Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/w6tXki7XyTThSkpxNr4x988KgJM.roa
File: w6tXki7XyTThSkpxNr4x988KgJM.roa (raw, json)
Hash identifier: 69VBdr0KGUnHLsYO5nw6msSO5Q4pY/8Ppfm+lfb6xik=
Subject key identifier: C3:AB:57:92:2E:D7:C9:34:E1:4A:4A:71:36:BE:31:F7:CF:0A:80:93
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 018CC26D59BFAE30920BF4E6C00ADAC62E22
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/w6tXki7XyTThSkpxNr4x988KgJM.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202513
IP address blocks: 87.239.52.0/22 maxlen: 24
185.147.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:59:bf:ae:30:92:0b:f4:e6:c0:0a:da:c6:2e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3ab57922ed7c934e14a4a7136be31f7cf0a8093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3f:dd:d1:14:04:26:ed:97:7e:d2:d6:fe:79:
69:1a:15:26:37:73:30:49:bc:d5:37:37:58:b4:7e:
17:9e:e0:55:fa:33:20:8b:dd:27:af:d3:be:35:50:
5e:d6:c8:40:dd:9f:05:f3:eb:d9:35:bc:a0:4e:7b:
81:91:9d:44:89:38:f9:96:e2:5b:2c:dd:a2:9b:ab:
4c:f4:d5:08:cf:7a:51:49:99:4d:94:cd:f4:b5:81:
3e:60:f9:64:77:ca:21:5e:87:6c:8a:9c:de:3e:5d:
b7:cc:8d:55:e0:40:7a:e8:9c:7e:c6:f4:c9:0a:5d:
fc:ee:6e:9e:8f:e5:bd:cc:b7:0b:79:b8:13:ef:0b:
80:eb:f8:0a:5f:23:af:3a:05:06:a4:71:d1:b4:8d:
35:e3:5a:14:30:07:dc:33:62:53:c2:f2:dd:2f:5b:
12:6f:27:11:ec:46:94:23:70:d6:69:59:c0:ed:ea:
7c:0d:89:6e:a7:c6:10:df:7d:30:97:c1:35:b4:81:
b5:1b:07:98:0c:7c:1c:52:c3:93:df:12:15:6d:ea:
ee:c4:e7:8c:e6:70:1b:69:2c:0c:a4:ec:b6:c4:3d:
5e:74:80:80:cc:fc:0c:3e:75:df:46:1a:5c:6c:9b:
30:ba:38:13:7d:a6:cb:b8:52:08:69:df:26:93:36:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AB:57:92:2E:D7:C9:34:E1:4A:4A:71:36:BE:31:F7:CF:0A:80:93
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/w6tXki7XyTThSkpxNr4x988KgJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.52.0/22
185.147.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:76:07:1c:b5:58:6b:27:6d:a0:6d:9c:8f:bd:31:b8:25:7f:
cd:35:6e:bc:df:61:69:75:7c:6f:a5:66:cb:69:d5:9a:5d:2b:
bd:5a:6d:69:0f:0c:29:1a:de:b6:61:33:a8:cd:3c:0e:44:22:
aa:40:f7:81:54:a0:5c:f9:fd:b9:c3:c0:4f:cb:d6:99:46:4d:
80:f0:ec:d6:1d:3c:a2:30:da:3a:56:e8:86:45:64:b7:62:62:
9c:01:07:b0:96:14:a0:e4:ce:ca:b4:7d:5b:2c:68:2f:13:d6:
00:1d:0d:ae:6f:32:b1:4d:83:21:f3:4a:46:3b:89:b2:4c:be:
2c:1a:81:27:83:da:3e:f3:08:50:0d:0b:e3:f7:77:5a:63:96:
4b:45:0c:ba:87:fd:7c:46:cd:b9:e9:9a:46:52:de:ae:69:15:
3c:fc:5d:ea:ef:44:84:34:39:af:a4:4f:34:e4:2f:74:b0:a5:
77:a7:45:b5:9c:8b:22:f5:51:67:75:a4:f7:2a:16:90:83:fd:
09:d2:81:6e:a7:b4:3a:76:49:6d:55:8b:81:a0:a3:54:ca:60:
eb:44:b1:1d:33:be:19:30:33:8a:0e:48:d1:82:0f:75:63:14:
f3:89:5f:af:9c:95:f0:cd:1a:56:87:36:dd:29:f5:a0:0d:34:
b6:f9:66:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzCbVm/rjCSC/TmwAraxi4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGEwYWYxNTYzMzJkM2M3ZWNiNTg1ZmFlZTNhOTBkOWJm
MmEwOTYwHhcNMjQwMTAxMDAyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2FiNTc5MjJlZDdjOTM0ZTE0YTRhNzEzNmJlMzFmN2NmMGE4MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj/d0RQEJu2XftLW/nlpGhUmN3Mw
SbzVNzdYtH4XnuBV+jMgi90nr9O+NVBe1shA3Z8F8+vZNbygTnuBkZ1EiTj5luJb
LN2im6tM9NUIz3pRSZlNlM30tYE+YPlkd8ohXodsipzePl23zI1V4EB66Jx+xvTJ
Cl387m6ej+W9zLcLebgT7wuA6/gKXyOvOgUGpHHRtI0141oUMAfcM2JTwvLdL1sS
bycR7EaUI3DWaVnA7ep8DYlup8YQ330wl8E1tIG1GweYDHwcUsOT3xIVberuxOeM
5nAbaSwMpOy2xD1edICAzPwMPnXfRhpcbJswujgTfabLuFIIad8mkza0WwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMOrV5Iu18k04UpKcTa+MffPCoCTMB8GA1UdIwQY
MBaAFLtKCvFWMy08fstYX67jqQ2b8qCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYt
ZjIxMjY2NjcyNWI0LzEvdzZ0WGtpN1h5VFRoU2tweE5yNHg5ODhLZ0pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYtZjIxMjY2NjcyNWI0
LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCV+80AwQC
uZMQMA0GCSqGSIb3DQEBCwUAA4IBAQB7dgcctVhrJ22gbZyPvTG4JX/NNW6832Fp
dXxvpWbLadWaXSu9Wm1pDwwpGt62YTOozTwORCKqQPeBVKBc+f25w8BPy9aZRk2A
8OzWHTyiMNo6VuiGRWS3YmKcAQewlhSg5M7KtH1bLGgvE9YAHQ2ubzKxTYMh80pG
O4myTL4sGoEng9o+8whQDQvj93daY5ZLRQy6h/18Rs256ZpGUt6uaRU8/F3q70SE
NDmvpE805C90sKV3p0W1nIsi9VFndaT3KhaQg/0J0oFup7Q6dkltVYuBoKNUymDr
RLEdM74ZMDOKDkjRgg91YxTziV+vnJXwzRpWhzbdKfWgDTS2+WZi
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:37 2024 by rpki-client on console-fra.rpki-client.org