Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/wcgTjhL42evWD4v3-k28BhQYiQ4.roa
File: wcgTjhL42evWD4v3-k28BhQYiQ4.roa (raw, json)
Hash identifier: 6pf7yyrkSc2rN+1eTIPFJ2Cp8s5j9Ud0BQAks09Y9UQ=
Subject key identifier: C1:C8:13:8E:12:F8:D9:EB:D6:0F:8B:F7:FA:4D:BC:06:14:18:89:0E
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 018CC5DC8F2378F16C317505F7E86670D09A
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/wcgTjhL42evWD4v3-k28BhQYiQ4.roa
Signing time: Mon 01 Jan 2024 16:30:15 +0000
ROA not before: Mon 01 Jan 2024 16:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47632
IP address blocks: 194.153.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:8f:23:78:f1:6c:31:75:05:f7:e8:66:70:d0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 1 16:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1c8138e12f8d9ebd60f8bf7fa4dbc061418890e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:da:88:f2:a8:cd:f1:d8:e7:cd:9f:99:fb:
bf:66:22:f1:df:98:11:a1:01:31:6b:96:8c:b7:00:
08:b8:60:c5:35:da:bd:ad:b9:80:88:f5:59:ae:4b:
7d:36:a7:bb:b6:8b:5d:ee:fb:6c:b6:09:cd:aa:17:
60:b3:6b:b6:4e:0f:65:cd:ef:49:c8:a3:dc:49:db:
07:1e:ce:b5:c4:4c:dd:2f:fb:24:00:b3:02:94:5f:
fa:a3:5c:07:22:d2:8f:f2:be:ff:36:88:7d:c3:61:
4c:58:dc:79:93:50:26:f6:f8:4f:a3:89:cc:9e:41:
47:a0:4d:5f:e2:02:91:e1:49:4c:d7:08:5a:ca:6a:
29:b3:52:ee:7f:04:a4:39:a2:a0:ea:90:8f:77:60:
57:c8:f9:cb:1f:e1:c0:c6:29:9c:b6:de:4c:f5:bd:
bd:7f:10:39:3e:f1:0c:8b:06:e0:bf:d6:69:cb:d8:
db:2e:1b:76:42:81:87:40:07:ed:90:37:42:0c:d5:
19:57:6b:c5:52:c7:37:07:85:f8:64:3b:e2:c9:89:
5c:a3:4c:81:46:f2:20:ab:31:b4:d8:0d:a9:6b:8d:
b3:1e:7d:89:52:da:61:7c:c6:3a:87:f0:96:0d:1a:
e4:b3:1b:39:e0:b5:c0:82:c8:28:5b:2d:68:d1:d5:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C8:13:8E:12:F8:D9:EB:D6:0F:8B:F7:FA:4D:BC:06:14:18:89:0E
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/wcgTjhL42evWD4v3-k28BhQYiQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.78.0/24
Signature Algorithm: sha256WithRSAEncryption
21:46:a1:fd:81:c9:6a:8d:23:71:62:ab:83:54:ab:75:90:e3:
c5:9b:ae:4e:f2:72:73:53:95:75:23:a5:ff:9e:6a:2a:56:96:
a6:83:c0:a1:06:ea:e2:60:46:21:fa:57:9d:60:e0:ac:4b:a6:
f9:e9:cb:28:76:a4:d0:c4:91:dc:f8:6e:3d:c3:7d:8a:06:46:
9f:e9:12:c0:8d:05:0d:9c:73:c3:30:96:68:6b:df:16:cb:b2:
5b:87:da:34:4e:0a:56:47:57:8d:4a:ac:9b:35:eb:a3:5f:50:
6c:2f:95:c3:63:c5:a3:a9:2f:a2:9e:64:30:34:ed:cf:52:c3:
7a:01:ad:69:34:f8:e9:f5:90:65:5c:70:3a:ee:8f:67:ac:6a:
9e:58:72:04:8d:bb:23:33:9d:58:3d:05:a0:cc:ac:5a:49:f1:
e9:c8:64:fb:79:0c:fa:dc:c7:6d:37:8e:f0:e2:66:d2:f8:d0:
54:0b:bb:5d:0a:c6:a3:07:e4:0e:31:9e:03:c8:ec:53:aa:44:
73:19:98:42:17:86:87:06:d5:26:7c:7f:87:33:ac:4f:79:32:
84:b5:36:80:b8:2a:66:5d:cd:d5:87:00:55:91:59:73:0f:df:
3a:0c:e3:37:93:b9:8d:ae:4f:09:57:9a:2e:11:60:8d:48:f8:
44:df:b6:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3I8jePFsMXUF9+hmcNCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5
M2MzNjQwHhcNMjQwMTAxMTYzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWM4MTM4ZTEyZjhkOWViZDYwZjhiZjdmYTRkYmMwNjE0MTg4OTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPTaiPKozfHY582fmfu/ZiLx35gR
oQExa5aMtwAIuGDFNdq9rbmAiPVZrkt9Nqe7totd7vtstgnNqhdgs2u2Tg9lze9J
yKPcSdsHHs61xEzdL/skALMClF/6o1wHItKP8r7/Noh9w2FMWNx5k1Am9vhPo4nM
nkFHoE1f4gKR4UlM1whaymops1LufwSkOaKg6pCPd2BXyPnLH+HAximctt5M9b29
fxA5PvEMiwbgv9Zpy9jbLht2QoGHQAftkDdCDNUZV2vFUsc3B4X4ZDviyYlco0yB
RvIgqzG02A2pa42zHn2JUtphfMY6h/CWDRrksxs54LXAgsgoWy1o0dXaQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHIE44S+Nnr1g+L9/pNvAYUGIkOMB8GA1UdIwQY
MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct
MWY0YmVhMjNlNGM3LzEvd2NnVGpoTDQyZXZXRDR2My1rMjhCaFFZaVE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3
LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwplOMA0G
CSqGSIb3DQEBCwUAA4IBAQAhRqH9gclqjSNxYquDVKt1kOPFm65O8nJzU5V1I6X/
nmoqVpamg8ChBuriYEYh+ledYOCsS6b56csodqTQxJHc+G49w32KBkaf6RLAjQUN
nHPDMJZoa98Wy7Jbh9o0TgpWR1eNSqybNeujX1BsL5XDY8WjqS+inmQwNO3PUsN6
Aa1pNPjp9ZBlXHA67o9nrGqeWHIEjbsjM51YPQWgzKxaSfHpyGT7eQz63MdtN47w
4mbS+NBUC7tdCsajB+QOMZ4DyOxTqkRzGZhCF4aHBtUmfH+HM6xPeTKEtTaAuCpm
Xc3VhwBVkVlzD986DOM3k7mNrk8JV5ouEWCNSPhE37Ym
-----END CERTIFICATE-----
Generated at Sun May 26 17:08:46 2024 by rpki-client on console-ams.rpki-client.org