Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/WOYBekp5MRtoG_94HCxBCuZJQPs.roa
File: WOYBekp5MRtoG_94HCxBCuZJQPs.roa (raw, json)
Hash identifier: u9W2spYWYDvpDs1bBT3vZ5k+YurRMuspKBHHIdJsyvM=
Subject key identifier: 58:E6:01:7A:4A:79:31:1B:68:1B:FF:78:1C:2C:41:0A:E6:49:40:FB
Certificate issuer: /CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Certificate serial: 018CC6B8DDA80B2180A3195AE6BEE62A314F
Authority key identifier: E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/WOYBekp5MRtoG_94HCxBCuZJQPs.roa
Signing time: Mon 01 Jan 2024 20:30:53 +0000
ROA not before: Mon 01 Jan 2024 20:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51679
IP address blocks: 193.25.194.0/24 maxlen: 24
193.25.196.0/24 maxlen: 24
193.24.36.0/24 maxlen: 24
193.25.223.0/24 maxlen: 24
2a0f:76c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:dd:a8:0b:21:80:a3:19:5a:e6:be:e6:2a:31:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Validity
Not Before: Jan 1 20:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58e6017a4a79311b681bff781c2c410ae64940fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:7e:75:ea:4a:06:7d:19:20:b9:8a:7b:88:
f7:10:28:7c:17:a5:27:6a:6c:cf:67:04:86:f5:ed:
94:b6:d4:46:c4:21:2b:1c:23:83:6a:79:82:40:b5:
16:27:7a:6a:93:b4:b7:3f:85:44:26:ee:22:8d:41:
ce:42:8f:6e:c7:c6:52:53:71:e1:65:55:ca:fe:06:
7c:a4:9a:c5:59:b4:81:3f:4b:8a:fe:0b:ea:6d:7d:
d4:22:40:6c:f4:65:1a:15:ab:ff:65:67:4e:61:97:
24:61:3b:e9:b7:94:bc:d8:d0:33:e6:fa:d5:77:66:
6d:c0:42:9d:f3:99:77:8b:e8:15:0f:30:17:96:f2:
39:17:17:d5:20:94:54:89:bf:59:a2:a0:42:ab:7b:
c0:e8:6b:8c:ff:aa:e7:4a:73:f7:d6:65:23:84:3d:
38:b7:e6:fa:d2:04:93:c2:61:d0:24:8f:c5:65:57:
b0:d1:21:83:81:34:c7:00:55:68:01:4f:da:ea:24:
82:44:3b:de:52:4c:98:a0:ea:ae:09:74:e5:f9:00:
b0:7e:c6:b3:b0:ac:df:a1:94:b1:e0:a1:3a:56:54:
18:b9:67:c7:7c:3e:fe:83:e3:d7:3b:5b:56:c9:9d:
fa:80:d3:61:5e:94:25:c7:e8:1a:86:80:05:23:fa:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E6:01:7A:4A:79:31:1B:68:1B:FF:78:1C:2C:41:0A:E6:49:40:FB
X509v3 Authority Key Identifier:
keyid:E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/WOYBekp5MRtoG_94HCxBCuZJQPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.36.0/24
193.25.194.0/24
193.25.196.0/24
193.25.223.0/24
IPv6:
2a0f:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
b8:2c:4c:4e:16:8c:1e:d5:86:11:61:a1:2d:1c:5c:02:26:a5:
bd:90:cd:64:af:15:bd:d9:e4:a9:73:b5:f4:49:a1:74:8d:01:
ee:97:02:b5:ce:a0:c2:63:d4:62:83:21:d3:ca:ee:bf:f3:01:
02:d3:78:cf:d5:f2:24:12:81:8c:9f:45:33:c4:37:8b:95:c0:
ea:bf:5f:22:86:e8:ac:3c:42:a7:ce:6e:60:26:19:a2:d8:2c:
a0:7a:bc:e6:8b:b8:35:18:a6:c8:8b:99:93:d5:9f:3b:09:ad:
00:3b:99:1c:77:9c:8b:65:1a:2a:28:86:03:11:fb:6a:2e:6e:
e0:29:84:28:ef:6c:a0:4f:43:d5:66:5b:dc:93:72:18:74:20:
14:c3:e3:69:34:37:9f:b2:5e:90:f9:dc:e6:f6:e6:4c:55:b5:
3f:b2:57:7a:62:63:2a:7b:95:3d:0e:60:bb:a7:21:e5:43:7a:
3f:c9:5b:64:5d:b4:83:b3:06:e4:2c:3d:a5:b7:a8:49:7e:0b:
15:0b:13:45:ce:9c:bc:d3:ad:e1:58:25:48:9a:d7:fd:74:b9:
b8:37:99:e2:ad:29:25:fe:1b:8e:33:ee:9b:b0:70:da:cc:ab:
20:e6:94:bd:b0:a5:51:d3:10:58:80:76:30:2c:17:5a:4c:41:
94:28:e6:b8
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzGuN2oCyGAoxla5r7mKjFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNWM1MDYwMzVmYThkZDYwOTFiNDNhNGU4ODk3NjdmY2Rj
YzQ4ZjEwHhcNMjQwMTAxMjAzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGU2MDE3YTRhNzkzMTFiNjgxYmZmNzgxYzJjNDEwYWU2NDk0MGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWV+depKBn0ZILmKe4j3ECh8F6Un
amzPZwSG9e2UttRGxCErHCODanmCQLUWJ3pqk7S3P4VEJu4ijUHOQo9ux8ZSU3Hh
ZVXK/gZ8pJrFWbSBP0uK/gvqbX3UIkBs9GUaFav/ZWdOYZckYTvpt5S82NAz5vrV
d2ZtwEKd85l3i+gVDzAXlvI5FxfVIJRUib9ZoqBCq3vA6GuM/6rnSnP31mUjhD04
t+b60gSTwmHQJI/FZVew0SGDgTTHAFVoAU/a6iSCRDveUkyYoOquCXTl+QCwfsaz
sKzfoZSx4KE6VlQYuWfHfD7+g+PXO1tWyZ36gNNhXpQlx+gahoAFI/qOpwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFFjmAXpKeTEbaBv/eBwsQQrmSUD7MB8GA1UdIwQY
MBaAFOFcUGA1+o3WCRtDpOiJdn/NzEjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZ4UVlEWDZqZFlKRzBPazZJbDJmODNNU1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MTIzNDUtOTAzZS00Y2MxLTk5N2Et
ZTg2ODJmMzIyOTQwLzEvV09ZQmVrcDVNUnRvR185NEhDeEJDdVpKUVBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MTIzNDUtOTAzZS00Y2MxLTk5N2EtZTg2ODJmMzIyOTQw
LzEvNFZ4UVlEWDZqZFlKRzBPazZJbDJmODNNU1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwRgkAwQA
wRnCAwQAwRnEAwQAwRnfMA0EAgACMAcDBQMqD3bAMA0GCSqGSIb3DQEBCwUAA4IB
AQC4LExOFowe1YYRYaEtHFwCJqW9kM1krxW92eSpc7X0SaF0jQHulwK1zqDCY9Ri
gyHTyu6/8wEC03jP1fIkEoGMn0UzxDeLlcDqv18ihuisPEKnzm5gJhmi2Cygerzm
i7g1GKbIi5mT1Z87Ca0AO5kcd5yLZRoqKIYDEftqLm7gKYQo72ygT0PVZlvck3IY
dCAUw+NpNDefsl6Q+dzm9uZMVbU/sld6YmMqe5U9DmC7pyHlQ3o/yVtkXbSDswbk
LD2lt6hJfgsVCxNFzpy8063hWCVImtf9dLm4N5nirSkl/huOM+6bsHDazKsg5pS9
sKVR0xBYgHYwLBdaTEGUKOa4
-----END CERTIFICATE-----
Generated at Mon Jun 17 02:44:39 2024 by rpki-client on console-ams.rpki-client.org