Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/wte8JCb4QHsVT9z2CM55Ua96Tnc.roa
File: wte8JCb4QHsVT9z2CM55Ua96Tnc.roa (raw, json)
Hash identifier: I08muN3UOsAheC+S45ZVpHfo2mzjgBZKWI9EF2uwJVY=
Subject key identifier: C2:D7:BC:24:26:F8:40:7B:15:4F:DC:F6:08:CE:79:51:AF:7A:4E:77
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 018CC49230153D39C3E400FDA5A526AE6292
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/wte8JCb4QHsVT9z2CM55Ua96Tnc.roa
Signing time: Mon 01 Jan 2024 10:29:24 +0000
ROA not before: Mon 01 Jan 2024 10:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 93.191.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:30:15:3d:39:c3:e4:00:fd:a5:a5:26:ae:62:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Jan 1 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2d7bc2426f8407b154fdcf608ce7951af7a4e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:54:25:57:a1:0b:1b:ba:30:c2:4e:ea:85:ea:
ef:9c:76:81:b1:66:b3:26:fa:60:8c:41:fa:cd:ca:
72:f7:c9:ad:ad:cf:5e:92:00:39:09:e1:c6:61:9d:
86:2b:71:eb:6d:ea:80:8d:82:91:bf:da:86:7f:1f:
6b:e3:d4:09:9f:6d:69:ec:a5:7c:f9:94:b9:a5:32:
a5:f3:9a:a0:d1:11:64:f0:8d:31:cf:bb:9a:5d:c3:
87:4e:9c:e1:97:58:14:b7:9c:47:07:dc:9f:d5:ba:
f3:c5:b7:e1:d1:7b:56:2d:b6:e7:c3:cb:61:95:b4:
d9:36:86:5d:25:5e:f0:86:a6:cc:b4:d7:57:2b:73:
69:15:fb:96:22:a5:8a:8c:3c:35:1c:d7:e3:c3:27:
79:41:de:36:0b:e7:43:6f:e4:d4:12:b7:a9:2b:e9:
c4:64:b0:ef:bc:7a:bc:ae:94:d3:45:23:6f:85:15:
36:ae:58:c3:b4:f8:96:c3:32:a1:e6:ed:86:77:07:
f5:6d:08:5e:93:a1:72:3c:fc:51:82:0f:af:26:98:
f9:8d:db:b4:d6:91:5b:bd:ba:a2:13:de:ab:f1:88:
4c:5a:ef:01:cf:05:9a:3a:81:e5:75:07:18:2c:c6:
63:ff:95:33:7c:b2:27:82:ec:fc:55:2d:e4:22:f7:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D7:BC:24:26:F8:40:7B:15:4F:DC:F6:08:CE:79:51:AF:7A:4E:77
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/wte8JCb4QHsVT9z2CM55Ua96Tnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.148.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:39:74:eb:5e:31:4c:c6:ce:8c:80:91:00:34:6a:13:42:3e:
7a:0a:5a:bd:60:55:ca:d6:08:b9:4a:b9:9a:0c:c2:2b:17:0d:
f4:b0:c7:c4:c5:9f:fc:20:59:c3:96:85:54:d3:20:56:2c:de:
b1:61:66:35:7a:d5:23:d8:9b:d3:c5:8d:0e:18:47:d5:e4:46:
61:84:ee:af:e8:7b:20:70:a4:50:d9:cb:f5:01:09:88:00:27:
1e:04:5b:58:27:a5:ad:ba:4d:e1:96:0c:f8:8b:f9:41:ef:6f:
d6:34:db:60:0a:42:e0:38:4f:82:fb:8b:aa:69:bd:32:56:96:
b3:f8:a7:a2:e0:0d:f4:89:27:d6:9d:0c:3b:30:2c:de:b9:59:
3d:be:d3:60:8d:34:01:ab:87:25:ce:bd:23:d0:17:45:5e:60:
73:93:b4:5c:db:b9:b6:f0:9f:f2:1c:67:29:c0:86:00:85:2c:
1d:c7:f3:9b:c6:e7:8c:73:72:f2:52:b9:e0:99:e7:4b:ef:65:
ed:c9:75:11:95:83:aa:e5:6d:a3:0b:b8:80:08:bd:bc:e9:cb:
82:cb:73:58:b5:ef:47:95:05:3c:7f:88:3d:b9:64:0d:7e:e2:
15:9c:f4:00:91:05:dd:a0:0f:a6:e1:0d:14:61:35:5f:ee:33:
10:79:af:ff
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzEkjAVPTnD5AD9paUmrmKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2
ODdiZDEwHhcNMjQwMTAxMTAyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmQ3YmMyNDI2Zjg0MDdiMTU0ZmRjZjYwOGNlNzk1MWFmN2E0ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1QlV6ELG7owwk7qhervnHaBsWaz
JvpgjEH6zcpy98mtrc9ekgA5CeHGYZ2GK3HrbeqAjYKRv9qGfx9r49QJn21p7KV8
+ZS5pTKl85qg0RFk8I0xz7uaXcOHTpzhl1gUt5xHB9yf1brzxbfh0XtWLbbnw8th
lbTZNoZdJV7whqbMtNdXK3NpFfuWIqWKjDw1HNfjwyd5Qd42C+dDb+TUErepK+nE
ZLDvvHq8rpTTRSNvhRU2rljDtPiWwzKh5u2Gdwf1bQhek6FyPPxRgg+vJpj5jdu0
1pFbvbqiE96r8YhMWu8BzwWaOoHldQcYLMZj/5UzfLInguz8VS3kIvdUxQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMLXvCQm+EB7FU/c9gjOeVGvek53MB8GA1UdIwQY
MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy
LTcyNDI2ZDkyNjAxYi8xL3d0ZThKQ2I0UUhzVlQ5ejJDTTU1VWE5NlRuYy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMyLTcyNDI2ZDkyNjAx
Yi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFdv5Qw
DQYJKoZIhvcNAQELBQADggEBADs5dOteMUzGzoyAkQA0ahNCPnoKWr1gVcrWCLlK
uZoMwisXDfSwx8TFn/wgWcOWhVTTIFYs3rFhZjV61SPYm9PFjQ4YR9XkRmGE7q/o
eyBwpFDZy/UBCYgAJx4EW1gnpa26TeGWDPiL+UHvb9Y022AKQuA4T4L7i6ppvTJW
lrP4p6LgDfSJJ9adDDswLN65WT2+02CNNAGrhyXOvSPQF0VeYHOTtFzbubbwn/Ic
ZynAhgCFLB3H85vG54xzcvJSueCZ50vvZe3JdRGVg6rlbaMLuIAIvbzpy4LLc1i1
70eVBTx/iD25ZA1+4hWc9ACRBd2gD6bhDRRhNV/uMxB5r/8=
-----END CERTIFICATE-----
Generated at Thu May 2 08:14:04 2024 by rpki-client on console-ams.rpki-client.org