Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/WfiuD4Hq3uBqyNOsXrKKTPEsmCY.roa
File: WfiuD4Hq3uBqyNOsXrKKTPEsmCY.roa (raw, json)
Hash identifier: Uv5Ak+XUCa01EOeYweWAIdqYI/Ii1vIuW2nmAOn+IVY=
Subject key identifier: 59:F8:AE:0F:81:EA:DE:E0:6A:C8:D3:AC:5E:B2:8A:4C:F1:2C:98:26
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 0190DBE558A18E80F1CFC5B6F56FEC91614B
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/WfiuD4Hq3uBqyNOsXrKKTPEsmCY.roa
Signing time: Mon 22 Jul 2024 19:22:39 +0000
ROA not before: Mon 22 Jul 2024 19:22:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 185.75.204.0/24 maxlen: 24
185.75.205.0/24 maxlen: 24
185.75.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:db:e5:58:a1:8e:80:f1:cf:c5:b6:f5:6f:ec:91:61:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Jul 22 19:22:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59f8ae0f81eadee06ac8d3ac5eb28a4cf12c9826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:95:8c:ab:3f:a0:06:35:fb:cc:8c:52:06:
da:20:7a:e8:74:dc:99:69:f6:75:35:ab:47:51:48:
41:5c:61:27:47:63:33:e5:be:d2:e0:d0:2f:d4:d4:
77:b2:84:9b:98:86:3d:b1:e9:48:63:dc:b6:7d:fc:
38:77:fa:3e:a8:8f:2b:d2:69:55:ae:33:e3:88:af:
4b:92:4b:de:03:a6:ab:85:9f:ea:8a:e3:dd:9e:88:
28:43:f0:05:d9:4a:e4:77:4e:e2:4d:0f:6a:67:55:
5e:61:dc:9c:a5:12:90:7c:15:59:8d:be:83:2c:6e:
0a:9e:5d:7c:d1:2b:e6:49:b7:64:a7:fd:81:ff:48:
8c:26:98:4b:d1:ff:49:01:ab:73:bc:99:39:43:12:
87:6f:8f:ab:87:78:9d:b4:8d:5a:22:6c:ff:34:5f:
c9:19:5f:fe:93:e6:5a:cb:bb:7b:2d:b0:38:9c:34:
fd:82:4b:c2:d6:c9:29:62:e8:1f:f9:d8:61:bf:65:
35:a2:cf:23:57:85:de:d5:17:e6:93:8d:7b:31:7a:
3e:a0:1a:8c:02:8a:bb:73:83:ff:bc:f6:f4:4a:c4:
f3:54:78:86:1a:0f:04:04:97:9d:7f:b8:bf:bd:28:
86:2d:2b:a0:99:0a:fb:12:22:7b:f4:4d:96:ef:dc:
d7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F8:AE:0F:81:EA:DE:E0:6A:C8:D3:AC:5E:B2:8A:4C:F1:2C:98:26
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/WfiuD4Hq3uBqyNOsXrKKTPEsmCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.204.0-185.75.206.255
Signature Algorithm: sha256WithRSAEncryption
05:31:6c:be:99:5b:c7:58:4c:1a:a7:b9:3a:2f:5c:2f:63:e9:
dd:56:f8:6f:b0:af:e8:b4:cb:dc:11:8e:31:1c:ff:cd:93:24:
bf:84:7b:0f:09:43:4f:0f:48:67:93:8a:c5:67:8c:84:35:84:
72:60:34:d6:82:9c:ff:c8:59:d1:00:18:9c:e4:ac:e1:8d:95:
ad:43:10:65:81:bb:a8:b8:a1:8d:cc:f8:fe:78:90:58:2e:ab:
71:5f:d5:58:26:7a:55:55:ca:5d:7c:bd:ee:b1:30:6a:58:6d:
1a:52:a2:d6:65:26:c7:4a:25:1f:fd:7f:e4:5f:26:02:01:b6:
88:2f:46:84:3e:11:e2:62:7d:08:e3:4a:8f:8d:7d:3c:c7:e1:
99:4a:26:be:aa:ea:ae:38:45:ce:0d:4f:54:38:ce:d5:a8:25:
8f:c6:1d:c1:8e:52:bd:be:82:85:cf:21:a5:c2:64:97:9a:76:
23:5c:0e:62:94:35:00:70:56:99:2b:d2:9c:fd:d2:b9:57:19:
f5:3e:f8:ce:37:80:3a:64:9d:25:54:88:6c:69:fa:0b:05:8a:
63:a1:fb:2f:83:96:3b:17:5e:68:45:2a:f4:01:4b:30:31:8b:
38:05:f4:d0:d6:ae:92:f9:64:1d:d1:f9:8f:1f:db:d0:71:85:
d6:10:c3:cf
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZDb5VihjoDxz8W29W/skWFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh
MzljNzEwHhcNMjQwNzIyMTkyMjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWY4YWUwZjgxZWFkZWUwNmFjOGQzYWM1ZWIyOGE0Y2YxMmM5ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua6VjKs/oAY1+8yMUgbaIHrodNyZ
afZ1NatHUUhBXGEnR2Mz5b7S4NAv1NR3soSbmIY9selIY9y2ffw4d/o+qI8r0mlV
rjPjiK9LkkveA6arhZ/qiuPdnogoQ/AF2Urkd07iTQ9qZ1VeYdycpRKQfBVZjb6D
LG4Knl180SvmSbdkp/2B/0iMJphL0f9JAatzvJk5QxKHb4+rh3idtI1aImz/NF/J
GV/+k+Zay7t7LbA4nDT9gkvC1skpYugf+dhhv2U1os8jV4Xe1Rfmk417MXo+oBqM
Aoq7c4P/vPb0SsTzVHiGGg8EBJedf7i/vSiGLSugmQr7EiJ79E2W79zXVQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFn4rg+B6t7gasjTrF6yikzxLJgmMB8GA1UdIwQY
MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt
NmVkNTRkM2ZlNGY0LzEvV2ZpdUQ0SHEzdUJxeU5Pc1hyS0tUUEVzbUNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0
LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5S8wD
BAC5S84wDQYJKoZIhvcNAQELBQADggEBAAUxbL6ZW8dYTBqnuTovXC9j6d1W+G+w
r+i0y9wRjjEc/82TJL+Eew8JQ08PSGeTisVnjIQ1hHJgNNaCnP/IWdEAGJzkrOGN
la1DEGWBu6i4oY3M+P54kFguq3Ff1VgmelVVyl18ve6xMGpYbRpSotZlJsdKJR/9
f+RfJgIBtogvRoQ+EeJifQjjSo+NfTzH4ZlKJr6q6q44Rc4NT1Q4ztWoJY/GHcGO
Ur2+goXPIaXCZJeadiNcDmKUNQBwVpkr0pz90rlXGfU++M43gDpknSVUiGxp+gsF
imOh+y+DljsXXmhFKvQBSzAxizgF9NDWrpL5ZB3R+Y8f29BxhdYQw88=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:21 2024 by rpki-client on console-ams.rpki-client.org