Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/WIrmiJS3uGmM4Api4TMWWkb357U.roa
File: WIrmiJS3uGmM4Api4TMWWkb357U.roa (raw, json)
Hash identifier: XUBkW8GNpOjPnW7fbyVVSF4KCbyVMtnBBaClnPECCMY=
Subject key identifier: 58:8A:E6:88:94:B7:B8:69:8C:E0:0A:62:E1:33:16:5A:46:F7:E7:B5
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 018CC56E2387AB2DB52C4B8881218A5C5A34
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/WIrmiJS3uGmM4Api4TMWWkb357U.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60890
IP address blocks: 185.24.64.0/24 maxlen: 24
2a04:2b00:a006::/48 maxlen: 48
2a04:2b00:13cc::/48 maxlen: 48
2a04:2b00:a034::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:23:87:ab:2d:b5:2c:4b:88:81:21:8a:5c:5a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=588ae68894b7b8698ce00a62e133165a46f7e7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:b4:a6:4e:7c:1a:45:64:c9:c2:60:11:0b:
db:5c:09:67:31:34:5a:14:ff:c4:fe:3a:cf:86:7a:
cc:c9:d7:98:7d:81:ac:41:a8:f1:68:85:42:69:3c:
1c:cb:8b:04:de:ce:70:df:3b:44:9b:8f:c2:70:6a:
85:a2:94:3f:35:3a:2b:59:9a:f2:d2:fc:3c:57:59:
90:68:ac:f6:a0:f7:de:b1:53:5e:80:7e:f1:f6:17:
82:4a:26:0d:60:66:e3:91:ef:62:e6:81:48:00:9f:
3c:d3:6f:42:29:7d:c8:47:ea:d1:47:e3:4c:23:e2:
91:67:70:04:1c:1e:0c:c4:14:1b:cc:f6:86:12:97:
9c:92:c3:4e:ff:46:7d:d7:21:03:ba:46:0c:d2:50:
68:04:b3:82:8b:8c:2d:16:43:dc:40:f4:99:23:9b:
9b:55:ca:a3:ed:87:d7:cb:07:4a:0c:19:d2:ec:ca:
3b:39:8b:4c:aa:b6:f9:12:6d:2b:7c:ce:d4:ad:3a:
37:ca:79:1b:3b:33:97:89:5a:11:2c:09:16:b9:ee:
5b:9c:73:57:2b:10:ef:03:34:b2:34:91:60:85:f1:
8c:47:c3:34:70:b1:3f:ad:79:16:d6:0c:01:01:20:
fd:e5:48:44:ac:c0:47:9c:cb:da:e4:4a:42:4f:f6:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:E6:88:94:B7:B8:69:8C:E0:0A:62:E1:33:16:5A:46:F7:E7:B5
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/WIrmiJS3uGmM4Api4TMWWkb357U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.64.0/24
IPv6:
2a04:2b00:13cc::/48
2a04:2b00:a006::/48
2a04:2b00:a034::/48
Signature Algorithm: sha256WithRSAEncryption
6a:35:98:1b:23:52:45:54:c9:7d:cd:d1:77:d9:dd:f4:12:55:
21:b3:7e:b2:ac:8b:56:94:29:cb:fb:5f:57:d9:b4:0f:49:e8:
2e:27:12:ef:53:40:91:2a:a1:ec:65:24:1a:93:52:15:18:3e:
28:83:e2:78:04:ba:3b:bc:04:7f:91:73:e2:11:01:fe:77:b4:
0d:10:19:1c:a3:c5:77:1c:2f:e1:97:f6:7d:d0:92:c6:90:95:
f7:8c:e1:7d:5e:58:51:d9:5c:fa:a1:a1:05:59:b3:b1:5b:9b:
a2:7b:4f:db:3c:42:37:a0:01:10:3d:d1:f3:9f:52:be:f1:31:
43:a8:8a:e5:42:69:18:ec:1d:47:57:92:63:bf:06:1a:16:c6:
32:0f:0c:53:3c:a8:f5:e3:ba:34:f0:3c:00:21:1a:72:81:de:
50:7a:80:ab:a5:3c:51:a5:3b:e3:e4:bc:61:f6:5d:bb:04:bd:
b1:b7:c1:cd:d8:b7:8e:80:02:04:e4:1f:e2:d9:8e:c8:88:46:
2b:1f:2a:a4:e7:3a:f5:31:d5:b8:92:c5:0c:f0:6c:14:36:da:
4b:d2:36:ba:a9:fb:22:7b:0d:a0:d2:62:ee:20:9b:c4:35:86:
d2:7e:43:2b:df:45:3e:2f:60:61:39:4e:0f:25:ae:4e:41:06:
a3:7b:ef:4c
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYzFbiOHqy21LEuIgSGKXFo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3
ZGY4ZDMwHhcNMjQwMTAxMTQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODhhZTY4ODk0YjdiODY5OGNlMDBhNjJlMTMzMTY1YTQ2ZjdlN2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAS0pk58GkVkycJgEQvbXAlnMTRa
FP/E/jrPhnrMydeYfYGsQajxaIVCaTwcy4sE3s5w3ztEm4/CcGqFopQ/NTorWZry
0vw8V1mQaKz2oPfesVNegH7x9heCSiYNYGbjke9i5oFIAJ88029CKX3IR+rRR+NM
I+KRZ3AEHB4MxBQbzPaGEpecksNO/0Z91yEDukYM0lBoBLOCi4wtFkPcQPSZI5ub
Vcqj7YfXywdKDBnS7Mo7OYtMqrb5Em0rfM7UrTo3ynkbOzOXiVoRLAkWue5bnHNX
KxDvAzSyNJFghfGMR8M0cLE/rXkW1gwBASD95UhErMBHnMva5EpCT/Y46QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFFiK5oiUt7hpjOAKYuEzFlpG9+e1MB8GA1UdIwQY
MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt
MDUzOGU5NWYzZjEyLzEvV0lybWlKUzN1R21NNEFwaTRUTVdXa2IzNTdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy
LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAuRhAMCEE
AgACMBsDBwAqBCsAE8wDBwAqBCsAoAYDBwAqBCsAoDQwDQYJKoZIhvcNAQELBQAD
ggEBAGo1mBsjUkVUyX3N0XfZ3fQSVSGzfrKsi1aUKcv7X1fZtA9J6C4nEu9TQJEq
oexlJBqTUhUYPiiD4ngEuju8BH+Rc+IRAf53tA0QGRyjxXccL+GX9n3QksaQlfeM
4X1eWFHZXPqhoQVZs7Fbm6J7T9s8QjegARA90fOfUr7xMUOoiuVCaRjsHUdXkmO/
BhoWxjIPDFM8qPXjujTwPAAhGnKB3lB6gKulPFGlO+PkvGH2XbsEvbG3wc3Yt46A
AgTkH+LZjsiIRisfKqTnOvUx1biSxQzwbBQ22kvSNrqp+yJ7DaDSYu4gm8Q1htJ+
QyvfRT4vYGE5Tg8lrk5BBqN770w=
-----END CERTIFICATE-----
Generated at Sat Jun 8 07:10:08 2024 by rpki-client on console-fra.rpki-client.org