Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/WKy0GVTt9OdZAftzTWMg2n99_FU.roa
File: WKy0GVTt9OdZAftzTWMg2n99_FU.roa (raw, json)
Hash identifier: 6WlUhG6VaSFmyS8Osmp2aI28To2oUXmn6OGFEFHAqtY=
Subject key identifier: 58:AC:B4:19:54:ED:F4:E7:59:01:FB:73:4D:63:20:DA:7F:7D:FC:55
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 018CC72771A654943DA54C3D0C579EB4FA6A
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/WKy0GVTt9OdZAftzTWMg2n99_FU.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12337
IP address blocks: 185.250.111.0/24 maxlen: 24
185.250.108.0/24 maxlen: 24
185.250.109.0/24 maxlen: 24
185.250.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:71:a6:54:94:3d:a5:4c:3d:0c:57:9e:b4:fa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58acb41954edf4e75901fb734d6320da7f7dfc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:54:64:8f:61:00:c9:db:da:3a:bc:c3:70:b7:
4a:41:2e:82:92:a4:23:03:4c:36:05:67:a9:5f:9a:
21:73:36:f0:b9:cb:23:38:98:f0:52:5a:bb:65:6c:
67:44:be:af:f9:48:9c:3b:44:96:46:b1:be:64:c8:
d9:e4:db:0b:f8:cb:5f:6f:f8:4c:46:91:ff:e9:9b:
d5:9a:79:4a:9c:9b:a9:ba:cf:eb:d6:7d:7a:03:28:
dc:eb:04:de:e9:6b:04:35:08:2b:c2:1a:be:03:39:
8e:ca:41:71:5b:75:88:6e:87:1f:33:fa:58:56:31:
8a:d0:86:1d:01:07:0c:19:87:a4:f6:52:1e:cc:4f:
18:de:db:26:c1:51:0f:e3:26:7e:54:a4:95:81:cc:
f1:cd:b0:c4:09:b2:46:72:84:2c:2d:55:b6:a6:e4:
27:bd:63:67:2e:93:1e:a2:20:e7:0a:b6:0e:9b:86:
8a:59:b9:f1:11:a6:df:7c:88:b9:29:74:c6:fa:26:
c7:0e:76:5c:d4:2d:24:a1:11:1a:47:52:1f:3c:5d:
1d:e5:b8:42:9e:31:ad:89:93:07:fc:42:37:93:02:
e7:72:72:c8:cb:eb:23:e7:e1:3e:dc:d6:66:7a:e6:
a7:0d:9d:b7:ef:0d:4b:55:5d:ad:e8:84:3b:e6:c5:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AC:B4:19:54:ED:F4:E7:59:01:FB:73:4D:63:20:DA:7F:7D:FC:55
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/WKy0GVTt9OdZAftzTWMg2n99_FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:83:bd:d7:a2:f4:ca:dc:b1:00:79:1a:2a:18:d9:70:64:c7:
32:20:49:5b:f6:56:a7:b9:8d:82:4d:b3:a4:54:b3:42:3e:fe:
85:9a:04:10:f0:a2:3f:7b:5a:49:e1:f2:8c:70:d7:fb:b6:bf:
d4:63:0b:34:6e:44:65:e9:e5:dd:bd:ff:ba:a6:d4:16:a9:9e:
04:07:15:ea:f4:34:46:51:b3:4f:04:4e:0d:55:fa:3a:6a:ad:
ed:4f:9e:54:d9:c3:65:46:1a:45:0f:e9:02:58:43:00:3b:2f:
55:7f:db:7f:56:12:a2:b9:4a:30:3b:c9:3f:de:76:04:55:75:
9e:6a:ee:14:7c:7a:81:21:6a:6d:2b:bf:52:e2:9d:19:c6:01:
da:47:ba:52:5e:8a:13:6e:8a:50:33:82:b7:c5:a4:92:5d:10:
38:94:25:38:e5:81:78:10:57:ba:3b:15:bf:9c:e2:e4:d7:4f:
87:e1:da:bb:8a:18:2a:e1:65:6b:e9:fa:e3:45:30:57:cb:e1:
d0:87:7a:62:a5:1a:f1:f7:56:db:6b:43:03:ff:12:48:3e:4e:
1e:d9:3d:a3:86:3b:cd:c8:4d:cb:7a:ac:f9:78:a1:c2:08:81:
ad:82:4c:a8:25:86:99:4d:30:f6:4c:e0:df:00:fb:1e:25:75:
15:a4:86:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ3GmVJQ9pUw9DFeetPpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZjdjNzQ5OGZkOWM5ZjI4NjgwNDk1MTYyYjllYjc2YWQ0
N2M2MDMwHhcNMjQwMTAxMjIzMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGFjYjQxOTU0ZWRmNGU3NTkwMWZiNzM0ZDYzMjBkYTdmN2RmYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lRkj2EAydvaOrzDcLdKQS6CkqQj
A0w2BWepX5ohczbwucsjOJjwUlq7ZWxnRL6v+UicO0SWRrG+ZMjZ5NsL+Mtfb/hM
RpH/6ZvVmnlKnJupus/r1n16Ayjc6wTe6WsENQgrwhq+AzmOykFxW3WIbocfM/pY
VjGK0IYdAQcMGYek9lIezE8Y3tsmwVEP4yZ+VKSVgczxzbDECbJGcoQsLVW2puQn
vWNnLpMeoiDnCrYOm4aKWbnxEabffIi5KXTG+ibHDnZc1C0koREaR1IfPF0d5bhC
njGtiZMH/EI3kwLncnLIy+sj5+E+3NZmeuanDZ237w1LVV2t6IQ75sW1fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFistBlU7fTnWQH7c01jINp/ffxVMB8GA1UdIwQY
MBaAFDn3x0mP2cnyhoBJUWK563atR8YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUt
ZWZjZmJhOTkwN2RjLzEvV0t5MEdWVHQ5T2RaQWZ0elRXTWcybjk5X0ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUtZWZjZmJhOTkwN2Rj
LzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufpsMA0G
CSqGSIb3DQEBCwUAA4IBAQBNg73XovTK3LEAeRoqGNlwZMcyIElb9lanuY2CTbOk
VLNCPv6FmgQQ8KI/e1pJ4fKMcNf7tr/UYws0bkRl6eXdvf+6ptQWqZ4EBxXq9DRG
UbNPBE4NVfo6aq3tT55U2cNlRhpFD+kCWEMAOy9Vf9t/VhKiuUowO8k/3nYEVXWe
au4UfHqBIWptK79S4p0ZxgHaR7pSXooTbopQM4K3xaSSXRA4lCU45YF4EFe6OxW/
nOLk10+H4dq7ihgq4WVr6frjRTBXy+HQh3pipRrx91bba0MD/xJIPk4e2T2jhjvN
yE3Leqz5eKHCCIGtgkyoJYaZTTD2TODfAPseJXUVpIYq
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:20 2024 by rpki-client on console-fra.rpki-client.org