Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wAU-KRA2ymKslA8VsIrZXFc2RbE.roa
File: wAU-KRA2ymKslA8VsIrZXFc2RbE.roa (raw, json)
Hash identifier: 6Ci2RME21M/ZRAGzzB2WVqImJqQiDNP7u5VmCR+4MQM=
Subject key identifier: C0:05:3E:29:10:36:CA:62:AC:94:0F:15:B0:8A:D9:5C:57:36:45:B1
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019193143CC257530D828A56BFD59E5B0D7E
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wAU-KRA2ymKslA8VsIrZXFc2RbE.roa
Signing time: Tue 27 Aug 2024 09:04:22 +0000
ROA not before: Tue 27 Aug 2024 09:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34582
IP address blocks: 45.150.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:14:3c:c2:57:53:0d:82:8a:56:bf:d5:9e:5b:0d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 27 09:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0053e291036ca62ac940f15b08ad95c573645b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:b8:f0:2c:86:6a:1a:d8:00:06:c9:9f:db:
ed:29:57:a7:36:6f:96:a1:7b:4d:aa:4d:23:90:4a:
53:9f:6b:93:3c:96:e7:44:f0:d7:5d:1f:e4:02:ff:
ca:e6:5f:76:f2:21:bb:13:ce:3b:5a:c0:b2:fa:7a:
3d:2e:28:36:d5:ab:9b:97:d5:94:2e:aa:85:24:20:
de:ae:ee:cd:49:05:21:62:26:e2:18:55:bf:17:80:
8c:85:b6:05:df:2a:f0:c0:a0:c0:66:1c:6d:eb:58:
3c:9f:63:e5:b0:ee:98:f4:46:97:ce:cb:27:0b:dc:
24:49:1f:6f:61:05:19:b3:8d:b3:75:df:4c:76:a5:
cc:e6:b5:89:3b:32:31:b0:e4:c1:12:9a:24:d4:ae:
fc:13:7c:b3:58:ab:08:f9:7f:73:eb:31:6c:3e:1f:
10:d7:69:6c:dc:8e:ff:4e:a1:3a:82:64:01:af:a0:
b9:06:7a:45:ae:e1:e0:77:fa:28:26:24:36:2e:c1:
49:fd:90:a2:66:e6:a6:17:b2:00:b9:f1:3b:0b:ef:
f5:76:21:e5:9c:5e:8d:5a:65:f6:77:b4:b6:0b:d2:
7e:a4:52:29:c3:2f:d6:d0:6f:0d:72:94:34:8a:69:
8d:09:8a:70:cf:db:5b:ac:83:a3:a6:2d:72:ac:0c:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:05:3E:29:10:36:CA:62:AC:94:0F:15:B0:8A:D9:5C:57:36:45:B1
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wAU-KRA2ymKslA8VsIrZXFc2RbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:26:d1:a8:72:08:3c:c2:31:a9:6a:d2:eb:ad:8a:0c:fb:8e:
1c:1b:4e:76:18:b8:cf:c0:6c:e6:2b:67:6a:20:48:7c:27:94:
58:c7:9a:5a:0e:4d:69:10:cd:6b:1c:40:a4:86:81:9a:73:a6:
01:3c:1f:2e:af:8d:45:47:86:92:39:11:d3:bd:7b:33:60:e7:
9c:fb:22:a3:fb:85:94:72:c1:56:d1:2c:95:57:c7:86:42:a4:
d9:76:70:7a:0d:ed:d2:14:9b:56:8a:39:61:09:82:8c:0d:f9:
7f:1a:1f:e2:1f:04:4e:92:e5:61:37:ce:02:48:ec:6c:77:cb:
94:26:30:e6:71:36:52:16:76:3a:74:ea:34:67:c9:17:5e:cd:
cc:22:7b:86:97:a5:cd:f0:56:1e:3e:85:77:2a:b0:84:8b:a5:
13:45:66:c4:22:56:5a:92:18:7a:a1:fd:1f:d9:b8:31:c1:ab:
63:a8:0c:59:c9:a0:d9:a2:d9:71:85:7d:c2:3b:b1:54:ba:ea:
35:eb:9c:d5:a7:4d:fb:a9:20:7e:66:db:0d:73:4d:e8:b1:19:
c4:10:7f:c6:ff:85:43:a9:e7:b5:a2:78:06:0d:7c:4d:16:46:
a9:95:61:c9:ba:a8:51:66:be:c3:1e:31:8e:b8:02:f5:83:19:
d0:f7:5a:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGTFDzCV1MNgopWv9WeWw1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwODI3MDkwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDA1M2UyOTEwMzZjYTYyYWM5NDBmMTViMDhhZDk1YzU3MzY0NWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NG48CyGahrYAAbJn9vtKVenNm+W
oXtNqk0jkEpTn2uTPJbnRPDXXR/kAv/K5l928iG7E847WsCy+no9Lig21aubl9WU
LqqFJCDeru7NSQUhYibiGFW/F4CMhbYF3yrwwKDAZhxt61g8n2PlsO6Y9EaXzssn
C9wkSR9vYQUZs42zdd9MdqXM5rWJOzIxsOTBEpok1K78E3yzWKsI+X9z6zFsPh8Q
12ls3I7/TqE6gmQBr6C5BnpFruHgd/ooJiQ2LsFJ/ZCiZuamF7IAufE7C+/1diHl
nF6NWmX2d7S2C9J+pFIpwy/W0G8NcpQ0immNCYpwz9tbrIOjpi1yrAwYGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMAFPikQNspirJQPFbCK2VxXNkWxMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvd0FVLUtSQTJ5bUtzbEE4VnNJclpYRmMyUmJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZZxMA0G
CSqGSIb3DQEBCwUAA4IBAQBvJtGocgg8wjGpatLrrYoM+44cG052GLjPwGzmK2dq
IEh8J5RYx5paDk1pEM1rHECkhoGac6YBPB8ur41FR4aSORHTvXszYOec+yKj+4WU
csFW0SyVV8eGQqTZdnB6De3SFJtWijlhCYKMDfl/Gh/iHwROkuVhN84CSOxsd8uU
JjDmcTZSFnY6dOo0Z8kXXs3MInuGl6XN8FYePoV3KrCEi6UTRWbEIlZakhh6of0f
2bgxwatjqAxZyaDZotlxhX3CO7FUuuo165zVp037qSB+ZtsNc03osRnEEH/G/4VD
qee1ongGDXxNFkaplWHJuqhRZr7DHjGOuAL1gxnQ91r/
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:13:43 2024 by rpki-client on console-fra.rpki-client.org