Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/wSoGkVF9tnaUbWQHi_q4q16VzeY.roa
File: wSoGkVF9tnaUbWQHi_q4q16VzeY.roa (raw, json)
Hash identifier: 9afnTIAWmPkIhq9GRZyJY6oc5/3fIOhhnnJwcpp2wWw=
Subject key identifier: C1:2A:06:91:51:7D:B6:76:94:6D:64:07:8B:FA:B8:AB:5E:95:CD:E6
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 0192517D25147D5295F171432AFD56FC4AB7
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/wSoGkVF9tnaUbWQHi_q4q16VzeY.roa
Signing time: Thu 03 Oct 2024 08:26:48 +0000
ROA not before: Thu 03 Oct 2024 08:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19539
IP address blocks: 178.248.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:7d:25:14:7d:52:95:f1:71:43:2a:fd:56:fc:4a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Oct 3 08:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c12a0691517db676946d64078bfab8ab5e95cde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:cd:4c:c9:1d:02:18:d8:bc:57:f9:a2:f0:
94:ca:c9:b8:d0:8c:29:89:1e:d1:63:0d:df:4b:ae:
d1:77:9b:9d:6a:36:21:b7:2b:37:45:d3:c0:37:9e:
58:67:70:75:64:fd:95:61:5e:07:d4:f7:09:50:0b:
bf:c8:90:37:01:88:81:f1:d7:00:55:0f:b4:96:56:
98:61:e5:17:bc:fe:20:60:04:9f:39:5e:84:15:12:
95:66:c6:2e:9c:af:48:3e:28:5b:c4:b5:54:fc:c9:
d1:89:68:92:16:45:e3:d7:65:a4:13:ad:89:d4:1b:
9d:e0:38:5f:9e:3d:ba:e3:42:bb:b9:cc:aa:47:2e:
c8:1f:33:8f:a3:56:77:40:7c:a6:a6:78:58:74:12:
d5:ca:89:73:3c:a2:76:94:ea:20:f5:bd:ea:66:20:
b6:38:d7:df:f2:28:ee:4e:8d:5e:18:52:73:0b:e6:
b0:64:a3:ea:51:5c:72:e4:ba:ef:49:b1:37:6b:83:
11:c5:a9:3c:e8:75:ab:b6:e4:69:53:40:48:88:35:
0b:99:24:8a:c2:b6:3b:dd:f7:c6:4f:65:23:4b:9c:
26:e8:ea:52:72:f5:bd:3c:38:86:7d:50:03:d6:a2:
da:e6:60:ef:cb:e2:6c:e9:3c:20:6e:20:6c:db:f6:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2A:06:91:51:7D:B6:76:94:6D:64:07:8B:FA:B8:AB:5E:95:CD:E6
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/wSoGkVF9tnaUbWQHi_q4q16VzeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.28.0/22
Signature Algorithm: sha256WithRSAEncryption
88:c5:36:d5:6d:d3:34:f8:77:de:d1:1a:4a:bd:00:66:90:eb:
66:ea:7e:c8:60:c7:60:61:2f:3b:67:6c:8b:36:40:f9:53:31:
e5:ae:c4:d1:c2:15:06:68:ca:f2:43:a2:b2:8f:49:5e:ea:7f:
09:34:16:73:8b:14:11:d2:5c:ca:9e:44:fd:c6:1f:49:ae:c1:
a4:90:02:1d:44:88:b3:b4:14:b8:5b:bb:04:2e:e4:00:2a:2e:
71:d4:b7:ec:5e:7e:5a:ea:be:58:22:e2:4e:4e:76:60:77:d2:
6b:87:a9:2c:72:5d:fc:b2:47:57:d1:35:8b:3b:d9:42:4e:d4:
60:79:ef:74:95:2e:20:63:d6:ee:a0:f3:90:89:1d:a7:58:5e:
0c:81:03:1d:de:f5:4d:ea:cd:b4:6c:22:d1:f3:22:47:8e:4f:
d7:6e:77:5d:3b:6a:4f:b3:d5:c7:5d:28:f4:93:a2:82:2a:d2:
48:63:57:e0:e4:45:46:b8:49:88:92:14:40:b7:0e:2b:f4:07:
5a:0b:1f:81:ab:7d:0c:f1:86:9e:ab:cb:1e:4d:fc:1c:1b:1d:
a7:34:5e:35:79:1a:6f:c1:ae:6f:42:25:b0:11:7f:1c:29:c9:
51:41:85:00:67:75:21:02:5e:4b:ee:48:94:da:92:c1:51:bf:
77:bf:eb:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJRfSUUfVKV8XFDKv1W/Eq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3
M2QwMmUwHhcNMjQxMDAzMDgyNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTJhMDY5MTUxN2RiNjc2OTQ2ZDY0MDc4YmZhYjhhYjVlOTVjZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUTNTMkdAhjYvFf5ovCUysm40Iwp
iR7RYw3fS67Rd5udajYhtys3RdPAN55YZ3B1ZP2VYV4H1PcJUAu/yJA3AYiB8dcA
VQ+0llaYYeUXvP4gYASfOV6EFRKVZsYunK9IPihbxLVU/MnRiWiSFkXj12WkE62J
1Bud4Dhfnj2640K7ucyqRy7IHzOPo1Z3QHympnhYdBLVyolzPKJ2lOog9b3qZiC2
ONff8ijuTo1eGFJzC+awZKPqUVxy5LrvSbE3a4MRxak86HWrtuRpU0BIiDULmSSK
wrY73ffGT2UjS5wm6OpScvW9PDiGfVAD1qLa5mDvy+Js6TwgbiBs2/aTnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMEqBpFRfbZ2lG1kB4v6uKtelc3mMB8GA1UdIwQY
MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt
M2I4YjBkMWE1OWE5LzEvd1NvR2tWRjl0bmFVYldRSGlfcTRxMTZWemVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5
LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsvgcMA0G
CSqGSIb3DQEBCwUAA4IBAQCIxTbVbdM0+Hfe0RpKvQBmkOtm6n7IYMdgYS87Z2yL
NkD5UzHlrsTRwhUGaMryQ6Kyj0le6n8JNBZzixQR0lzKnkT9xh9JrsGkkAIdRIiz
tBS4W7sELuQAKi5x1LfsXn5a6r5YIuJOTnZgd9Jrh6kscl38skdX0TWLO9lCTtRg
ee90lS4gY9buoPOQiR2nWF4MgQMd3vVN6s20bCLR8yJHjk/XbnddO2pPs9XHXSj0
k6KCKtJIY1fg5EVGuEmIkhRAtw4r9AdaCx+Bq30M8Yaeq8seTfwcGx2nNF41eRpv
wa5vQiWwEX8cKclRQYUAZ3UhAl5L7kiU2pLBUb93v+sW
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:15:52 2024 by rpki-client on console-fra.rpki-client.org