Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/WLyH9i-aCykquFeLV9Bfhc3Uoug.roa
File: WLyH9i-aCykquFeLV9Bfhc3Uoug.roa (raw, json)
Hash identifier: s7FIvU5hMF7xd0A2QHbPvElZPSVsNnWFYMwlaEtP+j0=
Subject key identifier: 58:BC:87:F6:2F:9A:0B:29:2A:B8:57:8B:57:D0:5F:85:CD:D4:A2:E8
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 01912374869D4AB0469A096DD745C069766C
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/WLyH9i-aCykquFeLV9Bfhc3Uoug.roa
Signing time: Mon 05 Aug 2024 16:52:04 +0000
ROA not before: Mon 05 Aug 2024 16:52:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199785
IP address blocks: 89.107.10.0/24 maxlen: 24
146.19.207.0/24 maxlen: 24
176.126.103.0/24 maxlen: 24
178.250.186.0/24 maxlen: 24
178.250.191.0/24 maxlen: 24
217.114.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:74:86:9d:4a:b0:46:9a:09:6d:d7:45:c0:69:76:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Aug 5 16:52:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58bc87f62f9a0b292ab8578b57d05f85cdd4a2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:f8:7e:bd:0e:a5:a7:8a:73:e3:4c:0b:8f:
a7:9e:e2:13:aa:45:eb:79:9c:b1:72:f9:63:c8:6e:
42:cf:2a:4e:79:49:b0:93:6c:be:7f:b6:e1:06:c0:
b5:6e:99:4a:c6:42:a8:f2:b2:01:22:8c:45:93:e6:
1c:33:d3:24:d6:fc:66:50:a3:35:98:76:8c:b1:42:
23:8d:64:9f:18:4f:84:b8:37:18:fc:cf:81:70:21:
cb:b9:fe:44:8e:88:69:58:5e:15:15:8b:5f:6a:6a:
08:61:87:41:1b:87:51:2b:c5:13:dc:4e:eb:7d:27:
7a:51:fe:b5:25:61:1c:a5:ef:e8:ea:d2:16:d7:e1:
92:d1:22:08:cb:95:66:ba:1c:82:e0:75:ab:76:0e:
e8:1b:cc:8e:9e:ad:35:5b:6c:92:93:61:2e:69:64:
f6:a3:22:d9:48:8f:9f:51:71:2d:07:f6:03:dc:e9:
81:9f:e5:71:56:e9:6f:ff:9a:91:59:4a:0d:29:89:
b1:f4:33:79:72:3c:02:85:ef:74:08:8d:6c:4f:70:
03:f9:3a:06:fe:92:01:e9:cd:6e:49:bf:22:34:4b:
18:b3:a9:df:01:a3:d3:0d:f4:94:19:11:79:72:6d:
61:44:dd:43:18:d6:46:5d:14:f7:84:73:42:c2:eb:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BC:87:F6:2F:9A:0B:29:2A:B8:57:8B:57:D0:5F:85:CD:D4:A2:E8
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/WLyH9i-aCykquFeLV9Bfhc3Uoug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.10.0/24
146.19.207.0/24
176.126.103.0/24
178.250.186.0/24
178.250.191.0/24
217.114.43.0/24
Signature Algorithm: sha256WithRSAEncryption
50:7b:ed:c5:92:de:a4:91:97:b3:67:fe:d1:2c:20:bf:c4:2d:
dd:bb:9e:dc:c1:48:ef:ef:41:c2:e9:9c:bf:a5:52:0d:5b:a0:
10:96:bb:3a:a8:4b:14:e0:ce:34:3c:59:b0:45:cc:97:e5:c7:
3f:82:f4:31:51:cc:85:6b:ba:f7:6f:d5:bf:1e:b4:cb:86:22:
4c:59:03:8e:d0:17:62:6f:ea:aa:ac:ad:b9:82:5f:e9:9c:ac:
8e:53:28:0c:02:0c:30:7e:ec:81:66:f1:f7:58:6a:0e:4f:3a:
0d:3f:60:98:e4:3c:51:91:b2:54:fd:d0:c7:8a:9b:1d:ed:cf:
25:48:ba:57:07:f6:4d:ab:55:1c:df:47:cb:3e:71:14:cc:4f:
e4:df:5a:0a:7a:be:d8:f4:3a:c5:45:44:6c:8c:24:5b:f5:46:
d1:ee:a0:f9:ed:17:08:1d:fa:b7:a7:12:04:3c:cf:62:8f:77:
4a:36:50:21:0d:1c:17:7e:ab:87:e3:29:19:fd:e4:ed:1e:f7:
d3:cf:0d:c0:07:42:53:5d:5e:e7:64:7a:b4:96:98:c5:dc:be:
a6:98:53:d0:5b:db:65:73:6e:b7:ad:6a:1b:e4:ec:d1:83:80:
cf:e7:f1:5e:a3:82:fb:fc:d8:1d:ba:c1:5b:6b:87:76:6a:ad:
60:6a:3a:83
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZEjdIadSrBGmglt10XAaXZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi
ZjA2OTIwHhcNMjQwODA1MTY1MjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGJjODdmNjJmOWEwYjI5MmFiODU3OGI1N2QwNWY4NWNkZDRhMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXn4fr0OpaeKc+NMC4+nnuITqkXr
eZyxcvljyG5CzypOeUmwk2y+f7bhBsC1bplKxkKo8rIBIoxFk+YcM9Mk1vxmUKM1
mHaMsUIjjWSfGE+EuDcY/M+BcCHLuf5EjohpWF4VFYtfamoIYYdBG4dRK8UT3E7r
fSd6Uf61JWEcpe/o6tIW1+GS0SIIy5VmuhyC4HWrdg7oG8yOnq01W2ySk2EuaWT2
oyLZSI+fUXEtB/YD3OmBn+VxVulv/5qRWUoNKYmx9DN5cjwChe90CI1sT3AD+ToG
/pIB6c1uSb8iNEsYs6nfAaPTDfSUGRF5cm1hRN1DGNZGXRT3hHNCwuuoyQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFFi8h/YvmgspKrhXi1fQX4XN1KLoMB8GA1UdIwQY
MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt
YWE5ZDY5MTgxMWU3LzEvV0x5SDlpLWFDeWtxdUZlTFY5QmZoYzNVb3VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3
LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWWsKAwQA
khPPAwQAsH5nAwQAsvq6AwQAsvq/AwQA2XIrMA0GCSqGSIb3DQEBCwUAA4IBAQBQ
e+3Fkt6kkZezZ/7RLCC/xC3du57cwUjv70HC6Zy/pVINW6AQlrs6qEsU4M40PFmw
RcyX5cc/gvQxUcyFa7r3b9W/HrTLhiJMWQOO0Bdib+qqrK25gl/pnKyOUygMAgww
fuyBZvH3WGoOTzoNP2CY5DxRkbJU/dDHipsd7c8lSLpXB/ZNq1Uc30fLPnEUzE/k
31oKer7Y9DrFRURsjCRb9UbR7qD57RcIHfq3pxIEPM9ij3dKNlAhDRwXfquH4ykZ
/eTtHvfTzw3AB0JTXV7nZHq0lpjF3L6mmFPQW9tlc263rWob5OzRg4DP5/Feo4L7
/NgdusFba4d2aq1gajqD
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:33:00 2024 by rpki-client on console-ams.rpki-client.org