Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/WkOXk29GIGxV1mXN1SmmMdmARWs.roa
File: WkOXk29GIGxV1mXN1SmmMdmARWs.roa (raw, json)
Hash identifier: TFHgetHnoc1O/OLhpxzHup39TTrZ7ezRt/JcI0r7+rI=
Subject key identifier: 5A:43:97:93:6F:46:20:6C:55:D6:65:CD:D5:29:A6:31:D9:80:45:6B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 018CC8702733FE839BE22370F02C4B852CBD
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/WkOXk29GIGxV1mXN1SmmMdmARWs.roa
Signing time: Tue 02 Jan 2024 04:30:42 +0000
ROA not before: Tue 02 Jan 2024 04:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12941
IP address blocks: 193.141.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:27:33:fe:83:9b:e2:23:70:f0:2c:4b:85:2c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Jan 2 04:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a4397936f46206c55d665cdd529a631d980456b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fe:76:40:67:4b:84:ae:61:81:fb:33:06:59:
30:6d:66:9f:33:40:eb:76:85:0d:ab:d2:11:4b:3e:
ba:b8:12:c3:aa:25:c9:2f:65:8a:78:96:33:ee:2a:
d4:cb:a3:d0:0b:6f:a6:f1:ec:3c:79:96:2b:ea:73:
f2:ce:f9:3e:07:ee:00:2c:4b:82:f9:3c:ea:31:3b:
c3:e7:22:f0:65:4c:00:d2:22:b5:36:0a:3b:c6:36:
c5:ee:9b:cc:5f:54:08:da:66:e3:eb:9b:0e:a3:99:
96:36:a4:20:7c:33:ed:4a:f5:7b:cb:9f:39:a2:a9:
50:a1:3f:9c:ea:1d:d2:93:b6:6b:9f:79:0c:72:98:
53:58:81:41:37:73:86:90:91:6b:52:c2:5b:df:7b:
f3:38:21:d2:4a:99:3f:7a:18:9c:da:9d:a9:e6:07:
e0:20:71:0c:13:6a:16:a7:33:3a:ae:c4:e1:65:05:
a3:b4:fb:15:3d:09:a5:bf:fe:5a:0d:c8:eb:9a:0b:
87:af:84:65:17:e0:24:87:94:97:7a:2d:60:2e:f4:
dc:bf:ca:cc:08:fe:c5:23:ec:68:0e:62:2b:87:4f:
77:23:3a:c9:9a:70:ad:d7:73:f4:59:35:81:71:20:
53:e1:40:12:e6:fc:76:6c:b1:96:50:e6:ed:58:f6:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:43:97:93:6F:46:20:6C:55:D6:65:CD:D5:29:A6:31:D9:80:45:6B
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/WkOXk29GIGxV1mXN1SmmMdmARWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e6:fc:de:69:c1:e9:4a:c5:43:99:ab:d1:b0:40:0b:1e:09:
11:38:ed:c8:45:2c:c1:f6:8a:97:8a:09:21:50:31:90:a3:87:
bb:bf:f5:38:90:0f:e4:ee:85:df:4b:a1:cc:ff:9b:66:ec:71:
22:29:7c:2b:ec:bc:73:b8:7a:3b:24:ae:58:02:c2:63:1f:94:
2f:89:80:d7:83:26:14:6a:d2:4d:8b:91:d1:67:df:0f:e1:7e:
3b:ed:39:c0:5a:5e:22:50:36:04:32:b8:ae:40:f2:1c:3f:00:
0d:73:d3:78:33:2a:66:b8:03:67:3f:91:6a:4b:84:8c:a8:c3:
e7:e7:1f:22:e7:07:76:e1:1a:bd:52:f7:56:6b:e7:b6:f4:0d:
72:0d:a1:13:f6:49:2d:b6:63:f5:31:92:91:dd:3e:ee:96:e9:
4b:aa:8e:0c:87:95:b4:ab:53:fb:d5:8c:d2:d5:6c:bd:bc:4b:
dd:74:22:d6:e9:35:e6:fd:4c:09:61:b5:6b:2c:a7:c3:58:cf:
b8:da:8b:b7:b7:05:b5:7b:71:48:e6:16:5c:86:22:17:f2:3b:
86:4c:ed:ac:47:72:7e:91:07:22:94:ed:99:06:33:0e:fa:6f:
52:03:e2:b7:a1:d1:49:a5:8c:b3:0f:90:95:cd:1c:45:4c:40:
fe:e5:13:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcCcz/oOb4iNw8CxLhSy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMzAwMzAwZGU1MDA1YWRhMmJiNjZjMjY4OTk4YTQwYzMz
YWQyM2IwHhcNMjQwMTAyMDQzMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTQzOTc5MzZmNDYyMDZjNTVkNjY1Y2RkNTI5YTYzMWQ5ODA0NTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP52QGdLhK5hgfszBlkwbWafM0Dr
doUNq9IRSz66uBLDqiXJL2WKeJYz7irUy6PQC2+m8ew8eZYr6nPyzvk+B+4ALEuC
+TzqMTvD5yLwZUwA0iK1Ngo7xjbF7pvMX1QI2mbj65sOo5mWNqQgfDPtSvV7y585
oqlQoT+c6h3Sk7Zrn3kMcphTWIFBN3OGkJFrUsJb33vzOCHSSpk/ehic2p2p5gfg
IHEME2oWpzM6rsThZQWjtPsVPQmlv/5aDcjrmguHr4RlF+Akh5SXei1gLvTcv8rM
CP7FI+xoDmIrh093IzrJmnCt13P0WTWBcSBT4UAS5vx2bLGWUObtWPYZYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFpDl5NvRiBsVdZlzdUppjHZgEVrMB8GA1UdIwQY
MBaAFIEwAwDeUAWtortmwmiZikDDOtI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYt
ZGZlZTk4NDAzN2FjLzEvV2tPWGsyOUdJR3hWMW1YTjFTbW1NZG1BUldzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYtZGZlZTk4NDAzN2Fj
LzEvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY2wMA0G
CSqGSIb3DQEBCwUAA4IBAQCO5vzeacHpSsVDmavRsEALHgkROO3IRSzB9oqXigkh
UDGQo4e7v/U4kA/k7oXfS6HM/5tm7HEiKXwr7LxzuHo7JK5YAsJjH5QviYDXgyYU
atJNi5HRZ98P4X477TnAWl4iUDYEMriuQPIcPwANc9N4MypmuANnP5FqS4SMqMPn
5x8i5wd24Rq9UvdWa+e29A1yDaET9kkttmP1MZKR3T7ululLqo4Mh5W0q1P71YzS
1Wy9vEvddCLW6TXm/UwJYbVrLKfDWM+42ou3twW1e3FI5hZchiIX8juGTO2sR3J+
kQcilO2ZBjMO+m9SA+K3odFJpYyzD5CVzRxFTED+5RM+
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:21:52 2024 by rpki-client on console-ams.rpki-client.org