Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/WLB05AuogPOmpy_rNoZNfzcVxH8.roa
File: WLB05AuogPOmpy_rNoZNfzcVxH8.roa (raw, json)
Hash identifier: QxP9RLcKIeQ7CkQD8BUTof1QAy3cGQ+bQRHFQiIdQcY=
Subject key identifier: 58:B0:74:E4:0B:A8:80:F3:A6:A7:2F:EB:36:86:4D:7F:37:15:C4:7F
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 0192BE9129AB378D02ADD97B5EA2FCB98A38
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/WLB05AuogPOmpy_rNoZNfzcVxH8.roa
Signing time: Thu 24 Oct 2024 12:47:17 +0000
ROA not before: Thu 24 Oct 2024 12:47:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32787
IP address blocks: 89.147.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:91:29:ab:37:8d:02:ad:d9:7b:5e:a2:fc:b9:8a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Oct 24 12:47:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58b074e40ba880f3a6a72feb36864d7f3715c47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:35:fb:0e:93:3f:ab:3b:96:84:84:e4:70:ee:
a1:30:3d:3a:71:c3:7b:ba:31:37:8d:9f:ee:1f:63:
74:25:97:1f:85:27:6e:7b:84:c9:44:ac:4d:b7:f8:
53:7c:93:79:40:4c:2d:97:3c:f8:32:80:a3:73:b3:
bc:af:8c:8c:fa:eb:4e:0f:35:e9:2f:27:ed:9d:aa:
94:cf:49:ce:b4:f5:c7:1c:6c:f3:18:22:69:a6:be:
00:14:62:97:ef:38:8c:fd:7b:ee:54:1c:18:dd:aa:
fa:86:cb:5c:07:b6:a4:8d:76:69:6e:d0:4d:72:4d:
1c:ed:f5:c7:17:31:7a:2c:e0:46:29:ba:5c:dd:bd:
db:05:ca:4e:04:01:13:72:fe:1a:d7:ae:fa:bd:73:
51:31:d5:69:2e:77:27:3d:3c:54:70:07:41:80:4d:
e1:9d:99:40:f0:68:a4:59:91:d9:91:27:f2:6a:5a:
8e:4c:70:9b:04:bb:d4:10:f9:1f:1a:9e:11:d9:cf:
31:6c:44:e8:9e:f8:57:d8:e2:95:f9:9b:17:ba:15:
a7:cc:d5:a9:4b:45:6b:86:c4:93:cc:bd:10:c6:ec:
c4:8e:af:95:00:c6:fa:f4:b6:0a:94:43:8e:18:35:
80:c5:5a:48:5b:f6:c3:94:5f:45:a1:ab:a6:4a:3e:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B0:74:E4:0B:A8:80:F3:A6:A7:2F:EB:36:86:4D:7F:37:15:C4:7F
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/WLB05AuogPOmpy_rNoZNfzcVxH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.32.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:ed:38:a5:5e:56:3d:ca:6b:65:68:4d:a1:37:c2:24:d4:87:
a6:16:86:cc:d5:da:e0:cf:0a:6b:5c:8c:73:0b:6b:65:2c:0f:
4a:43:42:da:28:ba:71:63:d1:f2:23:d2:4e:32:4b:ef:9f:18:
16:18:92:09:b5:44:e3:5a:0a:30:06:66:09:82:ce:bc:04:e4:
e6:e0:9a:3f:d9:ba:3a:3f:38:1d:9f:bc:92:95:49:0d:27:f1:
88:eb:f3:86:c7:6a:ec:2a:01:f1:ba:10:7e:50:79:f3:a2:01:
20:56:23:16:de:a0:5d:49:2a:69:d8:04:9f:78:5a:ad:cd:1a:
49:39:3c:0c:2c:97:1f:c9:89:a3:e9:09:13:e6:29:60:73:68:
17:eb:3a:83:1c:af:62:da:02:40:0d:9d:6b:02:88:24:19:c8:
fb:1c:cc:36:63:00:f0:80:12:86:3d:d1:77:aa:12:07:da:9c:
f9:bb:70:22:d4:e4:e0:da:a1:ae:fb:50:f2:f5:c5:13:6b:73:
47:8a:48:5e:a9:6d:d9:dd:c4:20:52:98:98:33:80:87:30:de:
60:94:4a:d8:b5:6d:5a:15:66:0a:18:e0:68:f9:80:43:78:89:
19:fd:7b:18:93:c7:f4:a3:51:8e:92:46:b1:1e:8d:3c:86:1b:
43:0b:b0:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK+kSmrN40Crdl7XqL8uYo4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZDA2NzRiZDZmMGNjOTE3NTIxOWEzMjhjOGIzOTY4Mjlm
NmMwYWYwHhcNMjQxMDI0MTI0NzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGIwNzRlNDBiYTg4MGYzYTZhNzJmZWIzNjg2NGQ3ZjM3MTVjNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizX7DpM/qzuWhITkcO6hMD06ccN7
ujE3jZ/uH2N0JZcfhSdue4TJRKxNt/hTfJN5QEwtlzz4MoCjc7O8r4yM+utODzXp
LyftnaqUz0nOtPXHHGzzGCJppr4AFGKX7ziM/XvuVBwY3ar6hstcB7akjXZpbtBN
ck0c7fXHFzF6LOBGKbpc3b3bBcpOBAETcv4a1676vXNRMdVpLncnPTxUcAdBgE3h
nZlA8GikWZHZkSfyalqOTHCbBLvUEPkfGp4R2c8xbETonvhX2OKV+ZsXuhWnzNWp
S0VrhsSTzL0QxuzEjq+VAMb69LYKlEOOGDWAxVpIW/bDlF9FoaumSj688wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFiwdOQLqIDzpqcv6zaGTX83FcR/MB8GA1UdIwQY
MBaAFNfQZ0vW8MyRdSGaMoyLOWgp9sCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2It
ODIzMmZhM2U2MjlkLzEvV0xCMDVBdW9nUE9tcHlfck5vWk5memNWeEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2ItODIzMmZhM2U2Mjlk
LzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWZMgMA0G
CSqGSIb3DQEBCwUAA4IBAQA+7TilXlY9ymtlaE2hN8Ik1IemFobM1drgzwprXIxz
C2tlLA9KQ0LaKLpxY9HyI9JOMkvvnxgWGJIJtUTjWgowBmYJgs68BOTm4Jo/2bo6
Pzgdn7ySlUkNJ/GI6/OGx2rsKgHxuhB+UHnzogEgViMW3qBdSSpp2ASfeFqtzRpJ
OTwMLJcfyYmj6QkT5ilgc2gX6zqDHK9i2gJADZ1rAogkGcj7HMw2YwDwgBKGPdF3
qhIH2pz5u3Ai1OTg2qGu+1Dy9cUTa3NHikheqW3Z3cQgUpiYM4CHMN5glErYtW1a
FWYKGOBo+YBDeIkZ/XsYk8f0o1GOkkaxHo08hhtDC7DM
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:49 2024 by rpki-client on console-fra.rpki-client.org