Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/wkitxO96zwChfoSjzhXanUt5V5s.roa
File: wkitxO96zwChfoSjzhXanUt5V5s.roa (raw, json)
Hash identifier: HrIKRl6H1f2Ucx6Pzq7H+lCOTGsxSgCn+V72gkjbTkc=
Subject key identifier: C2:48:AD:C4:EF:7A:CF:00:A1:7E:84:A3:CE:15:DA:9D:4B:79:57:9B
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4256A76263A0878A7AAF6D2CCC7EC70
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/wkitxO96zwChfoSjzhXanUt5V5s.roa
Signing time: Mon 01 Jan 2024 08:30:35 +0000
ROA not before: Mon 01 Jan 2024 08:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206804
IP address blocks: 185.227.68.0/24 maxlen: 24
185.234.73.0/24 maxlen: 24
2a0b:b87:ffd7::/48 maxlen: 48
2a0b:b87:ffd6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:6a:76:26:3a:08:78:a7:aa:f6:d2:cc:c7:ec:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c248adc4ef7acf00a17e84a3ce15da9d4b79579b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:05:e8:be:eb:de:cc:08:90:1d:c7:42:31:
0e:6e:24:76:53:ee:08:ce:42:88:23:69:17:57:a0:
46:2e:27:45:f9:66:31:90:a4:9b:bc:fc:f3:27:3c:
d5:78:ee:52:84:a9:6d:5f:a1:0d:63:6e:e8:68:e5:
be:ea:2d:50:09:b5:9b:a7:39:6a:18:18:33:5a:ea:
d1:d5:88:d6:ed:9b:d7:d4:92:2d:fa:c7:c2:3d:10:
fb:78:9b:90:b4:86:99:7e:df:0f:d4:c0:c9:d6:60:
6b:a1:43:40:d6:b7:e3:43:f2:a7:9a:05:af:44:78:
b3:3f:38:38:17:ea:c9:89:56:19:c8:14:0f:e5:fc:
25:21:b2:b9:5c:e1:46:1c:64:47:ff:40:be:70:b1:
7a:8e:cb:95:71:e4:61:62:25:ca:fb:38:92:c2:ec:
3e:ad:e5:a9:2d:18:b2:f6:7b:02:8d:8b:cf:fe:cf:
0a:e8:83:d6:e0:af:43:c7:da:f6:da:40:68:89:9d:
eb:0d:da:b6:1a:46:ec:f4:b1:98:c0:04:0d:28:cf:
70:b5:fa:89:a9:b6:15:e5:58:d3:4c:98:08:a5:0a:
a4:b1:81:9c:81:73:3b:67:e7:e0:d1:71:d2:b0:23:
a0:a4:49:ad:46:08:90:9d:69:43:c1:b8:ac:72:52:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:48:AD:C4:EF:7A:CF:00:A1:7E:84:A3:CE:15:DA:9D:4B:79:57:9B
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/wkitxO96zwChfoSjzhXanUt5V5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.68.0/24
185.234.73.0/24
IPv6:
2a0b:b87:ffd6::/47
Signature Algorithm: sha256WithRSAEncryption
42:2d:1e:3d:ad:5c:c1:0c:91:9d:e4:92:85:85:7d:f5:b3:61:
d3:b5:e0:a1:7e:4b:04:88:69:77:0e:2d:35:9a:f5:aa:38:f1:
28:d9:69:bb:d1:68:0d:f4:63:23:97:35:0a:c4:ca:03:78:70:
b0:a5:79:1e:7f:dd:48:4f:f3:99:16:45:3e:3a:91:8c:8d:a8:
8a:cb:b1:bd:f8:aa:18:a3:27:e0:e0:7f:c7:39:9d:b0:6e:1d:
6e:6f:d2:08:f2:37:aa:6b:d1:a3:01:ee:b5:ad:ba:83:0e:5b:
2f:15:90:6f:45:15:c9:0b:7b:9e:51:bb:80:82:87:9a:b7:7d:
63:62:f7:9b:bc:3a:12:12:ff:e4:61:70:30:a6:fe:a8:d6:79:
20:8c:ef:36:f3:1f:b5:3e:c6:a5:4a:b4:42:48:82:e3:2f:47:
e6:ef:2f:e6:04:d9:cf:25:a5:e4:b1:22:89:7a:fc:20:79:6c:
9c:d4:9e:cb:9f:f6:8b:2e:69:8d:5a:a4:d2:63:bd:2a:8c:c7:
71:ae:b1:9a:35:ce:54:c2:c2:49:23:a7:55:66:a6:f2:4b:57:
79:d8:dc:3d:a8:e1:da:74:ef:55:60:f8:98:61:26:2c:b7:a1:
07:44:aa:c4:7d:08:01:3b:a8:7b:88:14:96:54:5e:65:52:bb:
9c:0f:5e:0c
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzEJWp2JjoIeKeq9tLMx+xwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQwMTAxMDgzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjQ4YWRjNGVmN2FjZjAwYTE3ZTg0YTNjZTE1ZGE5ZDRiNzk1NzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1gF6L7r3swIkB3HQjEObiR2U+4I
zkKII2kXV6BGLidF+WYxkKSbvPzzJzzVeO5ShKltX6ENY27oaOW+6i1QCbWbpzlq
GBgzWurR1YjW7ZvX1JIt+sfCPRD7eJuQtIaZft8P1MDJ1mBroUNA1rfjQ/KnmgWv
RHizPzg4F+rJiVYZyBQP5fwlIbK5XOFGHGRH/0C+cLF6jsuVceRhYiXK+ziSwuw+
reWpLRiy9nsCjYvP/s8K6IPW4K9Dx9r22kBoiZ3rDdq2Gkbs9LGYwAQNKM9wtfqJ
qbYV5VjTTJgIpQqksYGcgXM7Z+fg0XHSsCOgpEmtRgiQnWlDwbisclJeJwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFMJIrcTves8AoX6Eo84V2p1LeVebMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvd2tpdHhPOTZ6d0NoZm9TanpoWGFuVXQ1VjVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAueNEAwQA
uepJMA8EAgACMAkDBwEqCwuH/9YwDQYJKoZIhvcNAQELBQADggEBAEItHj2tXMEM
kZ3kkoWFffWzYdO14KF+SwSIaXcOLTWa9ao48SjZabvRaA30YyOXNQrEygN4cLCl
eR5/3UhP85kWRT46kYyNqIrLsb34qhijJ+Dgf8c5nbBuHW5v0gjyN6pr0aMB7rWt
uoMOWy8VkG9FFckLe55Ru4CCh5q3fWNi95u8OhIS/+RhcDCm/qjWeSCM7zbzH7U+
xqVKtEJIguMvR+bvL+YE2c8lpeSxIol6/CB5bJzUnsuf9osuaY1apNJjvSqMx3Gu
sZo1zlTCwkkjp1VmpvJLV3nY3D2o4dp071Vg+JhhJiy3oQdEqsR9CAE7qHuIFJZU
XmVSu5wPXgw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:07:55 2024 by rpki-client on console-fra.rpki-client.org