Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/Wgf1Uhful_sVgvW6fXjyo9VE8NU.roa
File: Wgf1Uhful_sVgvW6fXjyo9VE8NU.roa (raw, json)
Hash identifier: yeMCd7mZ3oBw8SrYT70d2L8hBeH26OXfW+wspR8a1Ew=
Subject key identifier: 5A:07:F5:52:17:EE:97:FB:15:82:F5:BA:7D:78:F2:A3:D5:44:F0:D5
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 018E32E04F9438FBE1F7E530F10E8A1CD68A
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/Wgf1Uhful_sVgvW6fXjyo9VE8NU.roa
Signing time: Tue 12 Mar 2024 13:35:45 +0000
ROA not before: Tue 12 Mar 2024 13:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61134
IP address blocks: 109.197.35.0/24 maxlen: 24
194.169.126.0/24 maxlen: 24
195.20.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:e0:4f:94:38:fb:e1:f7:e5:30:f1:0e:8a:1c:d6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Mar 12 13:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a07f55217ee97fb1582f5ba7d78f2a3d544f0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0e:cc:c8:c4:6f:57:0e:73:ce:e8:65:a5:03:
20:f7:7d:d3:e0:cd:88:19:95:ee:7a:1d:36:fc:8d:
32:56:d4:dd:d9:11:8d:e4:c1:04:4b:23:87:1b:bb:
c2:6b:cc:8c:ce:e0:e0:53:97:63:6f:90:46:04:29:
6c:78:ad:fb:86:45:d8:66:08:6f:bd:62:75:d1:8c:
ca:90:4e:33:fc:69:8f:7d:5f:5d:1c:74:f2:e4:3d:
80:2c:f2:a9:4b:f6:65:ea:c3:52:62:f9:46:91:ff:
1c:fa:1e:da:cd:ab:f8:b7:ea:78:a3:43:23:a4:44:
d1:57:2b:7a:20:69:5e:09:30:04:61:84:39:c4:66:
d5:d3:56:96:d6:02:80:ab:2f:fa:bd:92:2a:6b:f1:
ff:78:04:bf:e8:52:ff:f8:d9:21:29:8b:8b:e9:59:
94:ad:10:42:03:a9:83:4c:88:2e:43:9c:aa:9a:85:
1d:f3:6e:cd:0e:21:c8:17:d1:95:76:c8:1b:6e:71:
21:c0:75:30:b5:ea:d6:63:25:a3:77:8d:a0:f2:b6:
d1:f1:26:da:81:d9:e5:d9:3f:10:bc:b9:d7:4d:99:
a1:7f:9e:c6:c9:92:1e:c1:d0:73:7f:2b:2a:97:2f:
c8:f1:07:c2:dd:d3:64:58:00:ff:20:5d:91:fe:f4:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:07:F5:52:17:EE:97:FB:15:82:F5:BA:7D:78:F2:A3:D5:44:F0:D5
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/Wgf1Uhful_sVgvW6fXjyo9VE8NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.35.0/24
194.169.126.0/24
195.20.212.0/23
Signature Algorithm: sha256WithRSAEncryption
14:5a:ee:47:1c:78:c1:dc:43:b6:04:5b:c8:1c:83:66:0c:66:
45:fe:7f:36:6b:6b:38:fd:94:f6:1e:9b:b8:01:44:ba:c7:7c:
d5:ef:80:10:22:b5:9a:63:ae:71:bc:56:a5:f6:24:df:9c:41:
0c:36:92:46:89:57:a2:93:2d:ac:0d:20:e8:0d:d2:ff:33:2f:
2c:62:8f:82:68:ba:74:b3:77:26:5e:7e:4b:b0:77:85:cc:2f:
80:45:b2:78:62:4d:e8:60:96:57:f3:b0:fd:60:99:05:38:40:
d9:e3:8f:1b:32:79:77:0e:aa:40:a7:ad:66:82:be:fd:fc:56:
44:ac:7d:9f:b0:b5:07:b7:f7:7f:e7:e2:b6:77:9e:fd:47:25:
52:e9:d5:5b:8a:f5:31:68:57:3f:e8:e8:92:d1:dc:83:39:f7:
63:5d:8f:4f:da:3b:26:8e:83:92:4b:8d:f5:4f:ad:26:6d:6c:
3c:b9:4f:f0:75:15:8f:fc:9c:c0:6b:b8:04:b8:f3:03:46:63:
31:fe:bc:7d:e8:ce:f3:9f:08:52:4b:7f:11:03:a5:7d:cf:c0:
f6:76:43:29:ed:95:f3:3a:cb:ba:5b:13:37:d7:84:6b:e9:3c:
45:33:87:df:df:a2:07:34:c7:0f:e1:9b:74:50:3f:df:41:32:
5f:2b:81:86
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY4y4E+UOPvh9+Uw8Q6KHNaKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzkxYzUwYmZmOWNhMDU5ZTZlMzhiMmUwYzdlYjg1MmE2
MzBiYmEwHhcNMjQwMzEyMTMzNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTA3ZjU1MjE3ZWU5N2ZiMTU4MmY1YmE3ZDc4ZjJhM2Q1NDRmMGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw7MyMRvVw5zzuhlpQMg933T4M2I
GZXueh02/I0yVtTd2RGN5MEESyOHG7vCa8yMzuDgU5djb5BGBClseK37hkXYZghv
vWJ10YzKkE4z/GmPfV9dHHTy5D2ALPKpS/Zl6sNSYvlGkf8c+h7azav4t+p4o0Mj
pETRVyt6IGleCTAEYYQ5xGbV01aW1gKAqy/6vZIqa/H/eAS/6FL/+NkhKYuL6VmU
rRBCA6mDTIguQ5yqmoUd827NDiHIF9GVdsgbbnEhwHUwterWYyWjd42g8rbR8Sba
gdnl2T8QvLnXTZmhf57GyZIewdBzfysqly/I8QfC3dNkWAD/IF2R/vS/8wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFoH9VIX7pf7FYL1un148qPVRPDVMB8GA1UdIwQY
MBaAFI3JHFC/+coFnm44suDH64UqYwu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQt
NTczMDlkZjY5NjQyLzEvV2dmMVVoZnVsX3NWZ3ZXNmZYanlvOVZFOE5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQtNTczMDlkZjY5NjQy
LzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbcUjAwQA
wql+AwQBwxTUMA0GCSqGSIb3DQEBCwUAA4IBAQAUWu5HHHjB3EO2BFvIHINmDGZF
/n82a2s4/ZT2Hpu4AUS6x3zV74AQIrWaY65xvFal9iTfnEEMNpJGiVeiky2sDSDo
DdL/My8sYo+CaLp0s3cmXn5LsHeFzC+ARbJ4Yk3oYJZX87D9YJkFOEDZ448bMnl3
DqpAp61mgr79/FZErH2fsLUHt/d/5+K2d579RyVS6dVbivUxaFc/6OiS0dyDOfdj
XY9P2jsmjoOSS431T60mbWw8uU/wdRWP/JzAa7gEuPMDRmMx/rx96M7znwhSS38R
A6V9z8D2dkMp7ZXzOsu6WxM314Rr6TxFM4ff36IHNMcP4Zt0UD/fQTJfK4GG
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:21:25 2024 by rpki-client on console-ams.rpki-client.org