Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/WeqT-1hqIX-iL5XF-Lz6r_kxVnI.roa
File: WeqT-1hqIX-iL5XF-Lz6r_kxVnI.roa (raw, json)
Hash identifier: Fjj+iHxmee4LJBcWCvHt3aNsxXPvaxpoq6+jWSLjtuk=
Subject key identifier: 59:EA:93:FB:58:6A:21:7F:A2:2F:95:C5:F8:BC:FA:AF:F9:31:56:72
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 01909CBA75E97722C718D33F679259FECD2A
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/WeqT-1hqIX-iL5XF-Lz6r_kxVnI.roa
Signing time: Wed 10 Jul 2024 12:59:43 +0000
ROA not before: Wed 10 Jul 2024 12:59:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209326
IP address blocks: 62.106.79.0/24 maxlen: 24
79.110.225.0/24 maxlen: 24
130.193.0.0/24 maxlen: 24
194.69.166.0/24 maxlen: 24
213.109.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:ba:75:e9:77:22:c7:18:d3:3f:67:92:59:fe:cd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jul 10 12:59:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59ea93fb586a217fa22f95c5f8bcfaaff9315672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:d5:bc:9c:22:8d:1c:2d:8f:90:55:34:e8:
e2:cc:4a:24:b0:b6:db:89:50:50:a4:04:2e:16:c2:
a3:eb:29:1b:e9:df:17:e7:d2:96:69:ec:f9:94:ed:
72:79:27:59:11:b3:72:bd:4d:a9:bc:34:00:e9:f5:
5d:fb:e6:e4:12:45:d8:41:80:68:67:5b:ac:cb:fc:
e7:d9:11:09:2a:69:a9:b7:c5:7d:48:99:1d:32:d5:
c7:1e:85:24:bd:ce:08:b7:49:2a:16:86:55:94:fd:
bb:4f:fb:d1:bf:e7:d3:71:d2:89:f1:46:46:d2:00:
e3:fb:bb:5c:69:aa:6e:fc:4a:0c:a9:39:c0:dc:1a:
71:ec:06:99:8d:3b:6a:68:55:d1:d4:0f:ea:c9:43:
b4:64:5b:5d:fe:b6:74:81:92:02:2f:7b:1e:f0:7c:
c7:37:91:b3:cc:5e:0d:b5:b8:7e:8f:0c:a2:b0:2c:
26:69:b6:e3:7c:15:de:7d:68:35:ad:38:e4:f4:c1:
2e:b0:6f:5d:39:8c:ec:d4:09:83:a3:c9:1a:56:f2:
22:bf:ef:35:b2:fe:0c:5a:64:00:ad:c9:fc:7c:96:
eb:44:d5:fb:41:80:ab:46:d6:41:d0:e7:1d:25:03:
be:2d:48:a3:60:04:cf:d0:f6:fd:a4:93:87:1f:db:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EA:93:FB:58:6A:21:7F:A2:2F:95:C5:F8:BC:FA:AF:F9:31:56:72
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/WeqT-1hqIX-iL5XF-Lz6r_kxVnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.79.0/24
79.110.225.0/24
130.193.0.0/24
194.69.166.0/24
213.109.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:32:92:a7:6d:01:ae:a3:9c:40:4f:e7:d6:c1:36:df:34:53:
88:19:64:29:31:8d:bf:7e:21:58:a8:47:4a:ba:22:dc:32:7d:
0d:94:48:5e:15:95:e0:ef:3f:f9:25:d4:88:5d:cc:1c:a0:d7:
c6:1a:ef:ea:82:10:f6:f3:66:27:b3:0f:3c:ee:6e:da:f0:f0:
f9:a9:1b:27:e7:a9:00:4e:a2:59:a3:8c:65:eb:ca:f8:98:c2:
0f:d1:da:bc:0f:d7:1a:8c:22:61:fe:fd:2a:32:62:98:bf:63:
b5:76:df:6f:5c:4a:f6:49:cd:af:80:f5:70:f8:dd:03:f5:9d:
e0:13:48:f3:67:38:32:bd:fb:76:5b:b3:76:72:a5:ab:06:a9:
9f:21:31:b2:e3:07:54:0a:5e:e1:f9:39:97:5f:48:ea:87:15:
a0:e9:3c:e5:10:d9:86:e8:16:95:84:6f:b0:01:3f:a9:9c:a1:
1e:fc:4d:ac:dd:77:6b:29:89:6a:7f:77:8c:b9:e6:9a:f7:bb:
36:c4:71:5d:31:34:25:d4:5a:06:0d:82:1a:39:f1:d3:18:9b:
e3:b0:8e:b4:c3:b7:e8:8e:0a:a1:5d:f9:71:5d:30:96:87:6f:
fa:07:43:45:f9:89:01:33:fc:e8:03:05:db:27:92:a8:92:3e:
52:a7:1b:7a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZCcunXpdyLHGNM/Z5JZ/s0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm
ZmExOWUwHhcNMjQwNzEwMTI1OTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWVhOTNmYjU4NmEyMTdmYTIyZjk1YzVmOGJjZmFhZmY5MzE1NjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzLVvJwijRwtj5BVNOjizEoksLbb
iVBQpAQuFsKj6ykb6d8X59KWaez5lO1yeSdZEbNyvU2pvDQA6fVd++bkEkXYQYBo
Z1usy/zn2REJKmmpt8V9SJkdMtXHHoUkvc4It0kqFoZVlP27T/vRv+fTcdKJ8UZG
0gDj+7tcaapu/EoMqTnA3Bpx7AaZjTtqaFXR1A/qyUO0ZFtd/rZ0gZICL3se8HzH
N5GzzF4Ntbh+jwyisCwmabbjfBXefWg1rTjk9MEusG9dOYzs1AmDo8kaVvIiv+81
sv4MWmQArcn8fJbrRNX7QYCrRtZB0OcdJQO+LUijYATP0Pb9pJOHH9skZwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFnqk/tYaiF/oi+Vxfi8+q/5MVZyMB8GA1UdIwQY
MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt
YTM1ZmM0MzhkNGNhLzEvV2VxVC0xaHFJWC1pTDVYRi1MejZyX2t4Vm5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh
LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPmpPAwQA
T27hAwQAgsEAAwQAwkWmAwQA1W3CMA0GCSqGSIb3DQEBCwUAA4IBAQCPMpKnbQGu
o5xAT+fWwTbfNFOIGWQpMY2/fiFYqEdKuiLcMn0NlEheFZXg7z/5JdSIXcwcoNfG
Gu/qghD282Ynsw887m7a8PD5qRsn56kATqJZo4xl68r4mMIP0dq8D9cajCJh/v0q
MmKYv2O1dt9vXEr2Sc2vgPVw+N0D9Z3gE0jzZzgyvft2W7N2cqWrBqmfITGy4wdU
Cl7h+TmXX0jqhxWg6TzlENmG6BaVhG+wAT+pnKEe/E2s3XdrKYlqf3eMueaa97s2
xHFdMTQl1FoGDYIaOfHTGJvjsI60w7fojgqhXflxXTCWh2/6B0NF+YkBM/zoAwXb
J5Kokj5Spxt6
-----END CERTIFICATE-----
Generated at Sat Sep 28 23:31:39 2024 by rpki-client on console-ams.rpki-client.org