Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/WLTe7A9_LvCFMqKgi7UbWgpkHe0.roa
File: WLTe7A9_LvCFMqKgi7UbWgpkHe0.roa (raw, json)
Hash identifier: W7pLMogVwejQfzc0Egb7Xy48bYeFctZDA5eFVg/KRNU=
Subject key identifier: 58:B4:DE:EC:0F:7F:2E:F0:85:32:A2:A0:8B:B5:1B:5A:0A:64:1D:ED
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 0191984226676C9FC91F9097A0EAEE960A5E
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/WLTe7A9_LvCFMqKgi7UbWgpkHe0.roa
Signing time: Wed 28 Aug 2024 09:12:37 +0000
ROA not before: Wed 28 Aug 2024 09:12:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203668
IP address blocks: 185.155.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:42:26:67:6c:9f:c9:1f:90:97:a0:ea:ee:96:0a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Aug 28 09:12:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58b4deec0f7f2ef08532a2a08bb51b5a0a641ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:92:14:cc:8c:94:08:5b:01:5f:5c:e1:b4:
ee:06:65:c9:16:81:50:24:10:62:97:11:f0:67:73:
e2:da:08:29:c7:15:f6:ea:23:1a:38:f0:68:48:8f:
ff:81:f0:3c:f0:da:73:88:34:a6:52:dc:42:09:79:
42:e1:8c:22:40:b0:95:40:bd:16:63:5f:8d:18:6f:
17:a2:20:9d:06:c6:e6:20:5d:87:8c:33:d5:5d:d7:
df:30:30:9d:0e:a5:fb:17:fa:db:fd:0b:eb:b4:9c:
85:97:05:64:42:21:8c:13:6c:03:54:1f:e6:51:70:
06:db:13:a8:36:f8:0e:71:1c:86:dc:75:2f:c9:67:
eb:fe:1c:34:1c:ba:c7:3c:19:f8:ff:50:5e:98:94:
06:60:a2:90:a1:c1:42:ce:1b:f6:8d:ca:b3:16:54:
59:0b:54:74:4e:05:85:88:8c:a4:bf:0b:f9:5f:bb:
3f:7e:fd:3a:d8:a9:36:e4:e6:34:cf:5e:e3:1d:21:
92:ca:d5:2c:aa:78:23:a5:6d:31:7a:83:95:85:6d:
6f:f3:90:07:2e:8f:4a:9a:21:74:d1:e4:c3:32:8c:
6c:ba:08:28:50:e2:26:0a:1d:e7:d9:dc:e4:2e:2e:
19:41:11:c3:d8:9f:d7:8f:b6:58:d0:77:3b:d0:70:
31:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B4:DE:EC:0F:7F:2E:F0:85:32:A2:A0:8B:B5:1B:5A:0A:64:1D:ED
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/WLTe7A9_LvCFMqKgi7UbWgpkHe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.114.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3f:37:88:85:c6:d4:25:cd:48:fa:5d:46:1a:32:40:71:ec:
3e:48:7d:77:e5:df:00:fc:2b:c8:70:29:6a:16:ff:0d:4a:86:
de:47:d5:fe:fb:41:4e:33:a8:a9:d6:e0:98:a9:bc:ba:dd:c8:
39:c9:f8:40:e5:89:89:e2:da:96:86:23:93:9e:2e:4f:01:ee:
a7:90:b0:f5:3e:4c:01:d4:39:94:fe:94:70:d2:6e:1c:1f:3a:
03:c2:8b:90:1a:61:ab:0d:93:6f:35:0b:bc:f9:da:ca:f0:f3:
3c:d9:dd:72:79:cd:78:e6:ab:d7:33:9f:7d:03:66:74:cd:96:
85:f3:52:cc:01:63:d7:bd:17:0d:1e:ca:12:74:6f:34:a2:22:
03:8d:f2:71:d8:0a:75:78:a4:75:da:ab:c5:f4:e8:99:ac:93:
e7:b5:ed:a8:04:70:8f:6e:14:70:ba:07:f5:25:ff:03:03:b7:
11:ed:b9:6c:a9:a9:1d:c9:81:66:05:f1:03:37:33:04:eb:2f:
2c:76:25:c0:2a:d4:c4:00:b8:be:ce:34:18:89:85:b1:e3:a4:
71:46:19:2f:dd:66:db:69:2e:b4:b3:c6:c0:5f:e1:cf:fe:c0:
c4:2b:5b:4a:8a:03:7e:04:b2:81:ff:4c:aa:80:70:be:9d:8a:
91:c2:e7:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGYQiZnbJ/JH5CXoOrulgpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjQwODI4MDkxMjM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGI0ZGVlYzBmN2YyZWYwODUzMmEyYTA4YmI1MWI1YTBhNjQxZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupqSFMyMlAhbAV9c4bTuBmXJFoFQ
JBBilxHwZ3Pi2ggpxxX26iMaOPBoSI//gfA88NpziDSmUtxCCXlC4YwiQLCVQL0W
Y1+NGG8XoiCdBsbmIF2HjDPVXdffMDCdDqX7F/rb/QvrtJyFlwVkQiGME2wDVB/m
UXAG2xOoNvgOcRyG3HUvyWfr/hw0HLrHPBn4/1BemJQGYKKQocFCzhv2jcqzFlRZ
C1R0TgWFiIykvwv5X7s/fv062Kk25OY0z17jHSGSytUsqngjpW0xeoOVhW1v85AH
Lo9KmiF00eTDMoxsuggoUOImCh3n2dzkLi4ZQRHD2J/Xj7ZY0Hc70HAxPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFi03uwPfy7whTKioIu1G1oKZB3tMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvV0xUZTdBOV9MdkNGTXFLZ2k3VWJXZ3BrSGUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZtyMA0G
CSqGSIb3DQEBCwUAA4IBAQCZPzeIhcbUJc1I+l1GGjJAcew+SH135d8A/CvIcClq
Fv8NSobeR9X++0FOM6ip1uCYqby63cg5yfhA5YmJ4tqWhiOTni5PAe6nkLD1PkwB
1DmU/pRw0m4cHzoDwouQGmGrDZNvNQu8+drK8PM82d1yec145qvXM599A2Z0zZaF
81LMAWPXvRcNHsoSdG80oiIDjfJx2Ap1eKR12qvF9OiZrJPnte2oBHCPbhRwugf1
Jf8DA7cR7blsqakdyYFmBfEDNzME6y8sdiXAKtTEALi+zjQYiYWx46RxRhkv3Wbb
aS60s8bAX+HP/sDEK1tKigN+BLKB/0yqgHC+nYqRwudy
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:07 2024 by rpki-client on console-ams.rpki-client.org