Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/wkIYdpUKk6P3xfjq0Vyhlut7oJc.roa
File: wkIYdpUKk6P3xfjq0Vyhlut7oJc.roa (raw, json)
Hash identifier: PB2MeUKLE0dOvmc1ST+JgqeGIXZv/3pvqoYE0VYhJ5I=
Subject key identifier: C2:42:18:76:95:0A:93:A3:F7:C5:F8:EA:D1:5C:A1:96:EB:7B:A0:97
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F8BFF7AADE3A9404D7D4367F08E6F
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/wkIYdpUKk6P3xfjq0Vyhlut7oJc.roa
Signing time: Tue 02 Jan 2024 04:30:02 +0000
ROA not before: Tue 02 Jan 2024 04:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21325
IP address blocks: 87.246.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8b:ff:7a:ad:e3:a9:40:4d:7d:43:67:f0:8e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2421876950a93a3f7c5f8ead15ca196eb7ba097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:b4:34:65:db:36:96:00:2c:66:08:03:69:
68:d7:74:04:38:df:d5:ea:58:81:41:ff:3a:3e:d8:
16:42:68:ff:04:5f:1e:72:7e:bb:4a:8b:1a:b5:00:
42:9e:c9:89:31:73:78:c8:6f:89:79:bc:b7:3a:8c:
36:14:13:5b:fc:b2:c2:32:f5:4c:1d:16:1d:52:8f:
9f:37:ab:8a:42:2d:f5:f0:ac:0c:2c:4b:b4:3e:7d:
86:28:46:66:01:5a:f0:57:1f:91:0c:8c:aa:63:a3:
13:ca:68:fc:35:d3:e7:9b:b5:ed:63:db:39:43:86:
86:de:be:9b:6a:f5:8f:50:d6:e3:22:a5:10:b5:64:
af:3a:0d:20:b8:07:57:da:8d:8c:57:cc:bc:ba:4c:
ec:ea:a4:95:dc:a3:59:c4:df:f4:0a:71:51:61:3f:
91:d1:a8:79:aa:42:32:04:f4:28:b7:7c:78:82:e5:
1e:ca:98:00:06:c4:f2:ef:3d:d6:78:91:a7:23:ce:
b6:e8:07:77:ee:29:0c:1b:b0:22:f8:18:34:13:0b:
3e:75:26:2a:8d:a1:a0:98:ff:34:64:ea:66:53:7e:
c2:70:d3:00:10:bb:e5:d3:e2:2b:d7:2d:de:8e:ce:
a8:4c:62:57:98:5c:0e:a7:11:8c:1d:f1:9f:e3:6e:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:42:18:76:95:0A:93:A3:F7:C5:F8:EA:D1:5C:A1:96:EB:7B:A0:97
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/wkIYdpUKk6P3xfjq0Vyhlut7oJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.184.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:e3:ed:6e:93:22:cf:00:e4:31:7f:32:59:eb:4a:ad:ee:65:
0a:03:26:05:1e:4d:e0:d6:d7:7c:18:d5:89:5a:83:a7:43:f8:
af:f5:da:61:2e:ef:78:6f:b1:13:7c:11:e2:bb:30:76:f6:1d:
d6:76:5c:eb:a7:84:f0:e6:69:aa:cd:cf:75:5c:d4:ff:08:77:
27:20:68:e1:2a:0c:79:db:96:9c:cb:cf:aa:59:d7:dc:e4:4d:
ec:a1:c3:00:08:05:78:de:2a:2a:01:f5:51:3d:8e:a9:6b:4f:
58:45:cd:3e:88:a0:a8:58:c5:55:75:eb:d0:24:d5:94:f0:b0:
ae:ca:1e:f3:aa:aa:c7:96:5e:79:84:22:e3:af:ca:b7:f0:ec:
72:d9:9e:f8:19:68:d0:56:58:60:c2:74:48:76:bf:bd:6e:c8:
ce:d6:30:59:99:f6:bc:35:5c:ec:f8:fd:d1:37:23:1f:c1:49:
34:ef:94:82:c9:77:09:4f:0e:7f:91:b2:e1:78:f3:2e:09:a1:
2e:27:dc:1c:b5:f2:ce:dc:40:82:b7:ca:de:54:3e:1a:a6:14:
4e:c9:5e:77:42:d3:7a:85:97:d8:8f:7f:1a:0f:9d:fa:29:99:
bf:bf:1a:5c:aa:85:df:f9:9c:19:ef:da:12:33:22:1d:76:5c:
a1:e4:ed:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb4v/eq3jqUBNfUNn8I5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjQwMTAyMDQzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjQyMTg3Njk1MGE5M2EzZjdjNWY4ZWFkMTVjYTE5NmViN2JhMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCq0NGXbNpYALGYIA2lo13QEON/V
6liBQf86PtgWQmj/BF8ecn67SosatQBCnsmJMXN4yG+Jeby3Oow2FBNb/LLCMvVM
HRYdUo+fN6uKQi318KwMLEu0Pn2GKEZmAVrwVx+RDIyqY6MTymj8NdPnm7XtY9s5
Q4aG3r6bavWPUNbjIqUQtWSvOg0guAdX2o2MV8y8ukzs6qSV3KNZxN/0CnFRYT+R
0ah5qkIyBPQot3x4guUeypgABsTy7z3WeJGnI8626Ad37ikMG7Ai+Bg0Ews+dSYq
jaGgmP80ZOpmU37CcNMAELvl0+Ir1y3ejs6oTGJXmFwOpxGMHfGf425PSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMJCGHaVCpOj98X46tFcoZbre6CXMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvd2tJWWRwVUtrNlAzeGZqcTBWeWhsdXQ3b0pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/a4MA0G
CSqGSIb3DQEBCwUAA4IBAQB94+1ukyLPAOQxfzJZ60qt7mUKAyYFHk3g1td8GNWJ
WoOnQ/iv9dphLu94b7ETfBHiuzB29h3Wdlzrp4Tw5mmqzc91XNT/CHcnIGjhKgx5
25acy8+qWdfc5E3socMACAV43ioqAfVRPY6pa09YRc0+iKCoWMVVdevQJNWU8LCu
yh7zqqrHll55hCLjr8q38Oxy2Z74GWjQVlhgwnRIdr+9bsjO1jBZmfa8NVzs+P3R
NyMfwUk075SCyXcJTw5/kbLhePMuCaEuJ9wctfLO3ECCt8reVD4aphROyV53QtN6
hZfYj38aD536KZm/vxpcqoXf+ZwZ79oSMyIddlyh5O2L
-----END CERTIFICATE-----
Generated at Sun May 26 06:42:08 2024 by rpki-client on console-ams.rpki-client.org