Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/WAb1rsShMPXyoFwmrPJmDUHRXrY.roa
File: WAb1rsShMPXyoFwmrPJmDUHRXrY.roa (raw, json)
Hash identifier: BT/aKXyhxIOXF3HpJ59jIbFby5z/MuxF5cdpw9jOwik=
Subject key identifier: 58:06:F5:AE:C4:A1:30:F5:F2:A0:5C:26:AC:F2:66:0D:41:D1:5E:B6
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 018CC79508945A33C4B74E8BED97776609F4
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/WAb1rsShMPXyoFwmrPJmDUHRXrY.roa
Signing time: Tue 02 Jan 2024 00:31:21 +0000
ROA not before: Tue 02 Jan 2024 00:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204299
IP address blocks: 185.254.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:08:94:5a:33:c4:b7:4e:8b:ed:97:77:66:09:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Jan 2 00:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5806f5aec4a130f5f2a05c26acf2660d41d15eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:d6:2b:66:1a:75:b5:df:88:05:f9:b5:70:
c2:18:6a:25:48:73:3a:5c:b4:21:92:a2:4b:17:d9:
a5:23:52:f5:17:3d:9e:78:aa:b3:e3:df:3f:39:28:
45:9b:a5:c2:4a:95:dc:34:6a:2e:5d:1a:e0:7e:0a:
9f:15:cb:a0:25:96:0a:04:dd:ae:11:ec:54:96:1a:
23:07:6f:b1:fe:f8:5d:06:7d:66:3f:e8:36:82:13:
98:36:ce:5f:55:b4:77:c7:b2:5b:cc:af:04:5a:f1:
83:6d:79:35:fa:b2:01:bd:67:ca:68:6e:55:c9:de:
58:02:89:d9:5d:e9:ee:9a:91:86:05:2e:f9:90:05:
fa:8f:ee:61:c8:41:dc:d4:58:c1:29:d5:43:9e:cf:
29:cf:b4:22:7c:c2:f6:ba:f6:91:ac:3c:5e:f3:99:
94:90:61:d2:09:72:3d:01:09:ce:b5:09:b4:40:09:
1a:d9:12:cf:77:f0:cf:20:19:40:6f:62:43:5c:a7:
fa:e8:fd:85:c0:aa:c2:df:9a:4a:36:34:f8:4b:b6:
a2:3b:35:8b:dd:da:ea:02:a4:e4:2f:ba:ea:ab:18:
43:fd:0a:91:a6:2a:57:11:d1:37:bb:4f:63:04:87:
d3:1a:f1:8d:3d:ae:b9:73:08:c5:06:6a:1a:cb:2f:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:06:F5:AE:C4:A1:30:F5:F2:A0:5C:26:AC:F2:66:0D:41:D1:5E:B6
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/WAb1rsShMPXyoFwmrPJmDUHRXrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:c8:3f:04:17:7f:cf:c1:bb:7b:c1:28:d4:25:3f:c1:8e:5e:
a5:1d:b6:c6:72:ff:f6:db:5a:29:0b:59:a1:46:cc:07:33:96:
67:8d:ee:e0:eb:03:88:0c:cf:7c:d4:ce:72:70:8b:ee:07:59:
91:51:99:78:55:18:80:f7:52:18:cb:51:ea:cf:3f:7d:a6:f5:
09:e6:5f:67:7d:b1:da:5b:81:ba:4a:4f:96:bf:72:45:8c:f7:
51:b8:92:32:0e:6d:64:cc:26:82:9c:ea:15:00:41:85:a7:7d:
b2:9c:f1:26:88:8e:72:8f:c4:e9:f7:06:92:dc:18:db:44:6b:
77:d1:1e:c7:1b:fc:c1:47:2d:a4:66:5b:57:7e:6f:94:62:ff:
a9:5c:e4:e1:83:f6:7d:49:e8:26:26:d3:c2:de:58:cb:9d:e8:
89:41:d8:64:e8:01:ce:c3:f9:f5:65:c0:f2:65:6f:39:23:b3:
d2:a8:04:f5:f6:22:9f:97:b6:ff:cd:25:ff:a4:ba:13:3b:28:
46:4b:0f:ee:6f:3a:39:e6:d9:bd:37:91:1d:56:76:f6:58:e9:
e5:d4:17:d5:c7:79:a4:c2:88:87:74:9f:a8:41:31:e8:19:7e:
cb:7b:eb:32:2a:ca:e8:5f:5b:fb:f4:64:fa:3f:c8:7a:73:5b:
3f:aa:65:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlQiUWjPEt06L7Zd3Zgn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDJhOTYxYjAzNzVkNzIxOTFiZDk3MDgxNWQ2YjE1ZjQy
N2QwNzMwHhcNMjQwMTAyMDAzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODA2ZjVhZWM0YTEzMGY1ZjJhMDVjMjZhY2YyNjYwZDQxZDE1ZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcbWK2YadbXfiAX5tXDCGGolSHM6
XLQhkqJLF9mlI1L1Fz2eeKqz498/OShFm6XCSpXcNGouXRrgfgqfFcugJZYKBN2u
EexUlhojB2+x/vhdBn1mP+g2ghOYNs5fVbR3x7JbzK8EWvGDbXk1+rIBvWfKaG5V
yd5YAonZXenumpGGBS75kAX6j+5hyEHc1FjBKdVDns8pz7QifML2uvaRrDxe85mU
kGHSCXI9AQnOtQm0QAka2RLPd/DPIBlAb2JDXKf66P2FwKrC35pKNjT4S7aiOzWL
3drqAqTkL7rqqxhD/QqRpipXEdE3u09jBIfTGvGNPa65cwjFBmoayy8ZnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFgG9a7EoTD18qBcJqzyZg1B0V62MB8GA1UdIwQY
MBaAFH4CqWGwN11yGRvZcIFdaxX0J9BzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZTY4NDItNzIyOS00MjEyLWIyZDQt
Y2M0N2MxZGUwMWJkLzEvV0FiMXJzU2hNUFh5b0Z3bXJQSm1EVUhSWHJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zZTY4NDItNzIyOS00MjEyLWIyZDQtY2M0N2MxZGUwMWJk
LzEvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf4UMA0G
CSqGSIb3DQEBCwUAA4IBAQCwyD8EF3/Pwbt7wSjUJT/Bjl6lHbbGcv/221opC1mh
RswHM5Znje7g6wOIDM981M5ycIvuB1mRUZl4VRiA91IYy1Hqzz99pvUJ5l9nfbHa
W4G6Sk+Wv3JFjPdRuJIyDm1kzCaCnOoVAEGFp32ynPEmiI5yj8Tp9waS3BjbRGt3
0R7HG/zBRy2kZltXfm+UYv+pXOThg/Z9SegmJtPC3ljLneiJQdhk6AHOw/n1ZcDy
ZW85I7PSqAT19iKfl7b/zSX/pLoTOyhGSw/ubzo55tm9N5EdVnb2WOnl1BfVx3mk
woiHdJ+oQTHoGX7Le+syKsroX1v79GT6P8h6c1s/qmW3
-----END CERTIFICATE-----
Generated at Fri Jun 7 20:35:32 2024 by rpki-client on console-ams.rpki-client.org