Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/WNTFlcs6kVD2RqxZ0l32_J2NIik.roa
File: WNTFlcs6kVD2RqxZ0l32_J2NIik.roa (raw, json)
Hash identifier: UDtGe/WZhr3rAD13TThcMDUiKfI7KRVhxo5HlXoIHtQ=
Subject key identifier: 58:D4:C5:95:CB:3A:91:50:F6:46:AC:59:D2:5D:F6:FC:9D:8D:22:29
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 018FDE9E59C92D57871765D717740A11AAD4
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/WNTFlcs6kVD2RqxZ0l32_J2NIik.roa
Signing time: Mon 03 Jun 2024 15:01:10 +0000
ROA not before: Mon 03 Jun 2024 15:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.12.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:9e:59:c9:2d:57:87:17:65:d7:17:74:0a:11:aa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jun 3 15:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58d4c595cb3a9150f646ac59d25df6fc9d8d2229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:24:95:f9:99:fc:49:a7:00:52:a0:21:84:
9d:43:b7:23:42:66:55:64:d1:51:10:b5:bb:10:8e:
2b:2a:f4:15:33:cc:b3:7f:83:88:2b:d8:24:b5:e8:
e5:68:41:0a:a7:9a:6f:e9:2b:a4:43:ea:ea:59:70:
63:46:22:5a:17:32:09:f1:dc:33:1f:7d:ce:bd:7f:
e9:97:44:4b:b6:ea:66:1c:ea:a1:8d:35:a1:7c:d3:
f6:08:48:80:7a:70:2b:cc:bb:cf:49:ba:0d:e0:cb:
41:cb:1c:ca:29:71:a9:fb:41:5e:cc:1c:51:73:bd:
ec:d2:56:4c:cd:6a:48:2f:2a:24:64:d0:96:39:3b:
99:32:48:f0:40:26:7f:99:75:92:b0:ce:b8:04:40:
30:bc:db:6c:25:0c:af:3c:2f:c2:25:75:ba:85:b2:
7e:0b:b7:a6:a2:66:17:e0:80:5c:16:71:b9:f7:f9:
fc:ff:40:df:0e:66:6e:81:18:31:1e:7e:c7:c3:ed:
81:35:e4:d7:e1:fa:d0:31:98:0f:50:d0:4c:14:b5:
5c:4a:89:34:0a:74:c6:57:35:b4:22:ed:e7:90:a9:
a3:ad:4f:4b:c6:71:f3:c9:d4:0a:8c:51:35:8d:04:
91:80:57:6d:86:42:2f:42:4d:e8:72:b3:1d:ea:50:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D4:C5:95:CB:3A:91:50:F6:46:AC:59:D2:5D:F6:FC:9D:8D:22:29
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/WNTFlcs6kVD2RqxZ0l32_J2NIik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:28:8b:e3:07:74:8d:9c:89:94:86:4f:a6:4a:e2:7b:86:e4:
e2:75:0c:11:0f:fa:15:7c:2e:8e:f3:8f:2e:d7:c4:b0:f5:5d:
5e:86:53:37:45:6f:ff:fa:61:dc:e7:4d:79:35:f5:1e:0a:43:
9c:a5:e9:f3:06:5b:f7:e7:9b:8a:bb:0d:70:2a:ba:47:21:ce:
45:3a:d5:6f:75:e8:ae:36:6a:dd:a7:56:07:f0:d1:d0:19:0c:
9a:0d:c9:54:bf:31:e1:21:16:0a:c0:f6:ec:db:8c:28:2f:ec:
f2:fc:a2:0a:56:21:98:59:c0:e0:aa:27:b1:94:73:25:62:32:
73:e4:b4:f9:39:59:e7:df:37:e1:be:fa:6e:4c:ec:0e:c9:80:
91:39:23:19:0a:1e:f7:84:9b:40:ea:c6:d8:7c:0f:01:a6:73:
69:4d:e8:6f:47:ff:58:17:3d:a9:b5:79:1e:97:94:74:cb:f0:
51:61:fb:33:1a:c2:33:6b:5d:df:ba:d3:0b:d9:52:81:82:89:
3f:42:2e:5f:15:7c:bb:b9:99:b5:07:30:25:68:98:17:11:3a:
12:5d:3f:aa:55:69:3f:ae:f6:81:cd:0d:51:7c:fd:11:66:08:
3e:92:67:73:2c:4b:1b:c7:86:65:83:5d:4d:10:2e:42:44:c1:
47:50:bf:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/enlnJLVeHF2XXF3QKEarUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi
ZmVjOWMwHhcNMjQwNjAzMTUwMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGQ0YzU5NWNiM2E5MTUwZjY0NmFjNTlkMjVkZjZmYzlkOGQyMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgIklfmZ/EmnAFKgIYSdQ7cjQmZV
ZNFRELW7EI4rKvQVM8yzf4OIK9gktejlaEEKp5pv6SukQ+rqWXBjRiJaFzIJ8dwz
H33OvX/pl0RLtupmHOqhjTWhfNP2CEiAenArzLvPSboN4MtByxzKKXGp+0FezBxR
c73s0lZMzWpILyokZNCWOTuZMkjwQCZ/mXWSsM64BEAwvNtsJQyvPC/CJXW6hbJ+
C7emomYX4IBcFnG59/n8/0DfDmZugRgxHn7Hw+2BNeTX4frQMZgPUNBMFLVcSok0
CnTGVzW0Iu3nkKmjrU9LxnHzydQKjFE1jQSRgFdthkIvQk3ocrMd6lAhgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFjUxZXLOpFQ9kasWdJd9vydjSIpMB8GA1UdIwQY
MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt
OWNhOThmNDk1MGNmLzEvV05URmxjczZrVkQyUnF4WjBsMzJfSjJOSWlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm
LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQwKMA0G
CSqGSIb3DQEBCwUAA4IBAQCoKIvjB3SNnImUhk+mSuJ7huTidQwRD/oVfC6O848u
18Sw9V1ehlM3RW//+mHc5015NfUeCkOcpenzBlv355uKuw1wKrpHIc5FOtVvdeiu
Nmrdp1YH8NHQGQyaDclUvzHhIRYKwPbs24woL+zy/KIKViGYWcDgqiexlHMlYjJz
5LT5OVnn3zfhvvpuTOwOyYCROSMZCh73hJtA6sbYfA8BpnNpTehvR/9YFz2ptXke
l5R0y/BRYfszGsIza13futML2VKBgok/Qi5fFXy7uZm1BzAlaJgXEToSXT+qVWk/
rvaBzQ1RfP0RZgg+kmdzLEsbx4Zlg11NEC5CRMFHUL8x
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:27 2024 by rpki-client on console-fra.rpki-client.org