Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/WkZ63YPfegVnEP-zvj27Ck-PvBw.roa
File: WkZ63YPfegVnEP-zvj27Ck-PvBw.roa (raw, json)
Hash identifier: b9lJeDBSCcWxeb+pfUPu13YGURc5Myc9WPzhzB80+jE=
Subject key identifier: 5A:46:7A:DD:83:DF:7A:05:67:10:FF:B3:BE:3D:BB:0A:4F:8F:BC:1C
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 018CC86FB32A2F0BF9C151D223D084B23601
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/WkZ63YPfegVnEP-zvj27Ck-PvBw.roa
Signing time: Tue 02 Jan 2024 04:30:12 +0000
ROA not before: Tue 02 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202658
IP address blocks: 213.232.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b3:2a:2f:0b:f9:c1:51:d2:23:d0:84:b2:36:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a467add83df7a056710ffb3be3dbb0a4f8fbc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:0a:a2:a0:94:a6:d1:f2:fd:a5:12:c5:7d:
69:9e:04:31:ff:e4:61:a8:1d:bc:37:39:ab:cf:2c:
3a:1c:62:1b:4b:a0:1e:44:21:f4:a6:8d:b2:42:f4:
cf:52:65:fb:0e:2e:ee:9a:80:a4:92:17:eb:d8:64:
e9:cf:71:fe:6f:e2:71:57:65:61:1b:ba:2b:a8:e2:
cf:07:e3:b6:46:fe:ec:08:f2:0f:90:36:34:a3:c1:
ad:f7:a3:24:ef:3a:08:e3:dd:45:9c:fc:00:02:02:
a5:c9:72:81:15:c4:53:bb:cb:f0:f2:2a:9f:ba:9a:
4f:57:5c:16:3a:0a:7c:c4:c0:b1:08:b4:d0:ac:d9:
7c:81:81:3f:18:d4:51:b2:da:c0:57:29:29:a9:44:
b5:f2:89:9c:d0:82:f0:87:5e:8b:d1:79:26:cd:96:
76:7a:f8:a0:4e:74:09:71:28:c6:a1:7b:f6:02:93:
40:93:19:90:d7:08:91:19:13:07:36:40:ca:63:97:
37:79:af:72:09:36:1d:22:8e:fb:33:ad:90:3c:bd:
7f:4a:80:80:9e:8b:2b:e1:c2:7c:e4:83:52:f6:72:
c5:28:70:63:a2:41:f8:25:57:c4:47:c4:ea:cb:13:
69:a1:88:5e:a8:81:c3:ac:00:42:f5:ad:9e:97:8d:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:46:7A:DD:83:DF:7A:05:67:10:FF:B3:BE:3D:BB:0A:4F:8F:BC:1C
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/WkZ63YPfegVnEP-zvj27Ck-PvBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:6c:7b:56:e8:42:f1:d2:c3:b7:6a:9e:03:94:8f:b4:8c:49:
a7:d0:dd:e1:f4:ad:02:15:c8:56:cb:8e:36:03:40:b2:1d:b2:
bb:e7:79:7b:14:41:c2:14:bc:ed:11:0f:19:0c:2b:6a:40:82:
69:b1:13:d2:04:0b:25:eb:93:91:b2:9c:15:c6:69:17:bf:1c:
41:1e:91:39:d8:bc:a4:98:7a:ab:d2:82:69:fc:43:e2:3f:44:
6d:f6:d5:58:61:2c:28:56:71:a9:65:7b:80:6b:c8:df:ea:01:
55:31:b9:cd:17:c2:62:a8:51:43:50:9d:79:75:de:bc:57:76:
4a:e7:8c:54:89:51:4b:4b:b4:46:fa:94:2b:a7:e1:8f:51:65:
2d:aa:ec:32:fb:13:f2:0d:64:9b:4a:91:b9:31:07:af:70:da:
21:6a:ba:f1:aa:69:b7:e2:47:93:7a:b8:49:5e:4b:ae:a9:29:
26:c3:7c:26:e0:2f:60:39:14:7b:e0:8f:31:6b:20:41:d8:82:
e3:84:89:22:40:36:7e:0a:82:3a:e6:03:df:3e:9a:9e:04:9f:
2c:8d:d9:ac:60:9e:53:1f:6e:6c:19:74:13:9b:28:20:90:02:
e7:1e:a3:08:67:f9:65:7c:d6:2c:4d:d5:11:70:37:37:2a:cc:
8a:2b:5d:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb7MqLwv5wVHSI9CEsjYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjQwMTAyMDQzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTQ2N2FkZDgzZGY3YTA1NjcxMGZmYjNiZTNkYmIwYTRmOGZiYzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI0KoqCUptHy/aUSxX1pngQx/+Rh
qB28Nzmrzyw6HGIbS6AeRCH0po2yQvTPUmX7Di7umoCkkhfr2GTpz3H+b+JxV2Vh
G7orqOLPB+O2Rv7sCPIPkDY0o8Gt96Mk7zoI491FnPwAAgKlyXKBFcRTu8vw8iqf
uppPV1wWOgp8xMCxCLTQrNl8gYE/GNRRstrAVykpqUS18omc0ILwh16L0XkmzZZ2
evigTnQJcSjGoXv2ApNAkxmQ1wiRGRMHNkDKY5c3ea9yCTYdIo77M62QPL1/SoCA
nosr4cJ85INS9nLFKHBjokH4JVfER8TqyxNpoYheqIHDrABC9a2el40odQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFpGet2D33oFZxD/s749uwpPj7wcMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvV2taNjNZUGZlZ1ZuRVAtenZqMjdDay1QdkJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1ehMMA0G
CSqGSIb3DQEBCwUAA4IBAQBdbHtW6ELx0sO3ap4DlI+0jEmn0N3h9K0CFchWy442
A0CyHbK753l7FEHCFLztEQ8ZDCtqQIJpsRPSBAsl65ORspwVxmkXvxxBHpE52Lyk
mHqr0oJp/EPiP0Rt9tVYYSwoVnGpZXuAa8jf6gFVMbnNF8JiqFFDUJ15dd68V3ZK
54xUiVFLS7RG+pQrp+GPUWUtquwy+xPyDWSbSpG5MQevcNoharrxqmm34keTerhJ
XkuuqSkmw3wm4C9gORR74I8xayBB2ILjhIkiQDZ+CoI65gPfPpqeBJ8sjdmsYJ5T
H25sGXQTmyggkALnHqMIZ/llfNYsTdURcDc3KsyKK13z
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:26 2024 by rpki-client on console-ams.rpki-client.org