Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/wsAIso3wAQstbFPjycPqJ5yCvWY.roa
File: wsAIso3wAQstbFPjycPqJ5yCvWY.roa (raw, json)
Hash identifier: FnlqJUb9bpG1mGQe2PJ0Shv5t8e9qIJM26azVs0nW9o=
Subject key identifier: C2:C0:08:B2:8D:F0:01:0B:2D:6C:53:E3:C9:C3:EA:27:9C:82:BD:66
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0190646FAD37CC7E30F0BCA4D8DE76E21C7A
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/wsAIso3wAQstbFPjycPqJ5yCvWY.roa
Signing time: Sat 29 Jun 2024 14:39:18 +0000
ROA not before: Sat 29 Jun 2024 14:39:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34463
IP address blocks: 213.202.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:6f:ad:37:cc:7e:30:f0:bc:a4:d8:de:76:e2:1c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jun 29 14:39:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2c008b28df0010b2d6c53e3c9c3ea279c82bd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:d3:f4:73:d1:05:76:8d:11:22:c1:f8:30:
4b:5d:be:95:b3:10:86:c7:fa:8a:db:0c:20:a9:1c:
7f:e0:ba:cf:e8:c4:05:3d:fa:69:24:39:20:b6:fb:
ff:84:de:4a:cb:c3:21:a5:16:da:f1:56:fe:89:d6:
2e:30:bb:80:f5:e1:48:9f:d4:a4:22:57:28:e5:c8:
08:b8:70:ce:74:0c:0f:16:e5:76:0b:c9:cd:5b:d7:
c3:3d:2d:52:47:f6:01:06:32:60:ad:84:1f:b8:84:
89:69:ad:d9:b3:c2:66:de:bb:2d:ec:65:45:8a:1b:
07:13:a3:cf:b0:07:1d:9a:ca:db:3f:48:fe:fc:42:
bc:b2:20:48:ad:eb:eb:3e:a6:84:42:73:99:20:32:
7f:33:99:42:06:a2:50:07:63:da:fa:d4:51:ee:f6:
76:8f:19:08:a3:0d:a9:b3:83:d6:d1:42:ca:f8:93:
81:73:5f:1e:57:97:b2:b1:6e:96:3c:10:d5:a9:b9:
6f:eb:18:bb:c7:c0:2c:f0:9d:63:a1:85:10:ab:94:
5c:d6:bf:48:82:bf:f2:85:c8:68:88:c2:b0:34:b3:
56:bf:ed:b4:98:c0:8e:78:a9:44:22:d9:0d:b2:61:
9f:40:a0:a4:a5:f4:f8:4e:f9:42:54:e0:3e:73:4d:
6c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:08:B2:8D:F0:01:0B:2D:6C:53:E3:C9:C3:EA:27:9C:82:BD:66
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/wsAIso3wAQstbFPjycPqJ5yCvWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.202.118.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d9:50:71:3f:7d:dc:99:78:ad:a9:fd:68:55:9c:e1:d2:63:
18:e8:2e:09:c7:c3:fa:34:3b:3b:5d:26:1d:bc:53:4b:57:a1:
6e:d1:72:ea:23:f9:06:71:16:38:18:9f:6f:0f:ab:51:5a:c2:
23:35:b5:53:25:43:c0:f9:68:d6:04:a5:c1:1b:4f:80:f1:2a:
ec:10:bc:e0:e8:af:64:f9:9f:a7:35:dd:ae:62:b9:84:a9:11:
50:42:f9:9e:de:68:80:9b:c7:11:f6:86:99:74:77:fb:08:b8:
7e:18:b6:f4:27:b0:fe:b7:fa:c2:ba:d0:d3:cf:90:f2:64:39:
cd:5f:cc:60:19:05:18:9c:d7:af:62:24:0f:63:ef:b6:92:91:
25:f8:7c:0e:e1:41:f1:84:b7:04:1c:cc:bd:0b:81:ee:b3:ba:
07:d7:0a:bc:f0:ae:0e:52:19:67:38:46:b6:e6:f9:55:f6:8c:
56:53:f4:4b:a5:e6:d0:c8:50:cb:e5:cd:28:2c:1f:26:f4:ab:
5b:16:f8:4b:88:33:63:c7:81:9c:89:a6:3c:e5:7a:75:7a:4c:
4f:53:f8:45:01:d9:5b:30:dd:67:e4:15:2f:73:c6:5d:53:92:
aa:31:5d:3d:b1:c4:96:27:37:58:a1:b6:76:b4:2c:22:7e:04:
c2:3c:ad:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBkb603zH4w8Lyk2N524hx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm
MDIwMjAwHhcNMjQwNjI5MTQzOTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmMwMDhiMjhkZjAwMTBiMmQ2YzUzZTNjOWMzZWEyNzljODJiZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOjT9HPRBXaNESLB+DBLXb6VsxCG
x/qK2wwgqRx/4LrP6MQFPfppJDkgtvv/hN5Ky8MhpRba8Vb+idYuMLuA9eFIn9Sk
Ilco5cgIuHDOdAwPFuV2C8nNW9fDPS1SR/YBBjJgrYQfuISJaa3Zs8Jm3rst7GVF
ihsHE6PPsAcdmsrbP0j+/EK8siBIrevrPqaEQnOZIDJ/M5lCBqJQB2Pa+tRR7vZ2
jxkIow2ps4PW0ULK+JOBc18eV5eysW6WPBDVqblv6xi7x8As8J1joYUQq5Rc1r9I
gr/yhchoiMKwNLNWv+20mMCOeKlEItkNsmGfQKCkpfT4TvlCVOA+c01sdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMLACLKN8AELLWxT48nD6iecgr1mMB8GA1UdIwQY
MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt
NGI2YzFjZjlmZTRmLzEvd3NBSXNvM3dBUXN0YkZQanljUHFKNXlDdldZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm
LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cp2MA0G
CSqGSIb3DQEBCwUAA4IBAQBg2VBxP33cmXitqf1oVZzh0mMY6C4Jx8P6NDs7XSYd
vFNLV6Fu0XLqI/kGcRY4GJ9vD6tRWsIjNbVTJUPA+WjWBKXBG0+A8SrsELzg6K9k
+Z+nNd2uYrmEqRFQQvme3miAm8cR9oaZdHf7CLh+GLb0J7D+t/rCutDTz5DyZDnN
X8xgGQUYnNevYiQPY++2kpEl+HwO4UHxhLcEHMy9C4Hus7oH1wq88K4OUhlnOEa2
5vlV9oxWU/RLpebQyFDL5c0oLB8m9KtbFvhLiDNjx4GciaY85Xp1ekxPU/hFAdlb
MN1n5BUvc8ZdU5KqMV09scSWJzdYobZ2tCwifgTCPK3O
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:23:40 2024 by rpki-client on console-ams.rpki-client.org