Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/wiNGVDDIv5ZHpLpyXyovMGfFU3A.roa
File: wiNGVDDIv5ZHpLpyXyovMGfFU3A.roa (raw, json)
Hash identifier: ZKLu6UiMMmyZXer45QHDVSJWJYLolaDxwNV7YeOcoNc=
Subject key identifier: C2:23:46:54:30:C8:BF:96:47:A4:BA:72:5F:2A:2F:30:67:C5:53:70
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 018CC3494334EAFE1ABB053B05AFB0EACFDE
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/wiNGVDDIv5ZHpLpyXyovMGfFU3A.roa
Signing time: Mon 01 Jan 2024 04:30:07 +0000
ROA not before: Mon 01 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60667
IP address blocks: 45.84.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:43:34:ea:fe:1a:bb:05:3b:05:af:b0:ea:cf:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c223465430c8bf9647a4ba725f2a2f3067c55370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:1f:62:d8:3e:71:39:ae:6e:f9:bd:1d:24:
6d:01:82:0d:1e:07:82:0a:dc:df:2c:77:6f:58:6e:
72:c1:b3:22:3f:b9:f7:d1:cf:34:0a:0f:74:f3:c5:
4a:6f:00:ac:0f:4a:c8:5a:ea:57:b0:34:32:73:e0:
ec:2c:17:ec:79:ad:7d:24:c5:84:cb:0e:f6:fd:d5:
7f:b9:23:1e:ba:d2:22:51:79:50:ac:94:cb:7e:12:
db:9e:d0:00:4b:95:89:df:0a:7c:27:15:b1:60:b2:
17:a7:fe:23:14:3d:e5:2f:c7:33:ab:b9:88:cd:99:
33:b7:1a:7a:cd:7a:21:6d:66:72:4c:cf:a2:b2:7e:
9e:39:e7:e7:05:ab:5e:68:5c:d9:fe:32:83:c6:f3:
f1:2b:03:6f:f2:b8:0d:b2:08:b6:18:ac:34:9b:8b:
5d:7d:b1:a0:7d:75:8f:86:2f:31:4f:a0:3c:7f:23:
c2:76:b9:cb:13:73:37:59:89:48:18:41:54:af:48:
b6:3d:d0:ac:e4:b0:08:7e:2e:6f:e4:3f:c8:48:ed:
be:0b:e0:c6:37:7d:26:89:af:5d:74:5a:48:8a:35:
40:92:1c:1b:16:b1:73:4a:56:3f:9e:09:0e:b7:18:
10:33:9f:59:af:0e:28:2c:fe:5f:c0:c5:94:9d:9b:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:23:46:54:30:C8:BF:96:47:A4:BA:72:5F:2A:2F:30:67:C5:53:70
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/wiNGVDDIv5ZHpLpyXyovMGfFU3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:37:c8:f8:92:27:3b:73:ae:d1:00:27:9a:05:82:dd:7a:9e:
3b:ae:51:2c:16:58:51:99:0f:14:a0:38:65:cd:e3:fb:98:76:
ff:f7:47:21:d1:6f:31:d1:b9:87:be:d1:7c:de:9d:13:11:e9:
34:cc:99:d4:91:c7:f9:b2:a3:a6:44:63:f8:8d:4b:87:41:2e:
f2:07:43:73:92:5a:74:34:2e:e4:d9:5e:e7:9f:91:ac:0b:47:
5a:83:67:96:f1:a9:0f:0d:44:a3:95:5b:3c:8f:18:49:80:d5:
8d:88:86:8b:e5:e7:73:fc:ac:30:db:c2:7a:e8:52:dd:e8:7a:
bb:7d:63:ad:8a:47:e5:53:34:4e:c9:8e:ee:6e:9e:f2:21:b0:
02:8a:11:81:20:59:ac:35:c6:61:0f:9c:5a:92:d0:a0:52:81:
4c:2f:55:a3:a6:42:3b:6d:1f:93:a8:ab:b3:fc:46:70:3c:f5:
ba:84:92:cb:47:e4:3c:a6:ea:a9:95:05:9c:c7:fa:da:3a:f8:
43:8b:ca:d9:33:9e:cb:96:1f:d6:56:be:3f:70:b3:8b:bc:f7:
15:e3:49:81:02:a3:2b:94:4b:27:f9:0a:77:d9:ea:72:7d:cd:
db:9f:73:dd:37:9b:4b:ea:c9:7c:6f:8b:a7:8c:bd:20:75:08:
e6:65:4a:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSUM06v4auwU7Ba+w6s/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0
ZjFmZjgwHhcNMjQwMTAxMDQzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjIzNDY1NDMwYzhiZjk2NDdhNGJhNzI1ZjJhMmYzMDY3YzU1MzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzgfYtg+cTmubvm9HSRtAYINHgeC
CtzfLHdvWG5ywbMiP7n30c80Cg9088VKbwCsD0rIWupXsDQyc+DsLBfsea19JMWE
yw72/dV/uSMeutIiUXlQrJTLfhLbntAAS5WJ3wp8JxWxYLIXp/4jFD3lL8czq7mI
zZkztxp6zXohbWZyTM+isn6eOefnBateaFzZ/jKDxvPxKwNv8rgNsgi2GKw0m4td
fbGgfXWPhi8xT6A8fyPCdrnLE3M3WYlIGEFUr0i2PdCs5LAIfi5v5D/ISO2+C+DG
N30mia9ddFpIijVAkhwbFrFzSlY/ngkOtxgQM59Zrw4oLP5fwMWUnZtHhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMIjRlQwyL+WR6S6cl8qLzBnxVNwMB8GA1UdIwQY
MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt
NDc4ZWQ3ZjhkMDVlLzEvd2lOR1ZEREl2NVpIcExweVh5b3ZNR2ZGVTNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl
LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTTMA0G
CSqGSIb3DQEBCwUAA4IBAQBvN8j4kic7c67RACeaBYLdep47rlEsFlhRmQ8UoDhl
zeP7mHb/90ch0W8x0bmHvtF83p0TEek0zJnUkcf5sqOmRGP4jUuHQS7yB0Nzklp0
NC7k2V7nn5GsC0dag2eW8akPDUSjlVs8jxhJgNWNiIaL5edz/Kww28J66FLd6Hq7
fWOtikflUzROyY7ubp7yIbACihGBIFmsNcZhD5xaktCgUoFML1WjpkI7bR+TqKuz
/EZwPPW6hJLLR+Q8puqplQWcx/raOvhDi8rZM57Llh/WVr4/cLOLvPcV40mBAqMr
lEsn+Qp32epyfc3bn3PdN5tL6sl8b4unjL0gdQjmZUoO
-----END CERTIFICATE-----
Generated at Wed Jun 26 18:30:34 2024 by rpki-client on console-fra.rpki-client.org