Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/w1LofhwR97_-KJBuuQmwPsT-DfE.roa
File: w1LofhwR97_-KJBuuQmwPsT-DfE.roa (raw, json)
Hash identifier: ZegX9ZvXOdOK7IGDHZpZztmTzMRGGg13xA3Po4O585g=
Subject key identifier: C3:52:E8:7E:1C:11:F7:BF:FE:28:90:6E:B9:09:B0:3E:C4:FE:0D:F1
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 018CC493071A8CEF1A7AA47ED5FAC85DA34B
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/w1LofhwR97_-KJBuuQmwPsT-DfE.roa
Signing time: Mon 01 Jan 2024 10:30:19 +0000
ROA not before: Mon 01 Jan 2024 10:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200602
IP address blocks: 193.143.18.0/24 maxlen: 24
193.143.75.0/24 maxlen: 24
193.143.72.0/24 maxlen: 24
193.143.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:07:1a:8c:ef:1a:7a:a4:7e:d5:fa:c8:5d:a3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Jan 1 10:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c352e87e1c11f7bffe28906eb909b03ec4fe0df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:97:a7:28:2a:36:3a:50:d4:4a:dd:a0:00:94:
88:a2:42:3a:bd:de:d6:a4:9e:20:91:64:a5:1c:51:
71:96:23:d8:47:f3:e6:5f:5f:28:1a:03:a0:c4:c8:
f5:6e:ad:0b:f1:22:3b:7c:b1:ab:ea:90:83:a6:70:
11:10:e8:3c:92:d8:c3:a1:35:68:e5:7f:da:dc:bf:
b4:07:8a:28:75:61:72:e7:45:94:08:59:ea:dc:ad:
7e:d5:d9:07:2a:6b:5e:3b:f2:d2:6a:b3:4c:d4:76:
99:ee:7e:eb:6a:2f:36:82:af:7b:e7:8b:1a:e1:51:
73:15:13:16:ed:78:47:4c:6f:35:42:c2:9f:62:cb:
f5:4b:bf:e1:4d:e7:df:d9:65:50:a3:c5:26:3d:5d:
6a:ab:b0:87:35:fb:4c:de:6a:5d:58:4e:c5:a7:23:
6a:88:76:98:44:59:c5:f8:be:0d:06:d5:8e:a2:71:
26:07:21:97:cc:9d:c8:58:72:d6:65:92:65:26:23:
23:c2:58:d2:56:55:25:5e:67:44:ce:0e:dc:fb:e9:
4a:cf:c9:00:37:a9:3b:b5:60:5f:6c:66:45:0f:80:
f6:78:63:9a:16:f8:d7:fd:58:e3:95:93:03:5d:49:
ed:46:fe:ea:d3:1c:10:21:53:7a:4b:13:4d:4f:56:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:52:E8:7E:1C:11:F7:BF:FE:28:90:6E:B9:09:B0:3E:C4:FE:0D:F1
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/w1LofhwR97_-KJBuuQmwPsT-DfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.18.0/24
193.143.72.0/24
193.143.75.0-193.143.76.255
Signature Algorithm: sha256WithRSAEncryption
41:c0:b1:f7:c9:36:6b:ae:10:12:76:51:7a:fb:77:0d:5a:98:
c5:58:9c:1a:4f:e2:95:50:86:cd:41:db:86:9b:8e:15:de:a3:
0d:65:93:5f:5a:06:4f:84:38:10:a7:10:c9:b2:c4:04:c2:a6:
ad:f8:33:7c:ad:a3:2d:cd:fc:af:ca:60:a9:17:4b:e9:9f:8e:
21:d0:ef:71:15:47:a3:71:5e:d3:aa:7a:c3:41:5d:40:66:58:
b0:f6:31:e3:ae:fa:a2:0b:38:1f:77:32:4b:67:c6:fc:f4:ff:
69:91:29:3c:f8:26:06:51:3b:ac:fa:3e:fb:5b:24:d2:a9:f3:
0a:af:f9:6a:1a:fc:88:52:38:45:c3:f1:9d:9c:03:f5:51:b9:
1c:1e:ff:a0:24:b1:6d:84:4b:f3:8a:2e:f2:8b:75:00:77:c5:
e5:80:f9:d5:72:9a:ae:d9:63:a5:76:35:f8:32:ab:ab:74:8b:
e5:37:97:b7:a5:86:1e:53:03:e3:a9:31:6c:5f:00:6e:96:df:
76:c0:37:26:33:f2:a7:34:a5:e5:7d:14:dd:2a:78:95:4c:92:
4a:7e:41:04:2a:84:3f:b9:9b:83:c6:00:5d:8f:10:77:d7:1e:
7a:dc:d9:b1:f6:85:59:f3:d6:6c:3b:63:d5:43:c7:9d:bd:df:
12:d8:7d:f5
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzEkwcajO8aeqR+1frIXaNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNDNkZWQ3NDViMDVmNDAzOGU5ODNmYjlkNzhlZGY1NmYy
NTEzNDYwHhcNMjQwMTAxMTAzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzUyZTg3ZTFjMTFmN2JmZmUyODkwNmViOTA5YjAzZWM0ZmUwZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZenKCo2OlDUSt2gAJSIokI6vd7W
pJ4gkWSlHFFxliPYR/PmX18oGgOgxMj1bq0L8SI7fLGr6pCDpnAREOg8ktjDoTVo
5X/a3L+0B4oodWFy50WUCFnq3K1+1dkHKmteO/LSarNM1HaZ7n7rai82gq9754sa
4VFzFRMW7XhHTG81QsKfYsv1S7/hTeff2WVQo8UmPV1qq7CHNftM3mpdWE7FpyNq
iHaYRFnF+L4NBtWOonEmByGXzJ3IWHLWZZJlJiMjwljSVlUlXmdEzg7c++lKz8kA
N6k7tWBfbGZFD4D2eGOaFvjX/VjjlZMDXUntRv7q0xwQIVN6SxNNT1YEQQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMNS6H4cEfe//iiQbrkJsD7E/g3xMB8GA1UdIwQY
MBaAFFJD3tdFsF9AOOmD+5147fVvJRNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMt
YzUzNmRmNWMyNzRlLzEvdzFMb2Zod1I5N18tS0pCdXVRbXdQc1QtRGZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMtYzUzNmRmNWMyNzRl
LzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwY8SAwQA
wY9IMAwDBADBj0sDBADBj0wwDQYJKoZIhvcNAQELBQADggEBAEHAsffJNmuuEBJ2
UXr7dw1amMVYnBpP4pVQhs1B24abjhXeow1lk19aBk+EOBCnEMmyxATCpq34M3yt
oy3N/K/KYKkXS+mfjiHQ73EVR6NxXtOqesNBXUBmWLD2MeOu+qILOB93Mktnxvz0
/2mRKTz4JgZRO6z6PvtbJNKp8wqv+Woa/IhSOEXD8Z2cA/VRuRwe/6AksW2ES/OK
LvKLdQB3xeWA+dVymq7ZY6V2Nfgyq6t0i+U3l7elhh5TA+OpMWxfAG6W33bANyYz
8qc0peV9FN0qeJVMkkp+QQQqhD+5m4PGAF2PEHfXHnrc2bH2hVnz1mw7Y9VDx529
3xLYffU=
-----END CERTIFICATE-----
Generated at Wed Jun 26 05:16:13 2024 by rpki-client on console-ams.rpki-client.org