Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/wYthNSrybyeQgUk5yZ4UZ4BFOAQ.roa
File: wYthNSrybyeQgUk5yZ4UZ4BFOAQ.roa (raw, json)
Hash identifier: sZcgnmG8qjbrJwEfEcW9qRXRayk1BiErZ7WUiE7LxyY=
Subject key identifier: C1:8B:61:35:2A:F2:6F:27:90:81:49:39:C9:9E:14:67:80:45:38:04
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 018CC72731EAE60B831B27098734A1A276FB
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/wYthNSrybyeQgUk5yZ4UZ4BFOAQ.roa
Signing time: Mon 01 Jan 2024 22:31:23 +0000
ROA not before: Mon 01 Jan 2024 22:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44486
IP address blocks: 185.115.205.0/24 maxlen: 24
176.118.193.0/24 maxlen: 24
2a0c:a300::/29 maxlen: 29
2a12:ea80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:31:ea:e6:0b:83:1b:27:09:87:34:a1:a2:76:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Jan 1 22:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c18b61352af26f2790814939c99e146780453804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:36:d5:72:02:00:76:a2:c2:e6:98:ea:44:
9c:50:0d:60:36:be:31:39:20:7f:96:c2:81:2d:69:
1f:5e:c7:68:94:c4:62:09:17:48:b5:39:bb:7e:94:
0a:00:83:c3:d3:13:e9:d9:96:bd:92:bc:81:e9:b9:
f7:76:01:85:52:db:6e:a6:d4:78:0b:b8:74:2d:49:
8b:57:e1:03:13:20:f5:79:8e:10:71:eb:ae:b4:37:
87:72:11:42:ec:00:06:04:23:d5:4b:d1:25:9c:70:
65:9b:36:7e:2d:e4:36:8f:45:ce:95:47:cc:08:5f:
cd:24:6d:80:56:11:1b:6e:3f:8e:3a:fe:dc:5d:c4:
a2:ce:5c:34:a5:67:06:4e:9f:1f:a3:17:54:e8:37:
75:02:be:cb:90:0e:5d:c2:6e:91:b7:06:a2:36:ca:
a7:1c:9d:bd:2a:64:86:c6:1b:87:aa:8b:bb:e0:08:
00:3d:e1:48:10:84:56:02:c7:c0:81:63:1b:94:f6:
47:95:99:d4:87:4c:3a:2f:be:9d:dd:bc:3b:e0:c7:
1e:fa:2a:54:fd:06:2e:f2:a7:51:19:13:11:ba:db:
c5:a7:b1:a1:dc:7b:26:79:ba:29:7f:56:84:f9:8f:
b9:ec:85:3f:15:18:6c:08:7c:bc:5d:b6:9d:71:60:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8B:61:35:2A:F2:6F:27:90:81:49:39:C9:9E:14:67:80:45:38:04
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/wYthNSrybyeQgUk5yZ4UZ4BFOAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.193.0/24
185.115.205.0/24
IPv6:
2a0c:a300::/29
2a12:ea80::/29
Signature Algorithm: sha256WithRSAEncryption
3d:21:dc:11:b5:96:6f:14:0d:c2:57:37:fb:cf:bb:64:8a:e3:
fc:fe:0b:69:17:f0:2a:d2:32:6d:68:f0:ad:46:e4:9b:8a:1f:
38:80:03:a6:47:26:da:4d:20:a6:45:a6:ec:14:5e:ce:73:58:
a4:e7:86:51:37:0b:4e:22:40:cf:f4:e0:69:02:97:41:1b:7a:
7c:f2:45:7c:d2:7e:d7:dc:3f:f2:2a:bd:5b:5b:82:90:c6:c4:
4b:ae:e7:48:08:ac:03:25:89:1a:1f:fb:c2:4e:b3:b5:15:15:
a9:2a:99:21:e8:19:42:be:ea:01:6d:da:01:a8:e6:3b:c9:3b:
9c:02:2a:e7:46:12:15:8d:b3:77:ff:f9:88:1a:5b:85:1b:b0:
4b:8f:6c:32:dc:d2:d6:6a:63:4f:d9:eb:09:1c:98:97:96:b8:
48:34:fc:c6:0c:55:6a:58:d7:5e:e3:14:e2:4f:4c:6d:f5:23:
b9:d4:54:66:a2:ca:cb:06:62:83:7f:05:05:d0:40:b0:1b:45:
69:34:6b:7f:97:5a:a0:2e:56:29:f4:9a:a8:fa:33:89:81:7b:
59:b5:20:a8:8b:b1:ef:3a:f0:16:bf:9e:86:02:10:4c:92:ad:
a5:e0:fd:6b:c8:58:c2:26:54:a8:3f:ab:d1:03:80:a1:c6:d2:
09:c7:37:4d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYzHJzHq5guDGycJhzShonb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzODRlODhmYjc5YTM3NzZjYjA1ODNlMmI2N2EwYmVjNmRm
YzY4YjgwHhcNMjQwMTAxMjIzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMThiNjEzNTJhZjI2ZjI3OTA4MTQ5MzljOTllMTQ2NzgwNDUzODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0o21XICAHaiwuaY6kScUA1gNr4x
OSB/lsKBLWkfXsdolMRiCRdItTm7fpQKAIPD0xPp2Za9kryB6bn3dgGFUttuptR4
C7h0LUmLV+EDEyD1eY4QceuutDeHchFC7AAGBCPVS9ElnHBlmzZ+LeQ2j0XOlUfM
CF/NJG2AVhEbbj+OOv7cXcSizlw0pWcGTp8foxdU6Dd1Ar7LkA5dwm6RtwaiNsqn
HJ29KmSGxhuHqou74AgAPeFIEIRWAsfAgWMblPZHlZnUh0w6L76d3bw74Mce+ipU
/QYu8qdRGRMRutvFp7Gh3Hsmebopf1aE+Y+57IU/FRhsCHy8XbadcWBrNwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMGLYTUq8m8nkIFJOcmeFGeARTgEMB8GA1UdIwQY
MBaAFAOE6I+3mjd2ywWD4rZ6C+xt/Gi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMt
MzMzYTM4NGQ0MTdkLzEvd1l0aE5TcnlieWVRZ1VrNXlaNFVaNEJGT0FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMtMzMzYTM4NGQ0MTdk
LzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAsHbBAwQA
uXPNMBQEAgACMA4DBQMqDKMAAwUDKhLqgDANBgkqhkiG9w0BAQsFAAOCAQEAPSHc
EbWWbxQNwlc3+8+7ZIrj/P4LaRfwKtIybWjwrUbkm4ofOIADpkcm2k0gpkWm7BRe
znNYpOeGUTcLTiJAz/TgaQKXQRt6fPJFfNJ+19w/8iq9W1uCkMbES67nSAisAyWJ
Gh/7wk6ztRUVqSqZIegZQr7qAW3aAajmO8k7nAIq50YSFY2zd//5iBpbhRuwS49s
MtzS1mpjT9nrCRyYl5a4SDT8xgxValjXXuMU4k9MbfUjudRUZqLKywZig38FBdBA
sBtFaTRrf5daoC5WKfSaqPoziYF7WbUgqIux7zrwFr+ehgIQTJKtpeD9a8hYwiZU
qD+r0QOAocbSCcc3TQ==
-----END CERTIFICATE-----
Generated at Tue May 7 10:17:19 2024 by rpki-client on console-fra.rpki-client.org