Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WDJKhUNH0qtSKAP9_tE8CRc1u0M.roa
File: WDJKhUNH0qtSKAP9_tE8CRc1u0M.roa (raw, json)
Hash identifier: SvUgfHjRmNPU2Sl2RqQws1IlhvOhqrHk1SkXV3VGY8g=
Subject key identifier: 58:32:4A:85:43:47:D2:AB:52:28:03:FD:FE:D1:3C:09:17:35:BB:43
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79561D813EF2E7D555891271AC9D7EC
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WDJKhUNH0qtSKAP9_tE8CRc1u0M.roa
Signing time: Tue 02 Jan 2024 00:31:44 +0000
ROA not before: Tue 02 Jan 2024 00:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61115
IP address blocks: 86.107.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:61:d8:13:ef:2e:7d:55:58:91:27:1a:c9:d7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58324a854347d2ab522803fdfed13c091735bb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:41:1d:1f:1a:f7:de:b1:af:db:b9:07:fd:
da:3f:be:57:02:5c:af:a3:3c:1c:70:5a:55:38:44:
3e:56:52:cf:11:25:6a:f4:76:67:ec:37:f9:f1:8b:
5f:6b:ec:3e:62:ae:c3:ef:28:e4:56:57:d0:08:40:
5a:b7:8f:3f:f3:96:83:47:9c:e2:2c:33:cb:e4:60:
f7:e4:03:c7:af:49:4b:21:ea:87:b1:45:ae:f6:a3:
72:62:fa:d1:f9:0d:a9:74:77:ff:3c:73:3f:c3:2c:
14:c3:e1:43:44:01:e9:4f:2a:c7:50:02:72:e4:01:
3f:f8:dc:aa:bf:57:35:e0:28:e3:81:fe:c8:8d:1a:
c0:15:15:a1:59:d3:fb:ae:6e:b2:84:85:4e:85:bd:
ff:18:f8:f7:de:67:a4:7b:3c:50:d3:4e:07:29:1b:
11:f8:87:ad:d1:e1:3f:90:74:a1:4e:54:83:0f:94:
03:4b:39:5b:8e:b4:c1:be:fe:5a:e1:45:0a:61:7c:
2b:6d:94:4e:16:16:07:aa:0c:65:e6:3d:db:61:18:
ac:41:67:04:e5:16:c7:92:27:11:f1:35:fc:ee:e0:
37:17:aa:6e:c1:f7:3d:d4:2b:82:09:0b:df:45:db:
10:0c:42:50:ec:71:c7:5b:ac:95:dc:24:c0:29:08:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:32:4A:85:43:47:D2:AB:52:28:03:FD:FE:D1:3C:09:17:35:BB:43
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WDJKhUNH0qtSKAP9_tE8CRc1u0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.106.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5b:6e:d6:98:1e:c4:56:24:8d:f4:51:7f:dd:a5:0d:5b:1d:
e5:af:c5:60:e9:a9:c4:c6:64:9e:aa:2c:79:cf:df:a0:50:81:
83:74:b2:f1:1c:f5:b9:57:bb:d2:16:58:fc:3b:96:86:50:20:
54:c7:99:d3:2d:e9:91:85:ad:9f:fa:9e:97:d9:fb:fa:dc:e8:
32:10:36:a6:64:79:ee:0b:75:0e:a0:28:4d:a0:aa:4e:7f:de:
ea:54:a2:9a:74:53:35:5f:a5:57:15:25:70:13:c4:52:d4:0a:
38:67:a5:cd:e1:18:d5:7e:13:8a:ad:a7:6f:08:56:d7:94:b1:
82:3e:93:1d:2e:b9:18:c4:65:0c:60:23:f2:e6:e4:3c:fd:70:
ee:e4:a3:f2:ba:78:30:76:f1:3d:14:4f:4c:58:55:ce:25:db:
74:76:cf:d6:5e:09:24:65:99:96:f9:59:3e:93:1a:ae:57:77:
bb:60:5e:c1:43:52:de:5b:e2:69:22:15:af:bb:d9:dd:2d:83:
49:97:1f:da:58:77:3a:84:29:4a:7e:e5:9e:7b:4d:00:13:21:
26:77:64:81:71:cd:29:0c:82:ea:59:84:dd:5d:e1:35:ad:83:
02:af:3a:aa:bd:71:64:3e:b0:96:7b:a4:81:82:5f:b4:67:f6:
35:ed:3d:e8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzHlWHYE+8ufVVYkScaydfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwMTAyMDAzMTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODMyNGE4NTQzNDdkMmFiNTIyODAzZmRmZWQxM2MwOTE3MzViYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22lBHR8a996xr9u5B/3aP75XAlyv
ozwccFpVOEQ+VlLPESVq9HZn7Df58Ytfa+w+Yq7D7yjkVlfQCEBat48/85aDR5zi
LDPL5GD35APHr0lLIeqHsUWu9qNyYvrR+Q2pdHf/PHM/wywUw+FDRAHpTyrHUAJy
5AE/+Nyqv1c14Cjjgf7IjRrAFRWhWdP7rm6yhIVOhb3/GPj33mekezxQ004HKRsR
+Iet0eE/kHShTlSDD5QDSzlbjrTBvv5a4UUKYXwrbZROFhYHqgxl5j3bYRisQWcE
5RbHkicR8TX87uA3F6puwfc91CuCCQvfRdsQDEJQ7HHHW6yV3CTAKQh2WQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFgySoVDR9KrUigD/f7RPAkXNbtDMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1dESktoVU5IMHF0U0tBUDlfdEU4Q1JjMXUwTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWa2ow
DQYJKoZIhvcNAQELBQADggEBAHRbbtaYHsRWJI30UX/dpQ1bHeWvxWDpqcTGZJ6q
LHnP36BQgYN0svEc9blXu9IWWPw7loZQIFTHmdMt6ZGFrZ/6npfZ+/rc6DIQNqZk
ee4LdQ6gKE2gqk5/3upUopp0UzVfpVcVJXATxFLUCjhnpc3hGNV+E4qtp28IVteU
sYI+kx0uuRjEZQxgI/Lm5Dz9cO7ko/K6eDB28T0UT0xYVc4l23R2z9ZeCSRlmZb5
WT6TGq5Xd7tgXsFDUt5b4mkiFa+72d0tg0mXH9pYdzqEKUp+5Z57TQATISZ3ZIFx
zSkMgupZhN1d4TWtgwKvOqq9cWQ+sJZ7pIGCX7Rn9jXtPeg=
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:40:53 2024 by rpki-client on console-fra.rpki-client.org