Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wsXLF19DGfi1db0r94y3vxncFm4.roa
File: wsXLF19DGfi1db0r94y3vxncFm4.roa (raw, json)
Hash identifier: 8WJvd1F6KvEA+ZRzE2Xrno3soz37rs0rPVRTDXiRHX0=
Subject key identifier: C2:C5:CB:17:5F:43:19:F8:B5:75:BD:2B:F7:8C:B7:BF:19:DC:16:6E
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018CC56DF8900DAE1BE9DA4EC52FEA442067
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wsXLF19DGfi1db0r94y3vxncFm4.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 89.191.224.0/24 maxlen: 24
141.98.232.0/24 maxlen: 24
194.31.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f8:90:0d:ae:1b:e9:da:4e:c5:2f:ea:44:20:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2c5cb175f4319f8b575bd2bf78cb7bf19dc166e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:b1:fc:a9:98:4f:e2:12:3b:4d:f6:b4:99:
ed:25:f0:8d:69:47:d5:f3:2f:5d:c6:7c:dd:20:a7:
83:10:c2:90:44:eb:b7:d2:7c:3a:4a:73:16:8d:98:
4c:fa:9d:82:f0:10:16:03:16:6c:3f:70:bc:9b:ab:
bd:92:20:9b:74:b9:b9:40:71:4d:4b:88:46:3b:40:
44:61:94:d2:6c:bb:97:51:be:b5:03:d1:4b:02:7f:
56:4a:55:98:c7:b6:3b:ac:a8:16:bf:16:7e:f5:d6:
33:3e:e3:48:be:30:bb:8c:06:b5:84:50:bb:e9:65:
d3:76:3d:6a:9b:91:00:c8:bd:2a:8a:03:06:96:c8:
f5:3a:b9:31:80:16:0a:98:74:6e:37:7a:0f:bf:bd:
ea:35:8e:81:e1:7e:02:84:ce:9a:c1:46:ea:ef:fe:
1d:9f:ca:3f:19:f1:b6:13:2a:96:36:30:d3:17:ce:
52:1c:08:1a:00:ac:4c:95:f4:c2:e4:9f:7c:b9:59:
0d:80:16:0b:75:00:a3:31:78:c5:eb:a0:88:bf:2d:
ee:cf:0e:d7:b2:78:dc:e1:93:22:be:0c:a5:b8:04:
98:ea:01:b9:07:36:89:6b:2d:32:07:e4:a9:9b:d0:
88:fe:f8:d5:ef:10:b0:97:ef:32:5f:4c:a0:98:dd:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C5:CB:17:5F:43:19:F8:B5:75:BD:2B:F7:8C:B7:BF:19:DC:16:6E
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wsXLF19DGfi1db0r94y3vxncFm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.224.0/24
141.98.232.0/24
194.31.172.0/24
Signature Algorithm: sha256WithRSAEncryption
50:06:be:42:1d:85:21:1b:40:8b:86:58:dc:9d:33:c8:14:5e:
f2:99:9f:e7:1e:fd:fe:ed:f1:6f:b1:58:fc:a6:5d:84:e8:e7:
e4:9d:f6:23:ed:e5:bd:a1:39:80:21:a0:ed:0f:f1:c4:fd:cb:
a1:70:90:70:e8:b4:34:09:28:f6:b2:00:8d:b2:be:d5:55:31:
f8:01:46:5e:a9:a0:4f:c8:5b:90:50:c9:b2:2f:fd:b5:dc:8b:
eb:4d:70:ba:69:b0:50:41:bd:99:d7:95:a8:a8:d2:ad:5e:8a:
ac:52:43:39:d7:06:e8:c9:3d:9d:14:0e:8e:c8:9e:f2:66:3f:
b8:bd:b3:25:e6:52:d6:78:dc:1a:01:f4:f7:83:6c:e5:1b:b4:
ce:e3:67:05:a6:50:88:b0:b1:ac:9b:46:d1:f1:45:1c:df:d1:
77:ec:e2:b4:e6:7d:e8:5f:c8:18:0b:68:43:e4:31:ab:25:d6:
8f:6e:37:31:e3:cc:57:62:d2:d2:4c:b7:6e:72:c3:0e:69:60:
3d:87:79:d3:ff:f3:d2:99:1d:94:65:6a:81:68:bd:7e:a7:b0:
5d:6f:82:72:b6:35:58:be:8a:b6:c0:d2:47:c1:c6:3b:c5:d3:
15:65:1e:3b:25:c5:e3:ad:7b:0e:f0:e2:c2:6f:42:50:b1:e3:
f8:72:7c:40
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzFbfiQDa4b6dpOxS/qRCBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjQwMTAxMTQyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmM1Y2IxNzVmNDMxOWY4YjU3NWJkMmJmNzhjYjdiZjE5ZGMxNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxSx/KmYT+ISO032tJntJfCNaUfV
8y9dxnzdIKeDEMKQROu30nw6SnMWjZhM+p2C8BAWAxZsP3C8m6u9kiCbdLm5QHFN
S4hGO0BEYZTSbLuXUb61A9FLAn9WSlWYx7Y7rKgWvxZ+9dYzPuNIvjC7jAa1hFC7
6WXTdj1qm5EAyL0qigMGlsj1OrkxgBYKmHRuN3oPv73qNY6B4X4ChM6awUbq7/4d
n8o/GfG2EyqWNjDTF85SHAgaAKxMlfTC5J98uVkNgBYLdQCjMXjF66CIvy3uzw7X
snjc4ZMivgyluASY6gG5BzaJay0yB+Spm9CI/vjV7xCwl+8yX0ygmN2GmQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMLFyxdfQxn4tXW9K/eMt78Z3BZuMB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvd3NYTEYxOURHZmkxZGIwcjk0eTN2eG5jRm00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWb/gAwQA
jWLoAwQAwh+sMA0GCSqGSIb3DQEBCwUAA4IBAQBQBr5CHYUhG0CLhljcnTPIFF7y
mZ/nHv3+7fFvsVj8pl2E6OfknfYj7eW9oTmAIaDtD/HE/cuhcJBw6LQ0CSj2sgCN
sr7VVTH4AUZeqaBPyFuQUMmyL/213IvrTXC6abBQQb2Z15WoqNKtXoqsUkM51wbo
yT2dFA6OyJ7yZj+4vbMl5lLWeNwaAfT3g2zlG7TO42cFplCIsLGsm0bR8UUc39F3
7OK05n3oX8gYC2hD5DGrJdaPbjcx48xXYtLSTLducsMOaWA9h3nT//PSmR2UZWqB
aL1+p7Bdb4JytjVYvoq2wNJHwcY7xdMVZR47JcXjrXsO8OLCb0JQseP4cnxA
-----END CERTIFICATE-----
Generated at Sat May 18 18:47:19 2024 by rpki-client on console-fra.rpki-client.org