Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/w2C_sn15EhNWUpZ7U8NZtqtKjqc.roa
File: w2C_sn15EhNWUpZ7U8NZtqtKjqc.roa (raw, json)
Hash identifier: N64XJKfoNDykE2QIFyzum+5/QYsamKYA2btoR/Wbmj0=
Subject key identifier: C3:60:BF:B2:7D:79:12:13:56:52:96:7B:53:C3:59:B6:AB:4A:8E:A7
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0190EE37FBF6B4581E91FBC4E42A20D4AA51
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/w2C_sn15EhNWUpZ7U8NZtqtKjqc.roa
Signing time: Fri 26 Jul 2024 08:46:04 +0000
ROA not before: Fri 26 Jul 2024 08:46:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12679
IP address blocks: 37.49.151.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:37:fb:f6:b4:58:1e:91:fb:c4:e4:2a:20:d4:aa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 26 08:46:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c360bfb27d7912135652967b53c359b6ab4a8ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:5c:c5:28:48:cf:72:98:f2:3b:bb:f2:97:
6c:62:1c:bf:f3:d4:3a:3a:7d:10:26:cd:65:1c:ab:
c5:93:d0:98:e6:90:8e:0e:95:19:03:07:d8:13:aa:
fb:ae:8c:31:94:67:7e:d3:04:de:38:80:c2:29:38:
e9:21:d0:9d:78:f6:cc:a5:dd:b0:a3:eb:41:fb:93:
2e:6d:ff:29:33:33:f1:98:19:3e:9e:eb:f4:3b:b2:
2e:06:a4:51:2f:28:e8:7c:04:b0:fb:d0:f5:06:5d:
5c:b5:d1:47:a6:3f:2c:4d:10:46:3e:7a:b9:00:77:
eb:93:62:8a:1f:aa:5c:da:0c:0e:e6:96:03:b4:fe:
f6:53:52:e6:60:e1:5b:d4:95:35:39:ab:01:08:e8:
b1:b6:79:d0:af:e8:16:ff:5c:d4:8e:9f:82:8d:34:
90:6b:43:fa:76:42:a5:63:45:a5:13:a8:0d:68:24:
65:c1:a9:9c:5f:82:aa:84:c3:19:f1:ba:12:64:66:
4b:bb:0d:b2:ee:0d:4b:6c:41:0b:1b:b3:8d:6a:62:
0a:53:12:b5:11:bf:cc:2f:54:b9:24:c2:07:46:88:
8c:b8:ca:9b:a9:87:f8:83:5b:2c:42:b8:23:7c:8b:
2d:5f:d6:fa:fb:3c:49:7f:9f:19:a8:12:e5:4b:e4:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:60:BF:B2:7D:79:12:13:56:52:96:7B:53:C3:59:B6:AB:4A:8E:A7
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/w2C_sn15EhNWUpZ7U8NZtqtKjqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.151.0/24
94.74.173.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b9:da:ba:97:1f:e3:2b:b8:72:23:ef:75:88:ac:b9:4b:21:
3c:2d:b0:bc:7c:e8:82:c1:a2:2c:ac:92:00:aa:1a:f3:34:3e:
42:18:e5:04:b7:76:ba:ad:5a:16:85:c8:cd:4b:80:5c:73:f7:
77:74:f9:6b:9e:af:10:d0:a0:77:cf:c6:a7:d0:c5:81:74:f9:
ca:1b:ab:ad:c8:6e:d7:41:50:e8:a6:50:21:ad:61:ac:87:f0:
27:0f:f1:45:e7:a8:82:db:4e:7b:b3:f9:bd:a0:6e:f8:ca:50:
5d:ca:c7:42:4f:2f:17:e9:d2:01:c7:bd:a1:ae:ae:d6:5b:65:
c5:f0:ae:43:14:11:65:0a:8c:1e:ab:fa:8c:12:c6:ea:7f:8a:
56:78:fa:91:bc:15:6a:58:8c:bc:50:59:e0:87:48:27:01:88:
5b:7a:69:d8:d2:3d:92:98:24:f8:e5:60:84:a0:86:21:76:c5:
67:2f:a3:46:9c:81:64:10:cf:b1:45:45:69:8d:52:27:96:d8:
51:e4:f4:2a:50:72:1a:86:b5:b7:46:95:1e:94:2a:30:47:a8:
9a:5b:1a:fe:66:5d:7b:3d:db:c4:54:18:ee:f4:17:c6:85:91:
c3:da:de:2a:a6:cb:79:da:9e:f7:1f:5b:e2:f0:0f:be:be:7d:
14:ea:59:78
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZDuN/v2tFgekfvE5Cog1KpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjQwNzI2MDg0NjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzYwYmZiMjdkNzkxMjEzNTY1Mjk2N2I1M2MzNTliNmFiNGE4ZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsdcxShIz3KY8ju78pdsYhy/89Q6
On0QJs1lHKvFk9CY5pCODpUZAwfYE6r7rowxlGd+0wTeOIDCKTjpIdCdePbMpd2w
o+tB+5Mubf8pMzPxmBk+nuv0O7IuBqRRLyjofASw+9D1Bl1ctdFHpj8sTRBGPnq5
AHfrk2KKH6pc2gwO5pYDtP72U1LmYOFb1JU1OasBCOixtnnQr+gW/1zUjp+CjTSQ
a0P6dkKlY0WlE6gNaCRlwamcX4KqhMMZ8boSZGZLuw2y7g1LbEELG7ONamIKUxK1
Eb/ML1S5JMIHRoiMuMqbqYf4g1ssQrgjfIstX9b6+zxJf58ZqBLlS+TbVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMNgv7J9eRITVlKWe1PDWbarSo6nMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvdzJDX3NuMTVFaE5XVXBaN1U4Tlp0cXRLanFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJTGXAwQA
XkqtMA0GCSqGSIb3DQEBCwUAA4IBAQADudq6lx/jK7hyI+91iKy5SyE8LbC8fOiC
waIsrJIAqhrzND5CGOUEt3a6rVoWhcjNS4Bcc/d3dPlrnq8Q0KB3z8an0MWBdPnK
G6utyG7XQVDoplAhrWGsh/AnD/FF56iC2057s/m9oG74ylBdysdCTy8X6dIBx72h
rq7WW2XF8K5DFBFlCoweq/qMEsbqf4pWePqRvBVqWIy8UFngh0gnAYhbemnY0j2S
mCT45WCEoIYhdsVnL6NGnIFkEM+xRUVpjVInlthR5PQqUHIahrW3RpUelCowR6ia
Wxr+Zl17PdvEVBju9BfGhZHD2t4qpst52p73H1vi8A++vn0U6ll4
-----END CERTIFICATE-----
Generated at Sun Nov 24 16:19:42 2024 by rpki-client on console-ams.rpki-client.org