Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/wonbylIhbF-4-ZTO_vsK8pKjJeo.roa
File: wonbylIhbF-4-ZTO_vsK8pKjJeo.roa (raw, json)
Hash identifier: 9XY/BCwXkiiZYNfxQVeWaOJ6gRmfc2Lfxc3rdIWbjAE=
Subject key identifier: C2:89:DB:CA:52:21:6C:5F:B8:F9:94:CE:FE:FB:0A:F2:92:A3:25:EA
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 0190C1862C921DFE07D6DB9442AB612E1B6C
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/wonbylIhbF-4-ZTO_vsK8pKjJeo.roa
Signing time: Wed 17 Jul 2024 16:28:34 +0000
ROA not before: Wed 17 Jul 2024 16:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50869
IP address blocks: 92.119.38.0/24 maxlen: 24
2a0b:dd80:3100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:86:2c:92:1d:fe:07:d6:db:94:42:ab:61:2e:1b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Jul 17 16:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c289dbca52216c5fb8f994cefefb0af292a325ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:36:22:56:ff:63:0b:f6:dd:fe:57:d9:78:
43:1f:92:76:9f:08:38:45:48:28:65:94:85:22:1e:
d8:e7:02:e6:07:10:ad:a7:08:21:df:93:b8:a9:dc:
55:d0:8b:54:ef:06:0b:e2:67:ef:65:63:3b:af:eb:
18:a1:dc:77:b5:3d:83:8c:db:02:9e:74:d6:bf:8f:
f7:c7:3f:b2:43:bd:fa:c8:92:56:c3:c3:00:97:cf:
47:6d:1c:82:fd:e8:0f:9f:4d:ef:9b:63:ad:f7:ab:
24:38:03:67:a1:3f:84:ed:e6:62:fa:cb:8c:2c:d0:
ae:fa:cc:f2:82:10:42:c4:c7:b2:8e:0a:68:29:32:
e8:53:1b:58:9b:cf:dd:03:d7:26:91:a2:e4:c3:4d:
26:e5:57:a5:75:7c:a9:6a:1b:b3:8c:b9:82:6f:6d:
85:3d:c4:dd:b7:88:e7:e2:f7:6b:2a:db:e7:96:80:
6b:7a:d7:7e:7b:02:6c:33:27:6e:07:76:ee:3d:13:
67:ff:cc:72:0c:f4:83:86:f7:01:78:b4:59:d7:e8:
0f:8f:a7:86:3e:2a:b5:f4:7f:6d:16:2c:09:35:c9:
2e:b0:e2:44:7b:8f:13:d6:3b:57:52:7e:c5:83:c6:
1e:51:ae:1a:b3:a9:73:82:cb:c0:f5:58:64:f4:d7:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:DB:CA:52:21:6C:5F:B8:F9:94:CE:FE:FB:0A:F2:92:A3:25:EA
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/wonbylIhbF-4-ZTO_vsK8pKjJeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.38.0/24
IPv6:
2a0b:dd80:3100::/40
Signature Algorithm: sha256WithRSAEncryption
33:b1:ab:d2:80:d9:38:28:32:94:9f:da:af:9d:fb:86:33:66:
d8:a1:57:ba:d5:53:61:40:6b:95:fc:b3:4e:93:0e:8d:57:19:
d9:b3:f7:71:a4:47:91:b5:6f:7f:b6:f5:c4:6d:c8:60:d4:b8:
44:33:28:2a:19:5e:21:41:57:60:48:bd:0a:16:bf:c2:d6:c8:
0d:a0:25:54:39:7a:1e:78:1c:17:09:c8:f1:85:36:c6:7f:bb:
e6:09:4e:e1:3e:40:52:c5:ce:0f:63:da:bc:49:ad:97:f2:d1:
28:fd:63:72:d9:a7:67:72:c5:59:48:3f:14:08:0f:85:15:f8:
8e:ab:e7:15:77:28:e1:57:5d:64:c5:e4:27:69:98:40:39:84:
98:ba:40:ac:81:4e:7a:03:24:60:1f:0e:c0:d5:e7:c5:fe:5d:
c9:bf:82:15:14:a6:13:10:79:f6:8e:f1:2e:5a:1a:4a:3e:38:
ba:03:aa:7d:91:2f:9c:0a:ba:27:de:26:22:8d:d0:4f:d1:6d:
28:89:5f:09:7a:3f:a7:ea:c3:a3:45:de:4e:ac:b9:30:e9:08:
0f:ba:91:3b:6f:54:5f:a0:cc:fa:a7:ec:e8:05:6e:db:4f:66:
a1:86:a8:cd:70:2c:67:e9:48:8e:a5:7e:7c:34:55:66:1b:ab:
79:76:40:ab
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZDBhiySHf4H1tuUQqthLhtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWI0ZjdiNGExNmRiOWU5MjRmMDkwOGNlZTNkYTI2ZjIy
YWQ0ODEwHhcNMjQwNzE3MTYyODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjg5ZGJjYTUyMjE2YzVmYjhmOTk0Y2VmZWZiMGFmMjkyYTMyNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o42Ilb/Ywv23f5X2XhDH5J2nwg4
RUgoZZSFIh7Y5wLmBxCtpwgh35O4qdxV0ItU7wYL4mfvZWM7r+sYodx3tT2DjNsC
nnTWv4/3xz+yQ736yJJWw8MAl89HbRyC/egPn03vm2Ot96skOANnoT+E7eZi+suM
LNCu+szyghBCxMeyjgpoKTLoUxtYm8/dA9cmkaLkw00m5VeldXypahuzjLmCb22F
PcTdt4jn4vdrKtvnloBretd+ewJsMyduB3buPRNn/8xyDPSDhvcBeLRZ1+gPj6eG
Piq19H9tFiwJNckusOJEe48T1jtXUn7Fg8YeUa4as6lzgsvA9Vhk9NefqwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFMKJ28pSIWxfuPmUzv77CvKSoyXqMB8GA1UdIwQY
MBaAFDRbT3tKFtuekk8JCM7j2ibyKtSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUt
NDA4NThiOTVmY2Y1LzEvd29uYnlsSWhiRi00LVpUT192c0s4cEtqSmVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUtNDA4NThiOTVmY2Y1
LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAXHcmMA4E
AgACMAgDBgAqC92AMTANBgkqhkiG9w0BAQsFAAOCAQEAM7Gr0oDZOCgylJ/ar537
hjNm2KFXutVTYUBrlfyzTpMOjVcZ2bP3caRHkbVvf7b1xG3IYNS4RDMoKhleIUFX
YEi9Cha/wtbIDaAlVDl6HngcFwnI8YU2xn+75glO4T5AUsXOD2PavEmtl/LRKP1j
ctmnZ3LFWUg/FAgPhRX4jqvnFXco4VddZMXkJ2mYQDmEmLpArIFOegMkYB8OwNXn
xf5dyb+CFRSmExB59o7xLloaSj44ugOqfZEvnAq6J94mIo3QT9FtKIlfCXo/p+rD
o0XeTqy5MOkID7qRO29UX6DM+qfs6AVu209moYaozXAsZ+lIjqV+fDRVZhureXZA
qw==
-----END CERTIFICATE-----
Generated at Tue Dec 3 17:30:32 2024 by rpki-client on console-ams.rpki-client.org