:e0:06:26:0d:dc:3b:11:27:b4:e2:ec:64:
10:12:51:5f:46:50:32:82:a7:8c:c1:5f:7f:43:bb:
a0:35:b8:e6:73:82:a9:6f:18:05:aa:ac:db:42:94:
13:c8:10:67:ae:ef:e8:ce:b0:8b:41:e7:31:d1:09:
20:cb:52:c6:66:7f:84:55:48:bf:0c:c8:88:50:11:
28:24:e7:1a:02:17:24:af:00:56:64:b8:de:72:3a:
66:6d:f5:40:fc:d2:f8:c2:aa:91:70:cb:b7:39:aa:
7b:91:00:85:0d:0f:df:04:5b:10:a9:76:03:3f:da:
21:4d:91:ff:f9:d6:11:6c:d7:11:46:fd:0b:31:21:
a3:c0:11:cf:1f:dd:32:a2:e9:fe:9b:37:cd:80:be:
11:9d:5d:e8:2f:c3:dd:c2:8c:6d:6a:ec:0c:1e:f9:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BF:4D:6E:D5:6D:B1:02:E0:A9:94:41:8E:78:30:28:87:3D:02:A6
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/wb9NbtVtsQLgqZRBjngwKIc9AqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.171.105.0-163.171.106.255
163.171.108.0/24
163.171.120.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:08:78:a9:39:6d:06:b6:6f:17:37:ed:90:bc:47:2d:bd:18:
18:b0:80:22:2e:86:7d:0c:63:8a:30:6c:64:5b:db:94:34:27:
e6:01:05:41:6d:8f:dd:0c:5a:f0:30:7c:44:27:79:44:d5:c0:
22:89:f5:4a:88:61:18:0e:7b:20:a9:ad:80:88:64:93:5b:d1:
5d:53:d7:04:bf:54:8c:af:bb:8c:d7:60:ed:a6:5b:9e:ca:88:
07:f2:4d:4f:e9:73:5b:af:47:ea:71:f6:03:4e:fb:bf:5e:57:
7e:2d:71:e2:b4:11:46:52:4f:81:6a:53:51:75:c1:99:84:98:
78:b9:6e:01:46:b7:d7:2c:b3:2e:df:f5:bb:2d:1d:2e:4b:6a:
1c:f3:3e:b7:c8:a8:96:b0:34:7f:70:4b:73:ec:6b:7e:40:bd:
1d:41:94:c6:fb:5e:25:e2:e4:82:6f:d2:27:ef:dc:13:6e:4a:
f2:7d:57:33:b8:6b:2a:b5:4c:e0:f6:87:f0:14:cd:b7:ba:9b:
62:5c:f7:d9:0f:be:9c:82:84:3a:24:7c:0b:3f:0d:c4:5e:4d:
1d:3b:2f:cf:43:ca:0e:6f:d5:34:33:ee:98:6d:b3:ae:71:ed:
47:77:c6:18:55:1f:ca:9f:f7:0d:91:ce:33:2d:77:04:81:bc:
10:73:91:62
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzF3FoCej5eiPBsss5c2uJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5
ZDcwNmEwHhcNMjQwMTAxMTYzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWJmNGQ2ZWQ1NmRiMTAyZTBhOTk0NDE4ZTc4MzAyODg3M2QwMmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlse1QutrMgDcljk3DkmcOeJnP+aD
6+SLzDua8j89w8gqt9+MBqJrMy3wRBhIhL3wsNq4C7ez/0TDBCRmx+oDo/kDZgYM
UL2ddQFULRgeqMuzi7GDjFda+Mk5Q0zgBiYN3DsRJ7Ti7GQQElFfRlAygqeMwV9/
Q7ugNbjmc4KpbxgFqqzbQpQTyBBnru/ozrCLQecx0Qkgy1LGZn+EVUi/DMiIUBEo
JOcaAhckrwBWZLjecjpmbfVA/NL4wqqRcMu3Oap7kQCFDQ/fBFsQqXYDP9ohTZH/
+dYRbNcRRv0LMSGjwBHPH90youn+mzfNgL4RnV3oL8PdwoxtauwMHvlKLwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMG/TW7VbbEC4KmUQY54MCiHPQKmMB8GA1UdIwQY
MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt
YjVkODg4YWRmZDM3LzEvd2I5TmJ0VnRzUUxncVpSQmpuZ3dLSWM5QXFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3
LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACjq2kD
BACjq2oDBACjq2wDBAGjq3gwDQYJKoZIhvcNAQELBQADggEBAMQIeKk5bQa2bxc3
7ZC8Ry29GBiwgCIuhn0MY4owbGRb25Q0J+YBBUFtj90MWvAwfEQneUTVwCKJ9UqI
YRgOeyCprYCIZJNb0V1T1wS/VIyvu4zXYO2mW57KiAfyTU/pc1uvR+px9gNO+79e
V34tceK0EUZST4FqU1F1wZmEmHi5bgFGt9cssy7f9bstHS5LahzzPrfIqJawNH9w
S3Psa35AvR1BlMb7XiXi5IJv0ifv3BNuSvJ9VzO4ayq1TOD2h/AUzbe6m2Jc99kP
vpyChDokfAs/DcReTR07L89Dyg5v1TQz7phts65x7Ud3xhhVH8qf9w2RzjMtdwSB
vBBzkWI=
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:00:59 2024 by rpki-client on console-ams.rpki-client.org