Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/wsTaCl5MOS-ELVWn3tri-sQxQRI.roa
File: wsTaCl5MOS-ELVWn3tri-sQxQRI.roa (raw, json)
Hash identifier: lc57uAOf9ulwtnh6DzEVlLKEJZ+LUkAI+mcwnph6ILA=
Subject key identifier: C2:C4:DA:0A:5E:4C:39:2F:84:2D:55:A7:DE:DA:E2:FA:C4:31:41:12
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 01923297E76E516A80C73E78295E022EE861
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/wsTaCl5MOS-ELVWn3tri-sQxQRI.roa
Signing time: Fri 27 Sep 2024 08:27:48 +0000
ROA not before: Fri 27 Sep 2024 08:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41652
IP address blocks: 45.80.0.0/22 maxlen: 22
193.26.14.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
193.26.22.0/24 maxlen: 24
2a0e:3780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:97:e7:6e:51:6a:80:c7:3e:78:29:5e:02:2e:e8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Sep 27 08:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2c4da0a5e4c392f842d55a7dedae2fac4314112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:3a:ed:00:da:3c:2a:9b:cb:9c:3e:32:ac:
79:04:f7:df:d8:ff:63:24:3b:a9:1f:c6:56:2e:cb:
61:a2:de:d1:4e:76:79:8a:b0:31:85:45:ef:7b:1b:
83:6d:31:13:4a:52:40:e0:34:83:8a:b5:00:5e:03:
59:8f:63:64:c1:6a:74:86:fa:17:33:33:49:36:a4:
92:8a:df:3f:81:09:25:73:a9:ff:57:02:04:e6:d0:
a3:2d:e9:6f:8e:ea:bd:29:bc:84:57:73:1b:a1:ca:
77:2f:4e:c1:5a:e8:19:c2:c4:8c:7d:15:4a:90:95:
7b:53:6c:ea:39:ed:3c:39:0d:a4:83:d4:31:74:a9:
1c:1c:87:3e:46:18:7a:d1:34:1e:64:d2:c7:9f:be:
44:98:91:0b:79:63:37:c9:a1:0c:81:0d:e0:7f:af:
8c:c8:57:42:8d:03:9c:7a:a2:cb:c2:f8:4a:71:b9:
4c:cb:95:ba:82:b9:5c:24:4d:4b:34:e0:2e:76:b1:
92:f0:c8:48:bd:5c:60:8e:0e:5e:2d:42:d9:9f:01:
10:6b:d2:a1:81:0d:2b:f1:ca:10:1d:ae:63:22:09:
29:4c:da:88:46:96:21:c0:f8:eb:5a:96:6c:39:c4:
24:82:c7:4c:04:cb:cb:a4:f1:d9:0a:5f:e6:fb:a1:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C4:DA:0A:5E:4C:39:2F:84:2D:55:A7:DE:DA:E2:FA:C4:31:41:12
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/wsTaCl5MOS-ELVWn3tri-sQxQRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.0.0/22
193.26.14.0/24
193.26.21.0-193.26.22.255
IPv6:
2a0e:3780::/29
Signature Algorithm: sha256WithRSAEncryption
b4:f7:3f:0f:09:97:e2:38:a7:d9:a4:63:77:cc:4c:74:89:a8:
fe:cd:d2:cb:11:9e:79:ac:cc:b2:aa:ca:32:7f:41:45:69:11:
13:f2:49:e4:83:e4:37:bb:b6:3c:f4:80:43:a0:0f:6e:1f:91:
e6:3c:50:6f:27:45:be:f3:00:82:72:c4:98:73:cd:3d:b3:96:
ec:2a:87:22:f6:bf:e9:e2:3e:49:48:e0:ed:f0:02:ad:8a:b0:
86:67:e6:8a:14:a4:10:41:48:bf:97:7f:3d:22:72:cd:5b:25:
83:9f:99:58:cd:39:14:a5:bb:65:de:ea:a5:ff:8e:8d:ee:42:
8e:e3:d4:7b:0f:a5:12:d3:e6:2c:32:75:0c:6e:94:0f:99:26:
52:5d:5c:fe:6f:ab:69:e2:7f:27:03:7c:b6:24:d2:b9:1b:36:
08:44:c2:ec:40:e5:b8:83:72:6a:11:1e:5b:af:8e:17:bf:bb:
10:7b:4a:b1:6b:8d:a7:74:e5:f6:8d:f6:f8:91:14:1a:8e:72:
0d:b2:74:c4:67:04:38:45:62:5d:58:a2:1a:ab:c8:fd:98:7d:
71:a7:c8:5d:9b:bd:a7:c9:2b:95:b0:ae:84:5c:e0:42:3a:86:
4f:5a:f4:b3:ee:96:40:46:ed:b7:0e:56:2f:5a:2a:d8:02:53:
c6:5d:01:dc
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZIyl+duUWqAxz54KV4CLuhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw
MjhlOTEwHhcNMjQwOTI3MDgyNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmM0ZGEwYTVlNGMzOTJmODQyZDU1YTdkZWRhZTJmYWM0MzE0MTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIg67QDaPCqby5w+Mqx5BPff2P9j
JDupH8ZWLsthot7RTnZ5irAxhUXvexuDbTETSlJA4DSDirUAXgNZj2NkwWp0hvoX
MzNJNqSSit8/gQklc6n/VwIE5tCjLelvjuq9KbyEV3Mbocp3L07BWugZwsSMfRVK
kJV7U2zqOe08OQ2kg9QxdKkcHIc+Rhh60TQeZNLHn75EmJELeWM3yaEMgQ3gf6+M
yFdCjQOceqLLwvhKcblMy5W6grlcJE1LNOAudrGS8MhIvVxgjg5eLULZnwEQa9Kh
gQ0r8coQHa5jIgkpTNqIRpYhwPjrWpZsOcQkgsdMBMvLpPHZCl/m+6Gg5QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFMLE2gpeTDkvhC1Vp97a4vrEMUESMB8GA1UdIwQY
MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt
ODg1NGM4MmI1NDVkLzEvd3NUYUNsNU1PUy1FTFZXbjN0cmktc1F4UVJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk
LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCLVAAAwQA
wRoOMAwDBADBGhUDBADBGhYwDQQCAAIwBwMFAyoON4AwDQYJKoZIhvcNAQELBQAD
ggEBALT3Pw8Jl+I4p9mkY3fMTHSJqP7N0ssRnnmszLKqyjJ/QUVpERPySeSD5De7
tjz0gEOgD24fkeY8UG8nRb7zAIJyxJhzzT2zluwqhyL2v+niPklI4O3wAq2KsIZn
5ooUpBBBSL+Xfz0ics1bJYOfmVjNORSlu2Xe6qX/jo3uQo7j1HsPpRLT5iwydQxu
lA+ZJlJdXP5vq2nifycDfLYk0rkbNghEwuxA5biDcmoRHluvjhe/uxB7SrFrjad0
5faN9viRFBqOcg2ydMRnBDhFYl1YohqryP2YfXGnyF2bvafJK5WwroRc4EI6hk9a
9LPulkBG7bcOVi9aKtgCU8ZdAdw=
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:03:54 2024 by rpki-client on console-ams.rpki-client.org