Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/wn20NsIm9fETMQINaNPQXrLL3_k.roa
File: wn20NsIm9fETMQINaNPQXrLL3_k.roa (raw, json)
Hash identifier: qHXrtS0sV6je8EXjEvl8aYLqaTl/4KBJTkjHBZqG0d8=
Subject key identifier: C2:7D:B4:36:C2:26:F5:F1:13:31:02:0D:68:D3:D0:5E:B2:CB:DF:F9
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 018CCA2A45180C2EB022C25C1C50E6D8C147
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/wn20NsIm9fETMQINaNPQXrLL3_k.roa
Signing time: Tue 02 Jan 2024 12:33:36 +0000
ROA not before: Tue 02 Jan 2024 12:33:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12337
IP address blocks: 194.77.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:45:18:0c:2e:b0:22:c2:5c:1c:50:e6:d8:c1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Jan 2 12:33:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c27db436c226f5f11331020d68d3d05eb2cbdff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:5a:65:f0:18:a0:f6:7e:a7:c5:6f:2b:ff:
d7:f5:c3:ff:26:ef:f9:5a:3d:21:20:7d:63:24:d0:
6d:3d:36:ed:7f:fe:71:8e:75:52:18:a7:dd:cb:e7:
9e:6f:86:58:06:29:77:a6:9c:93:61:bb:ca:86:3e:
12:e2:e9:4b:92:d9:45:18:e6:ec:2b:85:08:60:88:
d6:95:c5:01:97:14:56:86:2f:c1:55:99:09:5b:6f:
76:8c:7a:e8:84:be:94:43:bc:f6:f6:d7:a8:d3:6d:
84:76:a4:95:e1:73:5f:40:4c:66:90:bb:9b:9e:46:
50:04:7e:6d:da:c6:75:58:59:ab:82:69:5a:f5:ae:
42:e5:c3:75:6d:e0:79:f0:76:e5:fe:f8:3a:94:7a:
a1:59:b9:d7:b1:65:8c:80:3d:e4:65:22:b3:ff:51:
5d:f6:a7:83:23:aa:ba:99:83:6e:92:45:d0:45:f4:
a3:37:bc:dd:01:5b:87:d1:ce:28:87:37:e3:79:d8:
fa:c0:8d:7c:34:04:11:f9:c6:6d:0e:b1:0c:c3:c4:
70:3e:65:dc:d2:43:52:c9:5c:79:0c:a8:9e:98:34:
cb:b7:f8:3f:a4:be:de:8f:6b:3a:fe:9f:7e:0e:7c:
6c:ab:1a:34:3a:aa:02:69:aa:b8:f4:0f:4d:8c:f7:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7D:B4:36:C2:26:F5:F1:13:31:02:0D:68:D3:D0:5E:B2:CB:DF:F9
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/wn20NsIm9fETMQINaNPQXrLL3_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.145.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:41:88:cf:3c:44:b9:c2:35:1f:4f:6f:7c:11:1e:98:83:7c:
91:f1:37:1d:21:0d:92:4f:81:ad:60:93:85:18:50:27:27:4b:
5b:4c:fa:25:1b:94:52:a7:16:01:d1:df:70:94:9e:55:a9:34:
54:a1:b2:3e:9a:f1:92:a9:de:11:92:60:b1:61:d0:f4:97:dd:
97:d3:f7:a3:f5:06:56:ca:61:31:3a:2d:d5:9e:7c:5a:97:35:
06:0e:06:c2:fd:8a:d8:cc:85:12:c5:0b:59:ae:d5:86:e6:d8:
7c:f5:d9:0f:43:b4:db:ae:ca:f1:82:d1:01:eb:d8:d4:64:2e:
37:93:5e:a8:43:ef:f0:8c:3f:8a:6e:33:be:8e:05:4c:f9:63:
08:17:0e:c3:9e:2d:bf:e7:70:80:4a:2e:f1:c9:f0:5a:02:7a:
64:4f:e9:49:b9:ee:0f:30:5a:bc:f3:7e:1f:5a:47:72:c3:41:
12:bc:30:85:ac:9c:46:cc:02:17:b3:7a:dc:13:b0:33:4d:f2:
2e:9c:08:a1:3d:31:1a:26:24:b5:11:88:ca:af:c7:d7:1b:db:
eb:07:20:48:a6:94:e5:9d:13:4b:cd:ba:ac:b7:19:3b:61:18:
96:d2:92:73:6e:ec:6c:10:3e:6c:b3:b7:ba:3c:3c:a1:bb:88:
12:97:b1:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKkUYDC6wIsJcHFDm2MFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzEwNjA3YmE3YTgxNWU5MTFjNDg5MmY5NjhiMThhZTY2
MDQzODkwHhcNMjQwMTAyMTIzMzM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjdkYjQzNmMyMjZmNWYxMTMzMTAyMGQ2OGQzZDA1ZWIyY2JkZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+laZfAYoPZ+p8VvK//X9cP/Ju/5
Wj0hIH1jJNBtPTbtf/5xjnVSGKfdy+eeb4ZYBil3ppyTYbvKhj4S4ulLktlFGObs
K4UIYIjWlcUBlxRWhi/BVZkJW292jHrohL6UQ7z29teo022EdqSV4XNfQExmkLub
nkZQBH5t2sZ1WFmrgmla9a5C5cN1beB58Hbl/vg6lHqhWbnXsWWMgD3kZSKz/1Fd
9qeDI6q6mYNukkXQRfSjN7zdAVuH0c4ohzfjedj6wI18NAQR+cZtDrEMw8RwPmXc
0kNSyVx5DKiemDTLt/g/pL7ej2s6/p9+Dnxsqxo0OqoCaaq49A9NjPdIzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMJ9tDbCJvXxEzECDWjT0F6yy9/5MB8GA1UdIwQY
MBaAFONxBge6eoFekRxIkvlosYrmYEOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUt
MTI2ZDVlNjBmZGQxLzEvd24yME5zSW05ZkVUTVFJTmFOUFFYckxMM19rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUtMTI2ZDVlNjBmZGQx
LzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwk2RMA0G
CSqGSIb3DQEBCwUAA4IBAQCMQYjPPES5wjUfT298ER6Yg3yR8TcdIQ2ST4GtYJOF
GFAnJ0tbTPolG5RSpxYB0d9wlJ5VqTRUobI+mvGSqd4RkmCxYdD0l92X0/ej9QZW
ymExOi3VnnxalzUGDgbC/YrYzIUSxQtZrtWG5th89dkPQ7TbrsrxgtEB69jUZC43
k16oQ+/wjD+KbjO+jgVM+WMIFw7Dni2/53CASi7xyfBaAnpkT+lJue4PMFq8834f
Wkdyw0ESvDCFrJxGzAIXs3rcE7AzTfIunAihPTEaJiS1EYjKr8fXG9vrByBIppTl
nRNLzbqstxk7YRiW0pJzbuxsED5ss7e6PDyhu4gSl7Hm
-----END CERTIFICATE-----
Generated at Tue May 21 17:52:52 2024 by rpki-client on console-fra.rpki-client.org