Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/WFYYBOHD6QOmhFTlwE3RJPLL9PE.roa
File: WFYYBOHD6QOmhFTlwE3RJPLL9PE.roa (raw, json)
Hash identifier: 2MmuqxO5Vxv9sGMOshgbrpJTQoTpMiLjKXXlEwi0bK0=
Subject key identifier: 58:56:18:04:E1:C3:E9:03:A6:84:54:E5:C0:4D:D1:24:F2:CB:F4:F1
Certificate issuer: /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial: 018CC9BCDCA19D22F60D582E16258F267BAC
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/WFYYBOHD6QOmhFTlwE3RJPLL9PE.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49883
IP address blocks: 91.213.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:dc:a1:9d:22:f6:0d:58:2e:16:25:8f:26:7b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58561804e1c3e903a68454e5c04dd124f2cbf4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:a5:89:f5:8a:96:fa:4b:82:05:88:50:89:
72:7b:7e:77:0d:5e:94:e7:ff:a2:9b:c8:1e:ec:b4:
12:c5:d0:8d:a7:46:27:c3:84:91:51:59:dd:f2:a7:
83:75:f1:83:88:7a:69:df:86:42:1b:25:53:aa:61:
93:27:04:70:77:d5:0a:2e:4a:d9:a7:00:31:e3:50:
1d:b4:f3:32:9d:d6:4d:6b:35:7f:99:09:70:9c:74:
11:a1:5b:f0:68:8d:0f:7c:f0:ac:45:eb:54:9c:d1:
88:f6:bb:0f:23:ef:4b:1a:e8:ab:bb:ea:fa:5e:95:
30:63:26:46:ce:82:2e:c7:36:c0:4d:f7:16:9a:81:
30:7b:38:97:86:9f:5c:57:97:37:fb:66:2a:85:e7:
85:8b:07:65:ec:2a:36:97:9f:cf:c2:e0:e6:4d:fa:
dd:a0:81:06:9c:d3:c0:2a:ec:aa:d8:c0:5d:19:0d:
4b:ea:e4:d2:1b:87:e2:f5:b2:12:d3:2c:db:de:8a:
b9:9f:57:53:2e:ea:90:67:e1:4e:b8:97:63:60:02:
9f:e2:58:5f:f0:6d:2c:d2:ba:d7:b6:cc:2d:e2:71:
eb:18:f3:a3:10:9e:7c:07:03:2f:d7:94:e3:af:4a:
89:1b:bc:10:cd:08:c3:47:14:f7:04:01:42:4c:18:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:56:18:04:E1:C3:E9:03:A6:84:54:E5:C0:4D:D1:24:F2:CB:F4:F1
X509v3 Authority Key Identifier:
keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/WFYYBOHD6QOmhFTlwE3RJPLL9PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.187.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8b:28:4b:8a:0a:ce:a1:3e:e4:55:cf:5c:d8:5a:ec:ec:83:
10:73:03:97:e7:38:39:44:e2:58:3f:f7:85:98:13:f4:5e:e1:
29:1f:2e:ce:7f:6b:2a:6b:1c:c2:06:ff:6c:a1:e5:61:e5:70:
27:40:dc:35:0b:ad:be:ab:36:27:ee:7a:57:de:2a:a8:32:2c:
cd:ee:c3:3d:c3:5d:59:df:38:49:45:d1:bc:34:d5:36:93:d0:
87:24:ca:09:e6:ac:73:54:7f:c9:53:7f:e8:59:e9:eb:61:17:
51:aa:29:da:03:cf:4a:43:42:d4:95:71:46:f2:e5:d0:3c:bf:
79:af:70:c9:e4:66:bb:c8:ed:8a:a6:20:9b:c3:61:84:a0:fb:
10:5c:80:a0:5d:36:c4:8c:4c:a0:1d:5c:f5:a1:62:75:f0:b2:
8f:23:4f:55:dc:0e:ab:59:c3:b1:01:cc:45:0d:fb:18:32:d6:
21:69:fe:1a:70:16:1b:cc:27:27:f5:a4:89:ed:62:a2:45:07:
50:9c:50:63:8c:da:50:af:3f:6e:74:b7:4d:05:da:8d:fe:a0:
66:92:57:e9:8c:ed:75:4f:00:99:05:2a:48:00:46:5b:36:b7:
8e:6f:ed:31:09:89:fd:e4:d9:5a:07:a8:e3:06:81:78:47:28:
51:ff:fd:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvNyhnSL2DVguFiWPJnusMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzVhNzZmMjhiNzFlYThkYmY5OTlhYmFhYjdhNjU5ODM5
YWMxODIwHhcNMjQwMTAyMTAzNDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODU2MTgwNGUxYzNlOTAzYTY4NDU0ZTVjMDRkZDEyNGYyY2JmNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqylifWKlvpLggWIUIlye353DV6U
5/+im8ge7LQSxdCNp0Ynw4SRUVnd8qeDdfGDiHpp34ZCGyVTqmGTJwRwd9UKLkrZ
pwAx41AdtPMyndZNazV/mQlwnHQRoVvwaI0PfPCsRetUnNGI9rsPI+9LGuiru+r6
XpUwYyZGzoIuxzbATfcWmoEweziXhp9cV5c3+2YqheeFiwdl7Co2l5/PwuDmTfrd
oIEGnNPAKuyq2MBdGQ1L6uTSG4fi9bIS0yzb3oq5n1dTLuqQZ+FOuJdjYAKf4lhf
8G0s0rrXtswt4nHrGPOjEJ58BwMv15Tjr0qJG7wQzQjDRxT3BAFCTBjKJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFhWGAThw+kDpoRU5cBN0STyy/TxMB8GA1UdIwQY
MBaAFFfFp28otx6o2/mZq6q3plmDmsGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhXbmJ5aTNIcWpiLVptcnFyZW1XWU9hd1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jMzJiOWQtOGM3Yy00NDQxLWJkYjEt
NmE2ODI1MWYxMzg3LzEvV0ZZWUJPSEQ2UU9taEZUbHdFM1JKUExMOVBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jMzJiOWQtOGM3Yy00NDQxLWJkYjEtNmE2ODI1MWYxMzg3
LzEvVjhXbmJ5aTNIcWpiLVptcnFyZW1XWU9hd1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9W7MA0G
CSqGSIb3DQEBCwUAA4IBAQAeiyhLigrOoT7kVc9c2Frs7IMQcwOX5zg5ROJYP/eF
mBP0XuEpHy7Of2sqaxzCBv9soeVh5XAnQNw1C62+qzYn7npX3iqoMizN7sM9w11Z
3zhJRdG8NNU2k9CHJMoJ5qxzVH/JU3/oWenrYRdRqinaA89KQ0LUlXFG8uXQPL95
r3DJ5Ga7yO2KpiCbw2GEoPsQXICgXTbEjEygHVz1oWJ18LKPI09V3A6rWcOxAcxF
DfsYMtYhaf4acBYbzCcn9aSJ7WKiRQdQnFBjjNpQrz9udLdNBdqN/qBmklfpjO11
TwCZBSpIAEZbNreOb+0xCYn95NlaB6jjBoF4RyhR//1X
-----END CERTIFICATE-----
Generated at Fri Jun 7 12:53:57 2024 by rpki-client on console-ams.rpki-client.org