Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/WCeTutGNYOUSZToRg8kMosw7lA4.roa
File: WCeTutGNYOUSZToRg8kMosw7lA4.roa (raw, json)
Hash identifier: gg+41+WYV+q0hVMBCSFUkdSEGiTwP0jqkMt5QVrD76I=
Subject key identifier: 58:27:93:BA:D1:8D:60:E5:12:65:3A:11:83:C9:0C:A2:CC:3B:94:0E
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 018CC7273E1501BD0BB33AB35D2B6EF1759F
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/WCeTutGNYOUSZToRg8kMosw7lA4.roa
Signing time: Mon 01 Jan 2024 22:31:26 +0000
ROA not before: Mon 01 Jan 2024 22:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57202
IP address blocks: 194.183.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3e:15:01:bd:0b:b3:3a:b3:5d:2b:6e:f1:75:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 22:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=582793bad18d60e512653a1183c90ca2cc3b940e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d8:fa:73:95:75:75:f6:c5:9e:2d:2b:da:65:
b7:5c:13:a5:6f:be:41:1e:3d:0a:00:fc:8e:e5:3a:
5f:a7:d8:8d:ae:81:41:7f:09:d7:b7:4b:06:81:69:
0c:4a:2c:d6:0c:9a:7d:4f:f9:64:fa:5d:77:f4:fd:
b3:a5:f3:0d:8c:ee:a5:72:1d:a2:6a:4e:84:49:d7:
53:59:15:6c:81:f0:4c:48:94:9a:ce:8c:23:f4:7e:
61:8e:ad:a4:03:51:76:bf:b7:a7:d2:5f:05:4f:d5:
76:21:7b:25:79:fd:13:49:bd:20:d3:d3:b4:bb:fe:
9a:33:5b:b3:cc:fb:71:6a:f5:1c:a1:14:13:6e:d4:
0b:b7:21:a3:57:7e:03:06:74:4b:9c:e8:9d:a3:c7:
7b:63:8a:3e:c6:ff:dc:4d:02:38:b8:a9:5b:97:b3:
ed:70:a6:f1:0a:fc:69:93:ab:7c:10:16:0d:0c:a6:
a8:5d:da:1b:de:a7:f2:20:61:46:39:e5:70:bc:9a:
7f:99:48:00:ce:c4:ce:02:c0:73:e9:87:e7:f5:44:
b1:e0:0d:05:0e:cc:3a:17:85:20:86:bb:1f:62:5f:
42:62:0d:ba:7b:09:a0:98:a7:a7:b1:21:14:b5:54:
d7:56:15:39:6b:64:f1:f5:fe:54:33:85:cf:b0:ca:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:93:BA:D1:8D:60:E5:12:65:3A:11:83:C9:0C:A2:CC:3B:94:0E
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/WCeTutGNYOUSZToRg8kMosw7lA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.180.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ce:07:31:ba:30:f1:fe:36:1e:2e:39:a4:76:d1:10:fc:a7:
ff:6c:92:6a:2e:8c:a9:f4:37:61:0e:ea:16:c7:bd:8e:41:da:
98:58:d8:90:a8:30:e7:47:33:83:13:55:2d:5b:59:29:ca:a5:
b9:9e:4f:68:40:a4:6e:15:ae:9c:c2:d6:94:af:71:70:3c:fb:
d4:88:83:70:9a:8b:3c:bd:2d:79:e1:e5:91:c1:6c:a6:b5:95:
5e:a4:e2:f5:f2:9a:af:7c:fe:19:3d:18:5f:77:e7:4b:d8:ed:
39:6e:2c:06:ee:de:67:cc:9b:2e:1a:3a:cc:18:64:92:a7:6d:
dc:ae:ac:53:de:11:e5:82:8a:01:89:82:74:26:f5:bc:cd:c0:
40:5d:9f:df:31:e9:b0:dd:da:41:ab:ce:38:bc:3c:e1:6a:80:
8f:67:1e:49:7b:04:3e:12:7b:c9:3c:bf:17:65:4e:0d:d4:5c:
12:73:4a:f2:54:92:b9:f4:dc:8e:e2:e4:69:fb:a8:0c:a6:7c:
0d:8c:f3:76:a8:35:2b:43:ab:8b:1a:97:36:10:e1:ab:8c:2f:
a5:53:1c:d3:4f:80:d5:04:2f:2a:7d:57:d2:b1:b5:e4:cf:c1:
d5:ac:0d:30:c5:43:8d:31:64:16:8d:d3:03:72:dd:15:b8:ca:
05:45:12:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJz4VAb0LszqzXStu8XWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh
M2FhZTkwHhcNMjQwMTAxMjIzMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODI3OTNiYWQxOGQ2MGU1MTI2NTNhMTE4M2M5MGNhMmNjM2I5NDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNj6c5V1dfbFni0r2mW3XBOlb75B
Hj0KAPyO5Tpfp9iNroFBfwnXt0sGgWkMSizWDJp9T/lk+l139P2zpfMNjO6lch2i
ak6ESddTWRVsgfBMSJSazowj9H5hjq2kA1F2v7en0l8FT9V2IXslef0TSb0g09O0
u/6aM1uzzPtxavUcoRQTbtQLtyGjV34DBnRLnOido8d7Y4o+xv/cTQI4uKlbl7Pt
cKbxCvxpk6t8EBYNDKaoXdob3qfyIGFGOeVwvJp/mUgAzsTOAsBz6Yfn9USx4A0F
Dsw6F4UghrsfYl9CYg26ewmgmKensSEUtVTXVhU5a2Tx9f5UM4XPsMoB2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFgnk7rRjWDlEmU6EYPJDKLMO5QOMB8GA1UdIwQY
MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt
YTZjNDllYjI4Mjg3LzEvV0NlVHV0R05ZT1VTWlRvUmc4a01vc3c3bEE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3
LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwre0MA0G
CSqGSIb3DQEBCwUAA4IBAQDFzgcxujDx/jYeLjmkdtEQ/Kf/bJJqLoyp9DdhDuoW
x72OQdqYWNiQqDDnRzODE1UtW1kpyqW5nk9oQKRuFa6cwtaUr3FwPPvUiINwmos8
vS154eWRwWymtZVepOL18pqvfP4ZPRhfd+dL2O05biwG7t5nzJsuGjrMGGSSp23c
rqxT3hHlgooBiYJ0JvW8zcBAXZ/fMemw3dpBq844vDzhaoCPZx5JewQ+EnvJPL8X
ZU4N1FwSc0ryVJK59NyO4uRp+6gMpnwNjPN2qDUrQ6uLGpc2EOGrjC+lUxzTT4DV
BC8qfVfSsbXkz8HVrA0wxUONMWQWjdMDct0VuMoFRRK5
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:30:26 2024 by rpki-client on console-ams.rpki-client.org