Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/WB32ODtFOIY50UxeJzKy7uhHIyI.roa
File: WB32ODtFOIY50UxeJzKy7uhHIyI.roa (raw, json)
Hash identifier: bsescuu5iIySFjWKYHJ0C2Y+Wl8cd/EakMim4FeHemg=
Subject key identifier: 58:1D:F6:38:3B:45:38:86:39:D1:4C:5E:27:32:B2:EE:E8:47:23:22
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 018CF7C6F78C215767F4BA94090631019655
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/WB32ODtFOIY50UxeJzKy7uhHIyI.roa
Signing time: Thu 11 Jan 2024 09:07:41 +0000
ROA not before: Thu 11 Jan 2024 09:07:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44646
IP address blocks: 93.93.85.0/24 maxlen: 24
93.93.80.0/24 maxlen: 24
93.93.82.0/24 maxlen: 24
93.93.81.0/24 maxlen: 24
93.93.84.0/24 maxlen: 24
93.93.83.0/24 maxlen: 24
93.93.86.0/24 maxlen: 24
93.93.87.0/24 maxlen: 24
185.40.204.0/24 maxlen: 24
185.40.206.0/24 maxlen: 24
185.40.205.0/24 maxlen: 24
185.40.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:c6:f7:8c:21:57:67:f4:ba:94:09:06:31:01:96:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Jan 11 09:07:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=581df6383b45388639d14c5e2732b2eee8472322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:ee:fa:98:a0:71:de:ff:95:a0:43:12:25:
9a:80:a1:80:87:72:de:22:31:08:fd:cb:6c:99:da:
12:77:77:e0:94:ca:c4:dd:99:33:89:1c:27:42:cb:
d8:bc:53:c9:dc:12:ea:80:da:5a:8a:a1:20:65:2a:
2d:4c:12:59:71:d9:95:8b:79:a2:14:29:7d:b5:6a:
87:95:69:37:48:20:26:73:0a:5d:44:ab:d4:5e:2f:
6a:85:2d:6d:1b:65:fb:31:41:1f:c8:40:92:bd:08:
d7:18:8e:90:71:b9:7f:86:3b:c3:14:10:90:68:ef:
93:da:bc:42:82:57:92:79:4c:42:ff:c5:79:cc:5b:
11:5e:73:0d:78:de:96:ff:62:3e:26:a8:1e:27:86:
3b:41:e5:52:b6:27:62:80:15:c7:01:53:3f:ef:2f:
e1:d8:83:84:fb:96:1c:cd:12:a0:a3:3f:83:e1:da:
f3:a2:87:d3:82:d0:8d:93:07:a0:95:db:95:cb:79:
72:b4:5b:13:ee:c9:09:73:82:13:bb:8d:52:1c:89:
21:eb:c4:ca:d5:12:57:20:7a:09:76:7d:cd:c9:68:
1f:63:e8:bb:b9:8e:e8:8c:e7:b5:4d:71:d9:c9:32:
70:cd:cf:79:cb:24:a9:44:bb:5c:36:14:07:77:32:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1D:F6:38:3B:45:38:86:39:D1:4C:5E:27:32:B2:EE:E8:47:23:22
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/WB32ODtFOIY50UxeJzKy7uhHIyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.80.0/21
185.40.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:bb:9e:ab:bb:98:d1:f9:32:1f:70:2b:e1:91:5b:0d:f2:0a:
ff:a0:f3:b1:25:90:62:19:80:06:47:de:a6:71:38:c7:39:04:
bb:fe:3a:9a:4e:7d:c9:22:13:f7:07:39:1e:ff:c2:f3:06:be:
e0:60:58:55:66:98:07:7a:52:81:35:16:46:b3:fd:2c:b2:1e:
ae:4d:bd:0d:a7:1d:5e:ea:9d:63:30:1a:f6:20:e6:c2:5c:82:
f8:c7:47:bc:06:cb:8a:0c:90:a7:d1:52:a5:e4:1f:f8:02:c5:
d6:76:46:36:33:34:0f:d6:27:d5:03:84:0e:d3:a8:11:d5:d9:
c8:42:8f:c4:84:9a:8e:1e:19:6d:20:72:cb:82:2d:1a:62:82:
43:a1:c8:99:76:e6:f0:a6:8b:2e:2f:83:74:b6:10:2f:7d:2d:
17:00:a2:28:79:85:53:ad:82:35:9c:f0:6f:6a:b4:3b:fc:3e:
f6:61:7f:49:00:b5:d0:37:4c:8d:f7:74:29:35:bc:6f:d6:0f:
aa:4e:94:2e:b3:67:4f:b9:62:a4:56:1e:ca:f6:3b:96:33:1e:
fc:d4:52:12:52:58:90:d6:9e:02:5c:33:3f:46:94:de:77:d6:
12:32:31:3e:c4:4b:cc:be:6d:cf:93:82:c2:c8:e4:ca:48:5c:
c3:bf:f5:a9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYz3xveMIVdn9LqUCQYxAZZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj
YTU2OTMwHhcNMjQwMTExMDkwNzQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODFkZjYzODNiNDUzODg2MzlkMTRjNWUyNzMyYjJlZWU4NDcyMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdnu+pigcd7/laBDEiWagKGAh3Le
IjEI/ctsmdoSd3fglMrE3ZkziRwnQsvYvFPJ3BLqgNpaiqEgZSotTBJZcdmVi3mi
FCl9tWqHlWk3SCAmcwpdRKvUXi9qhS1tG2X7MUEfyECSvQjXGI6Qcbl/hjvDFBCQ
aO+T2rxCgleSeUxC/8V5zFsRXnMNeN6W/2I+JqgeJ4Y7QeVStidigBXHAVM/7y/h
2IOE+5YczRKgoz+D4drzoofTgtCNkweglduVy3lytFsT7skJc4ITu41SHIkh68TK
1RJXIHoJdn3NyWgfY+i7uY7ojOe1TXHZyTJwzc95yySpRLtcNhQHdzJgkQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFgd9jg7RTiGOdFMXicysu7oRyMiMB8GA1UdIwQY
MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt
ODU0MTgyY2IwNmE2LzEvV0IzMk9EdEZPSVk1MFV4ZUp6S3k3dWhISXlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2
LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXV1QAwQC
uSjMMA0GCSqGSIb3DQEBCwUAA4IBAQBqu56ru5jR+TIfcCvhkVsN8gr/oPOxJZBi
GYAGR96mcTjHOQS7/jqaTn3JIhP3Bzke/8LzBr7gYFhVZpgHelKBNRZGs/0ssh6u
Tb0Npx1e6p1jMBr2IObCXIL4x0e8BsuKDJCn0VKl5B/4AsXWdkY2MzQP1ifVA4QO
06gR1dnIQo/EhJqOHhltIHLLgi0aYoJDociZdubwposuL4N0thAvfS0XAKIoeYVT
rYI1nPBvarQ7/D72YX9JALXQN0yN93QpNbxv1g+qTpQus2dPuWKkVh7K9juWMx78
1FISUliQ1p4CXDM/RpTed9YSMjE+xEvMvm3Pk4LCyOTKSFzDv/Wp
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:47:33 2024 by rpki-client on console-ams.rpki-client.org