Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/wVsdpL9Y7yzPIAeEzhSIXn8ZGJI.roa
File: wVsdpL9Y7yzPIAeEzhSIXn8ZGJI.roa (raw, json)
Hash identifier: mKyA2wYgNN8AOwnWp/yfE/89RM3xPKhyAxmNsYJksjc=
Subject key identifier: C1:5B:1D:A4:BF:58:EF:2C:CF:20:07:84:CE:14:88:5E:7F:19:18:92
Certificate issuer: /CN=6e80725060ff4b3b55acde6a397c31eea97c237c
Certificate serial: 018CC8DEA7A9CB680CAFF66611738FE71A5D
Authority key identifier: 6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/wVsdpL9Y7yzPIAeEzhSIXn8ZGJI.roa
Signing time: Tue 02 Jan 2024 06:31:24 +0000
ROA not before: Tue 02 Jan 2024 06:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44700
IP address blocks: 195.149.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a7:a9:cb:68:0c:af:f6:66:11:73:8f:e7:1a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e80725060ff4b3b55acde6a397c31eea97c237c
Validity
Not Before: Jan 2 06:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c15b1da4bf58ef2ccf200784ce14885e7f191892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:e7:4f:d7:64:3f:5f:03:d1:cc:d3:65:3c:
d2:f9:c4:c6:96:0a:a4:2d:86:b4:a7:99:4c:36:db:
2e:a7:82:e5:a1:57:ef:c1:93:7a:be:a0:b1:a9:c7:
18:07:41:d9:93:96:a9:ab:aa:32:28:57:d1:3c:12:
4a:4b:e5:5b:10:58:2b:fd:c4:71:e0:35:d3:b0:8b:
83:12:55:20:87:69:a3:2a:f4:93:20:fd:af:15:14:
dc:fa:34:ec:d5:bd:47:09:3e:7e:d4:cd:1e:2a:1a:
c2:d6:37:5e:49:45:9f:2e:2a:07:df:ec:4e:a1:88:
09:38:ca:b3:59:71:e0:94:c3:23:9f:cc:b5:08:dc:
97:57:d1:07:d9:33:68:17:c9:99:d2:87:4f:c9:e5:
0c:0c:9e:9c:91:0b:d7:6a:d0:20:8c:f6:73:4a:4f:
fb:b6:86:f6:87:39:a2:64:04:32:14:47:66:77:25:
76:0c:f0:9d:dd:62:e0:6d:9c:02:d2:42:f1:ef:d8:
01:98:1e:c2:a0:cd:5e:04:4e:5a:18:be:06:2a:e8:
68:28:94:e0:91:24:0d:85:d8:99:87:b6:6f:8f:66:
91:59:db:ce:1b:a4:c3:b2:f8:4a:0a:b1:40:e8:34:
67:3d:7c:44:1c:2f:cf:ae:fa:d6:02:f3:81:06:fb:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5B:1D:A4:BF:58:EF:2C:CF:20:07:84:CE:14:88:5E:7F:19:18:92
X509v3 Authority Key Identifier:
keyid:6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/wVsdpL9Y7yzPIAeEzhSIXn8ZGJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:29:0e:ec:c3:ee:36:41:64:3c:51:22:e3:93:fd:9b:4a:e7:
43:3e:a0:a2:12:f1:7c:15:d4:b1:33:5c:87:a2:c4:8a:71:f7:
e7:e3:f4:37:28:00:1d:c9:ca:76:49:50:bd:fc:b6:38:4a:8d:
42:df:4b:a2:79:90:e5:d8:56:74:b5:2b:e7:a4:fd:11:5b:bf:
e4:1a:ae:a2:66:3c:ad:2e:d8:60:91:be:24:6d:ac:b9:c0:46:
55:0e:47:81:cb:d6:19:35:b5:5d:bc:5b:b8:a6:bd:d6:20:b0:
ef:76:3a:dc:a7:e6:8f:db:27:da:c8:0e:4f:0f:03:39:09:c2:
98:92:6d:ff:f5:23:7c:6e:a4:be:99:6a:f4:e7:71:c3:f2:73:
ca:2c:9f:21:ee:16:97:b3:1b:f7:85:c6:fa:65:49:82:79:90:
52:8f:aa:ae:5c:fa:9b:3a:d8:ea:e9:55:a8:bc:6f:ad:6a:e5:
cc:40:c5:d2:57:81:77:cb:dc:59:4d:b6:ed:d2:ae:4f:d3:e4:
f9:28:bd:5c:06:e9:39:cb:f8:23:aa:c3:01:d8:6d:18:e2:1a:
b6:9a:d4:67:e3:64:20:82:b1:cc:6b:bf:51:a7:d0:b3:14:f0:
78:c0:1e:b9:19:b4:43:91:e5:c0:3d:0f:1c:4e:cc:d1:5c:42:
25:49:26:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3qepy2gMr/ZmEXOP5xpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODA3MjUwNjBmZjRiM2I1NWFjZGU2YTM5N2MzMWVlYTk3
YzIzN2MwHhcNMjQwMTAyMDYzMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTViMWRhNGJmNThlZjJjY2YyMDA3ODRjZTE0ODg1ZTdmMTkxODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4bnT9dkP18D0czTZTzS+cTGlgqk
LYa0p5lMNtsup4LloVfvwZN6vqCxqccYB0HZk5apq6oyKFfRPBJKS+VbEFgr/cRx
4DXTsIuDElUgh2mjKvSTIP2vFRTc+jTs1b1HCT5+1M0eKhrC1jdeSUWfLioH3+xO
oYgJOMqzWXHglMMjn8y1CNyXV9EH2TNoF8mZ0odPyeUMDJ6ckQvXatAgjPZzSk/7
tob2hzmiZAQyFEdmdyV2DPCd3WLgbZwC0kLx79gBmB7CoM1eBE5aGL4GKuhoKJTg
kSQNhdiZh7Zvj2aRWdvOG6TDsvhKCrFA6DRnPXxEHC/PrvrWAvOBBvtWrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFbHaS/WO8szyAHhM4UiF5/GRiSMB8GA1UdIwQY
MBaAFG6AclBg/0s7Vazeajl8Me6pfCN8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYt
NTMzMzVkYTBjZmQzLzEvd1ZzZHBMOVk3eXpQSUFlRXpoU0lYbjhaR0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYtNTMzMzVkYTBjZmQz
LzEvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5VjMA0G
CSqGSIb3DQEBCwUAA4IBAQCNKQ7sw+42QWQ8USLjk/2bSudDPqCiEvF8FdSxM1yH
osSKcffn4/Q3KAAdycp2SVC9/LY4So1C30uieZDl2FZ0tSvnpP0RW7/kGq6iZjyt
Lthgkb4kbay5wEZVDkeBy9YZNbVdvFu4pr3WILDvdjrcp+aP2yfayA5PDwM5CcKY
km3/9SN8bqS+mWr053HD8nPKLJ8h7haXsxv3hcb6ZUmCeZBSj6quXPqbOtjq6VWo
vG+tauXMQMXSV4F3y9xZTbbt0q5P0+T5KL1cBuk5y/gjqsMB2G0Y4hq2mtRn42Qg
grHMa79Rp9CzFPB4wB65GbRDkeXAPQ8cTszRXEIlSSY6
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:54:14 2024 by rpki-client on console-ams.rpki-client.org