Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/WJIMZ_Kv8qjnQCv2WfQ16ocYll0.roa
File: WJIMZ_Kv8qjnQCv2WfQ16ocYll0.roa (raw, json)
Hash identifier: bGKSr6TGUaPrjCkc+4fZwl5vI9uAu7CLvhopm/VUe6k=
Subject key identifier: 58:92:0C:67:F2:AF:F2:A8:E7:40:2B:F6:59:F4:35:EA:87:18:96:5D
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 018CC3490F0DC89D01AD34069EED0DA1EA42
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/WJIMZ_Kv8qjnQCv2WfQ16ocYll0.roa
Signing time: Mon 01 Jan 2024 04:29:54 +0000
ROA not before: Mon 01 Jan 2024 04:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44574
IP address blocks: 193.9.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0f:0d:c8:9d:01:ad:34:06:9e:ed:0d:a1:ea:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Jan 1 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58920c67f2aff2a8e7402bf659f435ea8718965d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e2:e2:a2:74:3b:c5:45:48:1b:a0:6b:3d:09:
91:7a:92:45:2d:f7:b5:9f:4f:ca:62:f0:e5:a0:90:
c0:79:4f:80:52:53:90:af:09:f9:e1:66:2e:18:6b:
c3:c5:0e:16:34:05:7f:77:9b:cc:c7:30:55:13:38:
0b:fa:28:05:b6:25:2d:1c:0a:82:1f:2e:9c:1d:ef:
82:ce:5a:24:1a:fc:c5:5c:9b:19:eb:b3:bc:40:95:
00:03:84:1a:3c:af:8e:bf:01:21:3d:47:62:b8:e0:
11:d5:68:bc:10:b2:8c:c5:ed:3f:b9:76:1a:22:a6:
b0:a6:88:83:e5:b0:c0:21:d1:d0:16:ee:d3:31:ec:
c9:6d:fa:25:3a:2e:81:de:47:cb:7c:b4:12:70:20:
20:27:4f:2c:c3:0a:48:e9:8d:15:8d:0a:e1:c7:fb:
b5:dc:28:a8:58:a6:6f:c3:c5:4a:de:c6:a9:5e:64:
84:ef:65:b9:25:6e:e4:ea:74:4e:64:f0:1b:34:af:
84:27:be:6d:6c:c7:75:97:d2:7c:4e:d3:88:4c:12:
45:91:ec:b5:75:35:e0:a0:33:95:7c:52:93:45:93:
08:e4:e2:9b:32:21:9e:4c:4c:f5:cf:0e:86:40:1a:
7a:4f:48:7e:fe:81:b5:62:45:68:87:d8:35:26:1b:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:92:0C:67:F2:AF:F2:A8:E7:40:2B:F6:59:F4:35:EA:87:18:96:5D
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/WJIMZ_Kv8qjnQCv2WfQ16ocYll0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.248.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c4:7e:79:3d:41:20:c5:0a:43:e2:f6:ce:c8:dd:d1:b5:33:
0e:64:b9:01:48:64:47:18:9d:f8:30:74:06:83:54:70:bc:e0:
84:ff:26:52:34:f2:fe:c8:94:fd:3f:7c:ce:d2:a5:ca:70:c1:
1f:c1:bb:82:85:52:c2:90:d5:bc:29:98:db:f3:a8:62:0e:ff:
b1:27:b1:e1:c0:75:34:7c:db:0a:39:a0:5c:61:91:d3:0c:05:
2b:d0:a7:4d:9f:3c:7d:b1:25:57:af:44:d4:c0:a3:44:3a:54:
41:57:df:9c:88:b1:2e:cb:54:53:ce:f6:19:dd:35:23:40:f2:
bc:40:29:d6:93:60:09:08:ce:7f:fd:f9:9e:64:e0:95:02:e2:
8c:7f:53:ec:76:18:b4:2f:dd:88:2b:55:27:84:b9:5d:44:8f:
21:2a:f4:78:fd:d9:85:ce:d9:da:55:84:0b:d3:f8:a7:c5:52:
44:37:bc:cc:81:67:6f:57:47:b3:8f:81:77:1d:3b:f5:f0:4d:
57:e8:ea:48:2b:e7:a9:e8:54:32:02:f4:21:21:9d:fc:87:c3:
80:d2:7e:df:b5:d8:b0:3d:d1:1e:95:80:16:33:38:45:ac:2c:
07:5d:ec:a3:30:3b:b6:1d:b5:6c:ab:6f:af:b6:f1:e3:45:58:
ba:06:f2:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSQ8NyJ0BrTQGnu0NoepCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjgwNzY2MGJmMmNkOTJhZWUzOTE0NDJhNTM0M2FmNzE4
YzE4YzcwHhcNMjQwMTAxMDQyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODkyMGM2N2YyYWZmMmE4ZTc0MDJiZjY1OWY0MzVlYTg3MTg5NjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOLionQ7xUVIG6BrPQmRepJFLfe1
n0/KYvDloJDAeU+AUlOQrwn54WYuGGvDxQ4WNAV/d5vMxzBVEzgL+igFtiUtHAqC
Hy6cHe+CzlokGvzFXJsZ67O8QJUAA4QaPK+OvwEhPUdiuOAR1Wi8ELKMxe0/uXYa
IqawpoiD5bDAIdHQFu7TMezJbfolOi6B3kfLfLQScCAgJ08swwpI6Y0VjQrhx/u1
3CioWKZvw8VK3sapXmSE72W5JW7k6nROZPAbNK+EJ75tbMd1l9J8TtOITBJFkey1
dTXgoDOVfFKTRZMI5OKbMiGeTEz1zw6GQBp6T0h+/oG1YkVoh9g1JhsZLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFiSDGfyr/Ko50Ar9ln0NeqHGJZdMB8GA1UdIwQY
MBaAFNb4B2YL8s2SruORRCpTQ69xjBjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgt
M2ZlMTc0ODFmNjA4LzEvV0pJTVpfS3Y4cWpuUUN2MldmUTE2b2NZbGwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgtM2ZlMTc0ODFmNjA4
LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQn4MA0G
CSqGSIb3DQEBCwUAA4IBAQByxH55PUEgxQpD4vbOyN3RtTMOZLkBSGRHGJ34MHQG
g1RwvOCE/yZSNPL+yJT9P3zO0qXKcMEfwbuChVLCkNW8KZjb86hiDv+xJ7HhwHU0
fNsKOaBcYZHTDAUr0KdNnzx9sSVXr0TUwKNEOlRBV9+ciLEuy1RTzvYZ3TUjQPK8
QCnWk2AJCM5//fmeZOCVAuKMf1Psdhi0L92IK1UnhLldRI8hKvR4/dmFztnaVYQL
0/inxVJEN7zMgWdvV0ezj4F3HTv18E1X6OpIK+ep6FQyAvQhIZ38h8OA0n7ftdiw
PdEelYAWMzhFrCwHXeyjMDu2HbVsq2+vtvHjRVi6BvLQ
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:28:17 2024 by rpki-client on console-fra.rpki-client.org