Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/WgqGSLYRBut3eXIrREhw-Y0SZDY.roa
File: WgqGSLYRBut3eXIrREhw-Y0SZDY.roa (raw, json)
Hash identifier: 8m3OWde75jbGR3+Og03P3+bqj6osBXsy7yKoA+UYG9g=
Subject key identifier: 5A:0A:86:48:B6:11:06:EB:77:79:72:2B:44:48:70:F9:8D:12:64:36
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 018CC8014B3E767A5A06068FE73F06EA2B05
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/WgqGSLYRBut3eXIrREhw-Y0SZDY.roa
Signing time: Tue 02 Jan 2024 02:29:37 +0000
ROA not before: Tue 02 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197395
IP address blocks: 45.10.132.0/22 maxlen: 22
46.243.96.0/21 maxlen: 23
185.119.188.0/22 maxlen: 22
2a04:e580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4b:3e:76:7a:5a:06:06:8f:e7:3f:06:ea:2b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Jan 2 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a0a8648b61106eb7779722b444870f98d126436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:7b:8d:ce:a5:bc:3e:68:38:db:c3:10:6e:
47:e1:82:cd:f4:4a:e1:17:2a:4e:64:de:7b:27:09:
04:c1:98:68:96:e8:4f:bc:00:30:00:ce:b7:43:ca:
f1:c0:29:89:e7:6f:ab:47:ce:a4:67:ca:68:72:a1:
8b:2e:5a:8b:c4:59:c6:33:dc:a4:de:31:5c:0d:49:
2c:23:0e:b2:4c:63:ff:c8:36:9e:49:aa:3b:a7:b7:
4d:1f:c9:e4:64:da:30:d5:13:b0:f9:e4:f8:5b:ac:
6b:07:cd:84:44:06:82:d5:ea:30:36:0c:84:4d:18:
f5:38:1f:0a:ec:a1:09:b2:66:ac:52:d1:0e:95:88:
c0:9b:13:34:35:62:0e:c2:92:5e:e2:42:a2:91:30:
ab:51:32:ae:ef:98:11:12:f4:cd:d4:78:15:c1:31:
ca:d5:f1:46:53:0c:f5:0e:5f:57:13:1e:ac:82:ce:
eb:6b:9f:c7:55:f0:24:a5:77:ac:dd:a8:30:c0:89:
51:27:88:5a:f9:f6:74:59:ee:04:97:e8:d7:fc:ac:
3c:8a:cd:57:79:23:fb:91:1f:2e:cf:f6:46:2f:a9:
22:bb:20:24:13:95:a4:07:7f:4c:99:b9:36:34:c3:
7c:48:45:aa:74:ca:1a:96:b3:b3:01:64:7e:ec:8c:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0A:86:48:B6:11:06:EB:77:79:72:2B:44:48:70:F9:8D:12:64:36
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/WgqGSLYRBut3eXIrREhw-Y0SZDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.132.0/22
46.243.96.0/21
185.119.188.0/22
IPv6:
2a04:e580::/29
Signature Algorithm: sha256WithRSAEncryption
9f:55:32:92:66:06:0a:70:a5:4b:51:0b:73:4e:e4:9f:ee:1a:
9e:d0:46:21:ea:e5:db:95:e3:d5:c8:02:a2:4a:3e:b6:da:0a:
0b:ad:88:bc:50:54:a0:66:e6:b8:aa:79:4b:7f:b6:a5:be:35:
10:22:ce:29:67:12:ba:82:3a:fa:b5:fd:a0:0b:27:89:18:5d:
0c:ec:ef:21:a5:36:b6:90:8f:09:06:8b:2d:c8:8c:ed:82:83:
37:c9:11:69:e8:b8:6b:c5:e8:bb:84:76:8f:1a:89:16:62:ee:
78:fe:8f:f1:e1:d1:09:4d:b4:67:4e:20:cd:50:3d:fc:61:fc:
f5:4c:31:64:c8:4e:75:ae:97:61:99:74:2d:7a:4f:c6:f1:5b:
2b:87:89:b3:02:50:c6:90:ac:cf:8e:03:7b:a6:c4:07:f8:e7:
66:95:6a:ee:d0:6c:c6:5f:f8:7f:99:1c:5a:0c:37:22:23:8f:
8d:8a:fa:e6:fd:53:54:c0:ad:2d:7c:49:7a:c5:1d:56:e1:5c:
a9:f2:c1:73:15:03:58:07:2a:da:6a:9e:fe:03:4f:cb:d5:59:
3f:a2:2c:38:d2:61:64:c6:f2:f8:2a:73:05:b8:fa:cd:e2:20:
ea:89:22:7a:b2:3e:b7:e2:78:86:93:ce:9f:d2:10:c0:ce:e0:
de:f1:59:2d
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzIAUs+dnpaBgaP5z8G6isFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTNhYjZiMzExOGUwYmRlMGU2NDg4ZTZiZWQ2Yzk2OTQx
ZTBlODQwHhcNMjQwMTAyMDIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTBhODY0OGI2MTEwNmViNzc3OTcyMmI0NDQ4NzBmOThkMTI2NDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDx7jc6lvD5oONvDEG5H4YLN9Erh
FypOZN57JwkEwZholuhPvAAwAM63Q8rxwCmJ52+rR86kZ8pocqGLLlqLxFnGM9yk
3jFcDUksIw6yTGP/yDaeSao7p7dNH8nkZNow1ROw+eT4W6xrB82ERAaC1eowNgyE
TRj1OB8K7KEJsmasUtEOlYjAmxM0NWIOwpJe4kKikTCrUTKu75gREvTN1HgVwTHK
1fFGUwz1Dl9XEx6sgs7ra5/HVfAkpXes3agwwIlRJ4ha+fZ0We4El+jX/Kw8is1X
eSP7kR8uz/ZGL6kiuyAkE5WkB39Mmbk2NMN8SEWqdMoalrOzAWR+7IzsgwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFFoKhki2EQbrd3lyK0RIcPmNEmQ2MB8GA1UdIwQY
MBaAFPLjq2sxGOC94OZIjmvtbJaUHg6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAt
ODNiMDM4NzAwOTRkLzEvV2dxR1NMWVJCdXQzZVhJclJFaHctWTBTWkRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAtODNiMDM4NzAwOTRk
LzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLQqEAwQD
LvNgAwQCuXe8MA0EAgACMAcDBQMqBOWAMA0GCSqGSIb3DQEBCwUAA4IBAQCfVTKS
ZgYKcKVLUQtzTuSf7hqe0EYh6uXblePVyAKiSj622goLrYi8UFSgZua4qnlLf7al
vjUQIs4pZxK6gjr6tf2gCyeJGF0M7O8hpTa2kI8JBostyIztgoM3yRFp6Lhrxei7
hHaPGokWYu54/o/x4dEJTbRnTiDNUD38Yfz1TDFkyE51rpdhmXQtek/G8Vsrh4mz
AlDGkKzPjgN7psQH+OdmlWru0GzGX/h/mRxaDDciI4+Nivrm/VNUwK0tfEl6xR1W
4Vyp8sFzFQNYByraap7+A0/L1Vk/oiw40mFkxvL4KnMFuPrN4iDqiSJ6sj634niG
k86f0hDAzuDe8Vkt
-----END CERTIFICATE-----
Generated at Tue May 28 10:00:05 2024 by rpki-client on console-ams.rpki-client.org