Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/WLoUvvGm1-HzNNafioYRXPzupYQ.roa
File: WLoUvvGm1-HzNNafioYRXPzupYQ.roa (raw, json)
Hash identifier: Wb1nheXGcgD19GeZ1iMGx1nU4RIoIkEB/V7O3tAGxCw=
Subject key identifier: 58:BA:14:BE:F1:A6:D7:E1:F3:34:D6:9F:8A:86:11:5C:FC:EE:A5:84
Certificate issuer: /CN=4e42466070ff8c3cc967da48e14da12df71b2671
Certificate serial: 018CC64B80CE5DBAF7C14468997F4EBBB1D0
Authority key identifier: 4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/WLoUvvGm1-HzNNafioYRXPzupYQ.roa
Signing time: Mon 01 Jan 2024 18:31:26 +0000
ROA not before: Mon 01 Jan 2024 18:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15600
IP address blocks: 5.153.240.0/21 maxlen: 21
185.74.152.0/22 maxlen: 22
2a00:d560::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:80:ce:5d:ba:f7:c1:44:68:99:7f:4e:bb:b1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e42466070ff8c3cc967da48e14da12df71b2671
Validity
Not Before: Jan 1 18:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58ba14bef1a6d7e1f334d69f8a86115cfceea584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:47:c3:df:92:f3:e6:90:f4:e2:25:d8:b6:
64:55:7a:13:cb:7f:30:f9:cd:45:21:aa:de:98:48:
32:0c:a5:f3:3b:b3:41:39:87:b8:b2:66:fe:6d:29:
29:7f:80:d5:ee:18:cc:81:69:c3:c8:39:b8:d3:6d:
79:45:ec:43:b3:ba:a1:4d:10:00:ba:e8:fe:18:c1:
ae:a4:fb:8b:38:05:92:b7:a1:64:90:0a:e2:84:ca:
19:13:a0:d0:68:4e:3b:90:e6:1c:b6:74:59:61:7e:
e6:71:81:e0:52:a6:e9:94:96:dc:b3:ef:83:78:ab:
30:ca:47:73:64:24:79:0b:8c:0d:69:31:f9:f4:57:
0f:29:2e:b5:a8:64:7e:c1:a1:ce:eb:c1:af:e3:43:
7d:75:6d:f4:90:70:1d:cc:d8:07:33:15:b9:01:5f:
b3:94:1d:29:2e:69:8f:d2:96:3a:aa:52:5b:0c:b5:
05:33:3d:11:70:8d:98:91:d9:0e:34:71:c2:ce:19:
19:84:bf:49:85:c2:9c:4b:54:ed:bc:74:2a:69:ca:
01:2c:8c:4e:a8:9e:42:e8:33:95:be:59:86:34:47:
67:e0:eb:cb:08:c0:7a:cc:ab:c3:da:4f:15:ab:26:
c6:6f:f5:89:05:57:7f:cc:a9:9b:ab:2b:1b:31:a9:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BA:14:BE:F1:A6:D7:E1:F3:34:D6:9F:8A:86:11:5C:FC:EE:A5:84
X509v3 Authority Key Identifier:
keyid:4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/WLoUvvGm1-HzNNafioYRXPzupYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.240.0/21
185.74.152.0/22
IPv6:
2a00:d560::/29
Signature Algorithm: sha256WithRSAEncryption
17:67:b3:e9:3f:72:cc:59:ff:ca:0f:49:05:61:97:4c:50:57:
c0:08:16:6f:eb:6f:55:4f:31:31:6f:73:0d:e7:25:a7:79:c8:
65:29:13:25:48:e5:5c:61:c3:49:57:54:d2:14:30:ab:18:66:
a0:0b:be:3d:d2:16:7e:80:35:8f:60:f9:71:bf:29:ad:cc:95:
1b:db:5f:1d:f9:e7:1d:a7:5a:7e:00:19:be:a5:88:41:86:61:
af:c5:e6:8a:36:3c:05:9f:52:c6:ed:cd:55:8a:87:bb:8a:b6:
9c:b7:f1:f7:e0:2f:27:6c:95:23:0c:35:2b:d2:95:8f:09:ce:
34:e7:08:05:09:ce:37:88:91:91:2a:9a:41:b7:87:02:17:f4:
7c:79:de:2a:72:a4:47:51:d6:24:0c:d2:be:cb:d0:1a:87:32:
47:1a:3a:f5:da:1a:c6:f3:44:d9:b6:59:06:79:0f:cc:c0:b7:
f5:6d:49:c7:01:a7:24:7b:51:b4:c4:a3:5a:c3:9a:f7:5f:01:
23:53:e9:bd:d8:6b:22:f4:30:7a:2e:e6:62:18:34:67:a8:4a:
2f:8a:75:57:f4:29:78:c1:ad:62:df:78:6d:ac:8a:04:6b:a4:
54:06:09:35:86:df:08:9f:8e:fd:23:45:9c:15:59:e1:09:51:
8d:47:12:d3
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzGS4DOXbr3wURomX9Ou7HQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDI0NjYwNzBmZjhjM2NjOTY3ZGE0OGUxNGRhMTJkZjcx
YjI2NzEwHhcNMjQwMTAxMTgzMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGJhMTRiZWYxYTZkN2UxZjMzNGQ2OWY4YTg2MTE1Y2ZjZWVhNTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPNHw9+S8+aQ9OIl2LZkVXoTy38w
+c1FIaremEgyDKXzO7NBOYe4smb+bSkpf4DV7hjMgWnDyDm40215RexDs7qhTRAA
uuj+GMGupPuLOAWSt6FkkArihMoZE6DQaE47kOYctnRZYX7mcYHgUqbplJbcs++D
eKswykdzZCR5C4wNaTH59FcPKS61qGR+waHO68Gv40N9dW30kHAdzNgHMxW5AV+z
lB0pLmmP0pY6qlJbDLUFMz0RcI2YkdkONHHCzhkZhL9JhcKcS1TtvHQqacoBLIxO
qJ5C6DOVvlmGNEdn4OvLCMB6zKvD2k8VqybGb/WJBVd/zKmbqysbMakHPQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFi6FL7xptfh8zTWn4qGEVz87qWEMB8GA1UdIwQY
MBaAFE5CRmBw/4w8yWfaSOFNoS33GyZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtKR1lIRF9qRHpKWjlwSTRVMmhMZmNiSm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yNmI2MTktNTVjZi00NDg5LWE5YjMt
NThhMjBmMzRmMmVjLzEvV0xvVXZ2R20xLUh6Tk5hZmlvWVJYUHp1cFlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yNmI2MTktNTVjZi00NDg5LWE5YjMtNThhMjBmMzRmMmVj
LzEvVGtKR1lIRF9qRHpKWjlwSTRVMmhMZmNiSm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBZnwAwQC
uUqYMA0EAgACMAcDBQMqANVgMA0GCSqGSIb3DQEBCwUAA4IBAQAXZ7PpP3LMWf/K
D0kFYZdMUFfACBZv629VTzExb3MN5yWnechlKRMlSOVcYcNJV1TSFDCrGGagC749
0hZ+gDWPYPlxvymtzJUb218d+ecdp1p+ABm+pYhBhmGvxeaKNjwFn1LG7c1Vioe7
iract/H34C8nbJUjDDUr0pWPCc405wgFCc43iJGRKppBt4cCF/R8ed4qcqRHUdYk
DNK+y9AahzJHGjr12hrG80TZtlkGeQ/MwLf1bUnHAacke1G0xKNaw5r3XwEjU+m9
2Gsi9DB6LuZiGDRnqEovinVX9Cl4wa1i33htrIoEa6RUBgk1ht8In479I0WcFVnh
CVGNRxLT
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:15:24 2024 by rpki-client on console-ams.rpki-client.org