Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wj7gsbVwB1WrIwS7hfIqm93c9eA.roa
File: Wj7gsbVwB1WrIwS7hfIqm93c9eA.roa (raw, json)
Hash identifier: 5ZMfHX6VFOAVn4f905VWu3P2KcgpzUW/BrnuicvwgX4=
Subject key identifier: 5A:3E:E0:B1:B5:70:07:55:AB:23:04:BB:85:F2:2A:9B:DD:DC:F5:E0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192002DB808620D045A866340C3CDF0C65E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wj7gsbVwB1WrIwS7hfIqm93c9eA.roa
Signing time: Tue 17 Sep 2024 13:30:49 +0000
ROA not before: Tue 17 Sep 2024 13:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57463
IP address blocks: 94.156.226.0/24 maxlen: 32
185.219.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:2d:b8:08:62:0d:04:5a:86:63:40:c3:cd:f0:c6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 13:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a3ee0b1b5700755ab2304bb85f22a9bdddcf5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:bd:8e:5a:9e:1d:e4:73:3d:00:05:0e:bc:
06:8e:12:c0:bf:d4:7a:44:20:00:52:d3:70:fe:f2:
cb:2a:8c:1e:1e:27:ed:8a:90:10:2d:38:53:96:71:
d8:3d:dc:b5:1b:1f:a7:47:b7:c0:cf:a2:3b:37:0c:
63:10:bd:61:97:b8:e7:d7:57:f8:4e:73:6b:9e:8d:
44:60:fe:56:09:bd:14:c2:53:a5:d7:9f:9b:0b:1a:
29:b8:6c:98:5c:d2:25:be:0a:04:c3:f2:b2:7c:92:
33:c6:e6:2c:8a:65:a6:5f:64:a2:ba:b1:aa:0c:6c:
f0:fa:ac:36:7d:b0:be:54:99:b6:58:70:d9:64:87:
66:1b:3e:a1:91:ca:55:08:36:81:2f:1a:85:48:78:
e3:85:fc:4a:12:90:73:90:a5:3f:12:ca:99:7a:1b:
23:66:1a:a0:20:3b:e5:5f:b4:1b:62:06:d4:93:37:
20:35:ab:97:e2:25:56:f1:d1:86:6f:98:9f:76:87:
ac:ea:40:c4:c6:c1:05:87:57:78:49:1e:a0:69:ca:
88:f2:f8:20:0d:96:7c:ea:a4:ff:de:ad:e8:44:41:
08:d1:93:83:24:7d:13:5d:ff:5d:b8:54:e0:43:d0:
f0:01:d9:a1:4d:c0:d0:bc:d4:11:0e:bd:4f:da:e6:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3E:E0:B1:B5:70:07:55:AB:23:04:BB:85:F2:2A:9B:DD:DC:F5:E0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wj7gsbVwB1WrIwS7hfIqm93c9eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.226.0/24
185.219.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1a:22:df:a8:c3:97:1b:e8:ea:58:32:1e:f6:43:6e:d0:e6:
c0:82:df:dc:bc:6c:4f:a9:4a:1a:49:22:46:ed:e4:c0:ba:dc:
fb:38:03:07:59:c5:70:a1:de:b1:7b:41:d4:8f:04:58:1d:b2:
59:01:84:59:75:5e:25:a2:ff:7f:ce:b2:52:24:dc:32:65:f4:
53:cf:4e:35:99:bb:b8:03:c4:65:d9:f3:da:43:a9:99:c3:00:
ae:46:36:9c:db:72:2f:bd:b5:ed:55:74:6b:be:7b:75:de:7f:
9d:b4:d7:b0:0a:62:84:84:7c:ec:5f:76:c0:dd:20:58:6e:1b:
fe:07:12:41:fd:65:d1:0b:a7:b3:fe:78:94:1b:3b:b9:15:6f:
53:cd:55:db:6a:eb:57:b8:e2:91:ff:1b:80:3b:2e:41:43:36:
98:bf:fa:95:29:bf:2a:f1:1e:f4:3c:ff:53:3b:58:04:4c:96:
66:20:79:53:4a:0d:5b:1d:11:4b:a3:76:ce:aa:9e:37:62:b7:
cc:5e:8b:c5:11:f7:22:f2:f3:50:4b:8f:dd:46:0c:11:75:ed:
22:57:01:b4:da:03:8b:b7:0b:6c:49:18:9d:2c:ed:1a:a3:cb:
b8:be:76:33:7d:c8:dc:cd:8d:54:43:0c:c3:21:c9:bd:86:93:
33:ef:6a:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIALbgIYg0EWoZjQMPN8MZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwOTE3MTMzMDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTNlZTBiMWI1NzAwNzU1YWIyMzA0YmI4NWYyMmE5YmRkZGNmNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ve9jlqeHeRzPQAFDrwGjhLAv9R6
RCAAUtNw/vLLKoweHiftipAQLThTlnHYPdy1Gx+nR7fAz6I7NwxjEL1hl7jn11f4
TnNrno1EYP5WCb0UwlOl15+bCxopuGyYXNIlvgoEw/KyfJIzxuYsimWmX2SiurGq
DGzw+qw2fbC+VJm2WHDZZIdmGz6hkcpVCDaBLxqFSHjjhfxKEpBzkKU/EsqZehsj
ZhqgIDvlX7QbYgbUkzcgNauX4iVW8dGGb5ifdoes6kDExsEFh1d4SR6gacqI8vgg
DZZ86qT/3q3oREEI0ZODJH0TXf9duFTgQ9DwAdmhTcDQvNQRDr1P2ubthQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFo+4LG1cAdVqyMEu4XyKpvd3PXgMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvV2o3Z3NiVndCMVdySXdTN2hmSXFtOTNjOWVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpziAwQA
udt8MA0GCSqGSIb3DQEBCwUAA4IBAQB+GiLfqMOXG+jqWDIe9kNu0ObAgt/cvGxP
qUoaSSJG7eTAutz7OAMHWcVwod6xe0HUjwRYHbJZAYRZdV4lov9/zrJSJNwyZfRT
z041mbu4A8Rl2fPaQ6mZwwCuRjac23IvvbXtVXRrvnt13n+dtNewCmKEhHzsX3bA
3SBYbhv+BxJB/WXRC6ez/niUGzu5FW9TzVXbautXuOKR/xuAOy5BQzaYv/qVKb8q
8R70PP9TO1gETJZmIHlTSg1bHRFLo3bOqp43YrfMXovFEfci8vNQS4/dRgwRde0i
VwG02gOLtwtsSRidLO0ao8u4vnYzfcjczY1UQwzDIcm9hpMz72rR
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-fra.rpki-client.org