Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/WnWjbmDXdRHMd01tnkjhSdYR3bY.roa
File: WnWjbmDXdRHMd01tnkjhSdYR3bY.roa (raw, json)
Hash identifier: RwyR0n+AqjArwAzn+Dy4LIP0d5SpqaPJkUo4Sg25i5k=
Subject key identifier: 5A:75:A3:6E:60:D7:75:11:CC:77:4D:6D:9E:48:E1:49:D6:11:DD:B6
Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial: 0192E1CB1EC5CD096017F88C4F4DCCADA4C9
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/WnWjbmDXdRHMd01tnkjhSdYR3bY.roa
Signing time: Thu 31 Oct 2024 08:57:18 +0000
ROA not before: Thu 31 Oct 2024 08:57:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25122
IP address blocks: 194.126.33.0/24 maxlen: 24
194.126.34.0/24 maxlen: 24
194.126.38.0/24 maxlen: 24
194.126.44.0/24 maxlen: 24
194.126.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:cb:1e:c5:cd:09:60:17:f8:8c:4f:4d:cc:ad:a4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Validity
Not Before: Oct 31 08:57:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a75a36e60d77511cc774d6d9e48e149d611ddb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:ae:4b:4e:46:09:d3:6e:a0:ef:7b:25:83:
df:fc:5b:a6:52:36:51:bb:2b:66:98:7b:e4:38:f6:
40:09:48:ce:fe:10:bb:2b:45:16:df:a9:85:cb:d2:
a2:92:a0:f6:13:84:1d:25:78:fe:42:95:29:95:5f:
1a:75:fc:58:c6:02:c5:02:63:52:92:f0:21:24:37:
18:43:e2:b5:8e:80:9f:fc:3f:38:dd:9b:eb:1a:5d:
72:19:72:7a:c7:cd:b7:1e:ed:37:0e:d7:9d:3d:71:
9c:76:a0:e6:a5:d3:9a:8e:ed:13:7d:fc:6b:d3:3f:
74:b9:3e:4f:7e:4b:e1:74:dc:95:72:93:2c:b4:0a:
95:2d:b6:51:8c:bc:78:85:10:7b:f2:c2:b6:94:b0:
dc:e2:be:34:52:65:8a:ec:dc:6f:07:15:ab:0b:b9:
f0:45:f5:3d:11:cc:60:b8:41:95:17:2c:4c:bb:c3:
74:ec:43:95:a7:fb:4d:2c:c8:bf:12:34:49:5f:58:
9e:cc:72:a0:9f:98:91:25:04:8b:3f:87:24:82:90:
67:08:f3:7f:bb:3c:ad:c5:f9:70:1e:d6:bd:9f:b1:
82:5d:db:cd:e2:55:4a:24:d5:d1:46:a2:63:31:28:
8a:39:67:a0:94:02:98:bb:01:35:8e:b0:f9:dc:d9:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:75:A3:6E:60:D7:75:11:CC:77:4D:6D:9E:48:E1:49:D6:11:DD:B6
X509v3 Authority Key Identifier:
keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/WnWjbmDXdRHMd01tnkjhSdYR3bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.33.0-194.126.34.255
194.126.38.0/24
194.126.44.0/24
194.126.54.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4b:0b:88:44:db:92:a4:cb:58:d4:12:9c:29:eb:d4:6f:1c:
d3:73:cc:8d:35:d5:d1:39:cc:d2:d8:07:92:13:46:9b:42:63:
76:71:73:03:f0:91:e7:d7:e8:13:54:af:61:4f:3e:29:94:03:
d8:ea:c2:e9:32:86:ac:1d:1a:8e:70:3f:11:3d:98:d5:39:81:
37:f2:4d:e0:ff:46:02:c7:9d:64:79:3c:84:f2:5d:9e:bb:c0:
23:fa:75:79:dd:e7:5d:d0:be:a7:c7:d4:8f:88:b7:8b:54:7e:
4b:fa:41:e8:98:b2:4d:f1:0a:21:dd:cd:e1:9e:b9:0c:5b:28:
98:7b:3f:d1:09:25:c9:84:fe:35:fe:3e:ad:e8:68:d9:8e:db:
fb:6e:7f:7b:a0:fc:86:3d:b1:25:78:02:ac:5d:56:44:a5:1a:
36:09:66:75:fb:7e:09:05:fd:d2:cd:14:6e:49:f3:4a:84:1e:
90:8b:c7:75:e5:c4:bf:6e:8a:c7:6a:0d:90:11:67:e9:4b:a5:
01:c6:c8:88:89:71:a8:4c:53:0d:af:53:1b:67:7e:d0:72:28:
b2:ed:bc:7c:11:68:d4:3c:a8:8c:05:11:13:5c:ae:eb:20:ad:
79:ef:ae:fc:5c:3e:7e:97:1e:57:64:63:0f:6f:6e:c1:b4:31:
65:d7:11:6b
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZLhyx7FzQlgF/iMT03MraTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTQxNWVkNWMwYzc3NTk5ODEwMDFiOGRiMjYyZGE3Nzlh
MDRiM2QwHhcNMjQxMDMxMDg1NzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTc1YTM2ZTYwZDc3NTExY2M3NzRkNmQ5ZTQ4ZTE0OWQ2MTFkZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAauS05GCdNuoO97JYPf/FumUjZR
uytmmHvkOPZACUjO/hC7K0UW36mFy9KikqD2E4QdJXj+QpUplV8adfxYxgLFAmNS
kvAhJDcYQ+K1joCf/D843ZvrGl1yGXJ6x823Hu03DtedPXGcdqDmpdOaju0Tffxr
0z90uT5PfkvhdNyVcpMstAqVLbZRjLx4hRB78sK2lLDc4r40UmWK7NxvBxWrC7nw
RfU9EcxguEGVFyxMu8N07EOVp/tNLMi/EjRJX1iezHKgn5iRJQSLP4ckgpBnCPN/
uzytxflwHta9n7GCXdvN4lVKJNXRRqJjMSiKOWeglAKYuwE1jrD53Nl78wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFp1o25g13URzHdNbZ5I4UnWEd22MB8GA1UdIwQY
MBaAFOnkFe1cDHdZmBABuNsmLad5oEs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDkt
MjhkYTZhMWJhMTI4LzEvV25XamJtRFhkUkhNZDAxdG5ramhTZFlSM2JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS83ZWI2ODMtZTIxOC00MzgyLWJmZDktMjhkYTZhMWJhMTI4
LzEvNmVRVjdWd01kMW1ZRUFHNDJ5WXRwM21nU3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBADCfiED
BADCfiIDBADCfiYDBADCfiwDBADCfjYwDQYJKoZIhvcNAQELBQADggEBAAJLC4hE
25Kky1jUEpwp69RvHNNzzI011dE5zNLYB5ITRptCY3ZxcwPwkefX6BNUr2FPPimU
A9jqwukyhqwdGo5wPxE9mNU5gTfyTeD/RgLHnWR5PITyXZ67wCP6dXnd513QvqfH
1I+It4tUfkv6QeiYsk3xCiHdzeGeuQxbKJh7P9EJJcmE/jX+Pq3oaNmO2/tuf3ug
/IY9sSV4AqxdVkSlGjYJZnX7fgkF/dLNFG5J80qEHpCLx3XlxL9uisdqDZARZ+lL
pQHGyIiJcahMUw2vUxtnftByKLLtvHwRaNQ8qIwFERNcrusgrXnvrvxcPn6XHldk
Yw9vbsG0MWXXEWs=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:43 2024 by rpki-client on console-fra.rpki-client.org