Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wO3KFof1do9j550c_OtYlLZMqus.roa
File: wO3KFof1do9j550c_OtYlLZMqus.roa (raw, json)
Hash identifier: /wHwdbCAiyS8bzaGzCITchJUnrsLJlwXrv0Uh9rmon0=
Subject key identifier: C0:ED:CA:16:87:F5:76:8F:63:E7:9D:1C:FC:EB:58:94:B6:4C:AA:EB
Certificate issuer: /CN=c1b607c58515367d37c9f3e699482e57a33c73f5
Certificate serial: 018CC56EBC24400E79A513366F31378FEF10
Authority key identifier: C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wO3KFof1do9j550c_OtYlLZMqus.roa
Signing time: Mon 01 Jan 2024 14:30:17 +0000
ROA not before: Mon 01 Jan 2024 14:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42981
IP address blocks: 194.110.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:bc:24:40:0e:79:a5:13:36:6f:31:37:8f:ef:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b607c58515367d37c9f3e699482e57a33c73f5
Validity
Not Before: Jan 1 14:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0edca1687f5768f63e79d1cfceb5894b64caaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4f:13:8c:a1:80:e1:e4:df:a0:e1:cc:87:35:
3a:04:04:62:dc:98:e0:24:80:b4:26:5e:d3:fd:55:
64:14:67:c1:7b:73:84:90:fd:56:50:d6:a7:cf:c3:
6e:4b:dc:66:c9:68:41:dc:93:3b:a4:d9:69:fc:44:
0c:d9:b0:0e:4e:54:22:86:c3:bf:9a:4f:d1:dd:db:
15:62:a9:cf:ca:23:06:b8:1e:a6:de:ff:e0:29:e9:
a5:86:87:54:e1:52:33:83:21:6a:91:06:81:35:39:
65:bd:9d:f0:29:31:73:f1:22:de:50:6c:07:87:9d:
16:45:b8:3d:90:30:d7:87:b2:aa:dd:11:59:14:51:
5f:27:00:58:8a:98:f3:03:ae:7d:8c:66:16:ad:09:
0b:14:9b:1a:80:97:a5:11:c9:81:1f:12:5e:47:71:
e9:ae:28:0b:58:d4:fb:c4:70:2d:a6:af:9c:56:a2:
23:cf:a5:07:15:b8:b5:8e:f2:dc:56:96:25:5d:bc:
98:4e:46:15:3e:d6:5e:ff:bc:63:62:ec:52:a9:ee:
93:15:d7:61:a4:df:d0:fd:43:c6:2d:71:2d:23:c3:
76:dd:05:bd:2d:f7:47:c9:46:e3:52:54:8c:ba:c4:
9e:20:82:5e:b1:fa:e9:e7:db:d9:5a:33:9b:ff:37:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:CA:16:87:F5:76:8F:63:E7:9D:1C:FC:EB:58:94:B6:4C:AA:EB
X509v3 Authority Key Identifier:
keyid:C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wO3KFof1do9j550c_OtYlLZMqus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.238.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:fe:8c:cd:ae:65:c4:7e:0e:0a:65:89:d6:31:a2:be:a1:5b:
c4:40:bb:64:89:be:27:02:6b:39:ab:bc:dc:6f:36:e3:37:e6:
08:ef:04:61:31:40:e8:be:f4:85:d2:47:45:dc:50:a2:84:10:
e7:22:35:0d:33:c5:bb:be:3f:5c:ea:0c:55:0b:c1:f3:88:bb:
95:c4:0d:ef:1d:82:16:e8:15:d8:8f:ac:69:f3:37:ed:d7:9f:
c1:b3:a2:c3:79:5b:77:87:83:0d:77:27:d5:82:58:bd:1f:a9:
42:3e:7a:98:00:27:46:46:35:80:b8:f4:15:52:35:47:70:1d:
3a:99:81:d2:16:0b:ec:69:b6:be:4d:d4:eb:6a:41:ff:61:b6:
67:8f:7f:d8:f1:81:5c:53:81:93:bb:52:e1:84:69:9c:97:0a:
4d:24:bd:54:85:39:99:bf:f4:bf:7c:6a:bb:a6:78:ed:cb:78:
4e:c6:3d:9d:ad:6f:c8:4d:c7:03:38:3e:c4:14:9f:b6:9e:1f:
a8:12:a5:5f:ad:f9:51:8a:30:9d:5c:b8:5f:cf:6c:0f:22:e0:
19:1b:a6:42:89:f2:dd:e6:78:ab:72:ab:3d:71:f5:9f:1d:e5:
a2:9a:81:8c:67:30:2c:21:c9:e0:3d:9e:59:7e:43:6e:12:2d:
6e:d8:e8:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbrwkQA55pRM2bzE3j+8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYjYwN2M1ODUxNTM2N2QzN2M5ZjNlNjk5NDgyZTU3YTMz
YzczZjUwHhcNMjQwMTAxMTQzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGVkY2ExNjg3ZjU3NjhmNjNlNzlkMWNmY2ViNTg5NGI2NGNhYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+E8TjKGA4eTfoOHMhzU6BARi3Jjg
JIC0Jl7T/VVkFGfBe3OEkP1WUNanz8NuS9xmyWhB3JM7pNlp/EQM2bAOTlQihsO/
mk/R3dsVYqnPyiMGuB6m3v/gKemlhodU4VIzgyFqkQaBNTllvZ3wKTFz8SLeUGwH
h50WRbg9kDDXh7Kq3RFZFFFfJwBYipjzA659jGYWrQkLFJsagJelEcmBHxJeR3Hp
rigLWNT7xHAtpq+cVqIjz6UHFbi1jvLcVpYlXbyYTkYVPtZe/7xjYuxSqe6TFddh
pN/Q/UPGLXEtI8N23QW9LfdHyUbjUlSMusSeIIJesfrp59vZWjOb/zfD2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMDtyhaH9XaPY+edHPzrWJS2TKrrMB8GA1UdIwQY
MBaAFMG2B8WFFTZ9N8nz5plILlejPHP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQt
YjFlYTA4N2I5NTI1LzEvd08zS0ZvZjFkbzlqNTUwY19PdFlsTFpNcXVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQtYjFlYTA4N2I5NTI1
LzEvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm7uMA0G
CSqGSIb3DQEBCwUAA4IBAQB//ozNrmXEfg4KZYnWMaK+oVvEQLtkib4nAms5q7zc
bzbjN+YI7wRhMUDovvSF0kdF3FCihBDnIjUNM8W7vj9c6gxVC8HziLuVxA3vHYIW
6BXYj6xp8zft15/Bs6LDeVt3h4MNdyfVgli9H6lCPnqYACdGRjWAuPQVUjVHcB06
mYHSFgvsaba+TdTrakH/YbZnj3/Y8YFcU4GTu1LhhGmclwpNJL1UhTmZv/S/fGq7
pnjty3hOxj2drW/ITccDOD7EFJ+2nh+oEqVfrflRijCdXLhfz2wPIuAZG6ZCifLd
5nircqs9cfWfHeWimoGMZzAsIcngPZ5ZfkNuEi1u2Oh2
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:15 2024 by rpki-client on console-fra.rpki-client.org