Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wDLdYCy27sfBUrJBrD28rN_RWFE.roa
File: wDLdYCy27sfBUrJBrD28rN_RWFE.roa (raw, json)
Hash identifier: tCqFVvM4/K/wdktvvv6wH/uLRPDNDCzTDARJLj8l77U=
Subject key identifier: C0:32:DD:60:2C:B6:EE:C7:C1:52:B2:41:AC:3D:BC:AC:DF:D1:58:51
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018DDF75B09B7271646554A2388DBC3F9FE7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wDLdYCy27sfBUrJBrD28rN_RWFE.roa
Signing time: Sun 25 Feb 2024 08:50:48 +0000
ROA not before: Sun 25 Feb 2024 08:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9050
IP address blocks: 82.153.138.0/24 maxlen: 24
89.213.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:df:75:b0:9b:72:71:64:65:54:a2:38:8d:bc:3f:9f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 25 08:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c032dd602cb6eec7c152b241ac3dbcacdfd15851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:d8:6d:72:a2:fc:bb:62:a0:dc:31:72:45:
c3:c8:06:4d:c6:ee:cd:9b:b5:f4:5d:86:90:c5:40:
3f:e3:d6:07:c5:1d:8b:65:d4:7c:71:1d:cd:5e:dd:
10:79:3f:59:25:a0:3c:90:88:4b:52:fb:66:01:be:
a1:26:c3:dd:a5:b9:d2:5f:9d:a9:a6:37:39:94:be:
91:33:c3:c7:58:65:0a:c7:35:58:38:94:f7:b8:66:
f3:49:72:ab:f7:f8:6d:64:90:e7:c4:4c:c6:c0:b4:
03:3c:d2:50:66:fa:a4:59:17:1c:3c:f3:c4:b0:9f:
fd:09:e0:bc:26:68:27:8f:09:ab:ee:3b:d5:0b:b7:
ff:d7:36:24:76:66:d4:e4:47:e6:c4:8c:62:3e:5f:
97:96:f9:e6:fc:20:5b:21:20:bc:41:43:e4:0d:fa:
c6:10:2e:be:a9:c0:a8:cc:2a:2e:24:20:56:b6:c7:
93:dc:c1:36:59:10:05:91:64:d5:c7:59:74:57:2e:
81:33:4d:b8:dc:54:fc:44:03:62:66:3f:a5:7f:6a:
67:74:9a:bf:67:79:2f:b8:6d:f5:5a:60:ea:d6:c5:
ed:ab:1f:34:e9:a1:fc:c6:16:6f:37:d8:de:b7:47:
b0:22:71:23:e6:6a:c6:d6:56:ef:c5:64:5c:b9:e4:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:DD:60:2C:B6:EE:C7:C1:52:B2:41:AC:3D:BC:AC:DF:D1:58:51
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wDLdYCy27sfBUrJBrD28rN_RWFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.138.0/24
89.213.174.0/24
Signature Algorithm: sha256WithRSAEncryption
87:fa:9d:41:06:5d:a2:09:cd:ae:16:f6:a9:45:8e:ce:9e:d9:
12:49:8e:97:61:fe:81:db:86:26:50:24:f6:55:41:ea:8f:c2:
cb:b7:54:73:6e:66:b2:e3:80:d2:06:05:dc:b5:26:6b:61:f5:
dc:81:ff:2b:1a:a4:be:5e:79:d8:58:70:15:61:e6:8c:e6:16:
13:e8:dd:d1:7f:f6:e6:38:ee:2c:30:86:46:99:f7:03:d8:ba:
3e:8c:bd:47:40:27:04:7f:e0:c8:2a:1c:02:87:86:2f:51:87:
bf:31:52:47:83:e2:51:69:67:af:88:ed:49:c6:d8:5d:f3:fa:
84:0e:a0:49:a5:2f:df:97:6f:35:80:43:fc:cb:b5:b3:14:37:
7d:4f:9a:0e:8d:44:4b:7a:21:e6:9e:93:cf:2d:e1:7e:6d:6e:
4d:d2:93:dd:b4:5b:28:a0:d9:56:02:ea:86:19:d7:89:67:02:
90:3b:27:b0:c4:b1:da:f9:26:a4:d3:6a:5e:c9:9c:32:f5:8f:
f3:ab:fd:e7:6f:26:ed:a1:a3:a5:57:61:f5:39:72:b2:72:1a:
a7:70:41:9b:c1:c0:54:f1:93:a0:ad:c3:3d:bb:f0:d8:52:ae:
ce:66:66:95:67:3c:5d:74:84:2d:5d:82:5d:a8:62:3d:37:cd:
ab:7a:b6:71
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY3fdbCbcnFkZVSiOI28P5/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMjI1MDg1MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDMyZGQ2MDJjYjZlZWM3YzE1MmIyNDFhYzNkYmNhY2RmZDE1ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv/YbXKi/LtioNwxckXDyAZNxu7N
m7X0XYaQxUA/49YHxR2LZdR8cR3NXt0QeT9ZJaA8kIhLUvtmAb6hJsPdpbnSX52p
pjc5lL6RM8PHWGUKxzVYOJT3uGbzSXKr9/htZJDnxEzGwLQDPNJQZvqkWRccPPPE
sJ/9CeC8Jmgnjwmr7jvVC7f/1zYkdmbU5EfmxIxiPl+Xlvnm/CBbISC8QUPkDfrG
EC6+qcCozCouJCBWtseT3ME2WRAFkWTVx1l0Vy6BM0243FT8RANiZj+lf2pndJq/
Z3kvuG31WmDq1sXtqx806aH8xhZvN9jet0ewInEj5mrG1lbvxWRcueRvdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMAy3WAstu7HwVKyQaw9vKzf0VhRMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvd0RMZFlDeTI3c2ZCVXJKQnJEMjhyTl9SV0ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpmKAwQA
WdWuMA0GCSqGSIb3DQEBCwUAA4IBAQCH+p1BBl2iCc2uFvapRY7OntkSSY6XYf6B
24YmUCT2VUHqj8LLt1Rzbmay44DSBgXctSZrYfXcgf8rGqS+XnnYWHAVYeaM5hYT
6N3Rf/bmOO4sMIZGmfcD2Lo+jL1HQCcEf+DIKhwCh4YvUYe/MVJHg+JRaWeviO1J
xthd8/qEDqBJpS/fl281gEP8y7WzFDd9T5oOjURLeiHmnpPPLeF+bW5N0pPdtFso
oNlWAuqGGdeJZwKQOyewxLHa+Sak02peyZwy9Y/zq/3nbybtoaOlV2H1OXKychqn
cEGbwcBU8ZOgrcM9u/DYUq7OZmaVZzxddIQtXYJdqGI9N82rerZx
-----END CERTIFICATE-----
Generated at Sun Jun 2 16:09:15 2024 by rpki-client on console-ams.rpki-client.org