Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/WIapsJs_hhHKa3Of8PGF_aAurE4.roa
File: WIapsJs_hhHKa3Of8PGF_aAurE4.roa (raw, json)
Hash identifier: Piubru0hyiVvso4Hp2PqGRavy0uHnSUX2EEPrkRhRVc=
Subject key identifier: 58:86:A9:B0:9B:3F:86:11:CA:6B:73:9F:F0:F1:85:FD:A0:2E:AC:4E
Certificate issuer: /CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Certificate serial: 018CC5DCD578E8010D2CA93043BE75B561F3
Authority key identifier: A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/WIapsJs_hhHKa3Of8PGF_aAurE4.roa
Signing time: Mon 01 Jan 2024 16:30:33 +0000
ROA not before: Mon 01 Jan 2024 16:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24940
IP address blocks: 195.248.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d5:78:e8:01:0d:2c:a9:30:43:be:75:b5:61:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Validity
Not Before: Jan 1 16:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5886a9b09b3f8611ca6b739ff0f185fda02eac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:1f:1c:4f:ae:61:17:5f:84:8a:9c:55:64:
f0:44:9a:7b:59:5d:3f:ca:b9:e8:75:12:35:72:e4:
f3:25:97:e7:56:28:cd:7a:f5:6f:f3:10:b3:5e:00:
98:a3:36:cb:82:cf:36:b3:b7:ff:64:5b:06:9e:58:
d9:7a:b4:77:b7:af:09:5a:89:f4:da:c2:70:0f:64:
39:f7:67:8f:86:a5:6f:e5:45:9b:df:1f:e5:46:6c:
12:90:ec:51:00:98:50:77:63:49:af:7d:cf:2d:bf:
88:2a:cc:2a:52:39:f5:91:b3:1a:9c:40:b3:ec:63:
17:86:05:40:79:29:ca:ec:2f:c5:ef:d0:4b:36:d3:
b2:d6:91:8e:34:cc:31:b3:a3:7b:a8:4d:3f:fa:b0:
b9:82:6f:1a:06:49:99:9d:86:e6:a4:99:bc:1a:37:
7d:a9:47:09:bb:32:06:eb:cd:3f:7f:d8:70:d0:80:
1a:dc:82:3b:6b:e4:47:51:23:85:0d:bc:78:92:24:
ea:db:d8:96:b0:ce:1c:bc:20:55:10:b7:48:2b:06:
38:87:af:01:bf:87:2f:e9:3e:4b:e0:30:08:02:a4:
16:50:96:34:74:d9:44:b7:4e:f6:c7:b1:3e:6b:d0:
e6:eb:c7:d8:80:fa:c4:02:7b:fc:23:28:7f:e5:86:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:86:A9:B0:9B:3F:86:11:CA:6B:73:9F:F0:F1:85:FD:A0:2E:AC:4E
X509v3 Authority Key Identifier:
keyid:A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/WIapsJs_hhHKa3Of8PGF_aAurE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:44:de:c6:a6:02:f0:06:19:94:98:e0:d0:34:1a:04:7f:24:
87:59:b8:fb:fe:d1:98:fa:5e:2a:2d:89:98:63:2e:ed:93:66:
80:d1:73:c6:95:56:3e:f1:04:10:f9:57:ac:cf:90:e5:69:eb:
1c:05:55:d4:b4:fc:10:12:b8:ae:19:73:b9:09:4e:b3:d7:f6:
31:95:e4:bc:6a:c1:40:ed:91:74:bd:cd:ce:16:42:ac:29:35:
a0:1e:57:a8:63:53:e6:1d:93:50:8f:75:6f:ff:30:8e:1e:79:
a0:d3:fa:1d:9f:8f:c5:78:c9:a1:97:45:75:ea:3a:a8:04:4d:
b0:69:e6:92:e9:78:a8:4d:c4:95:88:52:d9:87:fb:3a:64:6f:
59:82:a5:a2:3f:47:e4:2e:87:5e:ae:9b:0b:f3:04:02:bf:42:
fa:44:02:73:46:af:ee:8a:36:ce:f8:d0:40:50:2a:5f:0a:89:
9a:97:15:57:cd:45:58:d0:60:af:46:f1:35:58:85:61:8f:18:
87:e4:20:d9:83:7f:ce:56:fd:aa:7b:dc:81:7f:f8:77:96:ab:
a7:b9:d9:87:c6:8f:3e:f2:37:dd:29:24:e1:e9:64:10:28:f4:
18:77:6f:d3:e7:a5:a8:b1:f3:75:ff:41:af:a2:3f:ce:a5:a9:
a8:96:ef:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3NV46AENLKkwQ751tWHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWRmNmNkODI5ZDk1ZjYzZDkzMWQ1ZGNmOTFjYzhiYTUw
ZjkwYjAwHhcNMjQwMTAxMTYzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODg2YTliMDliM2Y4NjExY2E2YjczOWZmMGYxODVmZGEwMmVhYzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPYfHE+uYRdfhIqcVWTwRJp7WV0/
yrnodRI1cuTzJZfnVijNevVv8xCzXgCYozbLgs82s7f/ZFsGnljZerR3t68JWon0
2sJwD2Q592ePhqVv5UWb3x/lRmwSkOxRAJhQd2NJr33PLb+IKswqUjn1kbManECz
7GMXhgVAeSnK7C/F79BLNtOy1pGONMwxs6N7qE0/+rC5gm8aBkmZnYbmpJm8Gjd9
qUcJuzIG680/f9hw0IAa3II7a+RHUSOFDbx4kiTq29iWsM4cvCBVELdIKwY4h68B
v4cv6T5L4DAIAqQWUJY0dNlEt072x7E+a9Dm68fYgPrEAnv8Iyh/5YaXOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFiGqbCbP4YRymtzn/Dxhf2gLqxOMB8GA1UdIwQY
MBaAFKFd9s2CnZX2PZMdXc+RzIulD5CwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1YzMnpZS2RsZlk5a3gxZHo1SE1pNlVQa0xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNjhjNGEtNzZjMC00ZmJlLWE5ZWUt
MGRmNzNjMmY2YTlmLzEvV0lhcHNKc19oaEhLYTNPZjhQR0ZfYUF1ckU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wNjhjNGEtNzZjMC00ZmJlLWE5ZWUtMGRmNzNjMmY2YTlm
LzEvb1YzMnpZS2RsZlk5a3gxZHo1SE1pNlVQa0xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/jgMA0G
CSqGSIb3DQEBCwUAA4IBAQB9RN7GpgLwBhmUmODQNBoEfySHWbj7/tGY+l4qLYmY
Yy7tk2aA0XPGlVY+8QQQ+Vesz5DlaescBVXUtPwQEriuGXO5CU6z1/YxleS8asFA
7ZF0vc3OFkKsKTWgHleoY1PmHZNQj3Vv/zCOHnmg0/odn4/FeMmhl0V16jqoBE2w
aeaS6XioTcSViFLZh/s6ZG9ZgqWiP0fkLoderpsL8wQCv0L6RAJzRq/uijbO+NBA
UCpfComalxVXzUVY0GCvRvE1WIVhjxiH5CDZg3/OVv2qe9yBf/h3lqunudmHxo8+
8jfdKSTh6WQQKPQYd2/T56WosfN1/0Gvoj/Opamolu8q
-----END CERTIFICATE-----
Generated at Fri May 3 12:39:18 2024 by rpki-client on console-fra.rpki-client.org