Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/WVpwRbBNGNG3oZriDe7ELuuniUg.roa
File: WVpwRbBNGNG3oZriDe7ELuuniUg.roa (raw, json)
Hash identifier: G4JHVF6fPnut2l6RlSx+MhTMBxHvdXJ5ZRyc6dSl4cY=
Subject key identifier: 59:5A:70:45:B0:4D:18:D1:B7:A1:9A:E2:0D:EE:C4:2E:EB:A7:89:48
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 018D5F29029E5589118887692C8CD4BBC110
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/WVpwRbBNGNG3oZriDe7ELuuniUg.roa
Signing time: Wed 31 Jan 2024 10:55:39 +0000
ROA not before: Wed 31 Jan 2024 10:55:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51007
IP address blocks: 80.84.134.0/23 maxlen: 23
80.84.135.0/24 maxlen: 24
80.84.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:29:02:9e:55:89:11:88:87:69:2c:8c:d4:bb:c1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Jan 31 10:55:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=595a7045b04d18d1b7a19ae20deec42eeba78948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:42:e8:f1:f0:55:51:da:3f:69:f3:95:bb:a4:
4d:1c:7b:10:76:71:56:3b:1d:87:ec:51:62:f8:a1:
28:ba:a1:b9:a3:a3:d1:3f:53:d0:65:d1:71:b7:35:
e2:fc:34:4f:41:bc:82:7a:bd:6c:2b:84:43:b3:13:
91:4e:52:52:99:0f:bb:8c:5f:27:b7:a0:ce:82:6f:
64:b5:79:74:5f:f2:25:9c:27:c4:0a:e8:6e:92:8c:
0b:49:84:2a:19:73:cb:97:68:2b:ed:24:a3:d7:fe:
18:92:5c:57:bd:b3:cd:50:fa:1a:d3:71:8b:e7:96:
03:a0:b7:a8:69:44:8c:f9:21:ef:1a:e3:0f:07:99:
da:24:3c:83:f3:2a:db:71:bb:43:94:84:24:97:3f:
5c:7e:75:6f:a0:f2:bc:04:ce:a2:84:31:38:14:a5:
34:04:7a:33:01:5b:48:cb:b7:59:2a:bc:2c:4f:a0:
2d:0c:c6:54:24:b3:58:70:08:6b:c9:75:19:e5:c0:
3b:50:4e:66:8a:df:8a:70:ca:11:73:36:b6:87:15:
40:5d:5e:0a:82:91:ba:e6:48:29:df:3e:79:db:fa:
67:ea:16:bd:60:30:6b:bf:6a:a5:82:9c:9d:9a:76:
37:1b:04:3f:18:8e:21:9f:1f:f3:0b:dd:d1:5d:45:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:70:45:B0:4D:18:D1:B7:A1:9A:E2:0D:EE:C4:2E:EB:A7:89:48
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/WVpwRbBNGNG3oZriDe7ELuuniUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.134.0/23
80.84.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:89:73:2e:18:11:3b:0f:11:ad:d1:2c:eb:7b:64:43:0e:7c:
bb:a4:0f:07:19:8d:34:44:bb:9c:2d:ce:90:7a:51:8e:cb:34:
a8:ce:0f:34:bf:08:64:01:10:71:46:f7:e9:9b:3a:07:b2:5f:
c2:98:f5:51:0b:c2:19:3c:18:29:3a:2c:38:b0:d9:e4:24:04:
85:aa:96:6a:1c:95:1f:89:27:f6:e3:1a:0d:5c:bc:74:13:23:
b7:2f:6c:c3:ef:b3:76:b7:7c:48:a1:4b:8c:4a:83:42:04:24:
6c:21:cb:41:5c:3a:18:1d:57:a2:59:d9:51:71:fa:db:24:eb:
85:20:a7:5f:c7:b0:67:18:b6:22:cb:04:be:0b:d2:e3:0c:19:
31:22:20:8f:50:b2:5a:96:e3:17:c6:92:12:98:d8:47:e6:cb:
64:2a:0a:2c:c2:91:59:d8:a9:cd:5a:a2:fd:63:ed:67:68:cd:
12:4b:20:95:78:44:af:a2:b3:bc:2a:54:f1:d9:76:b7:41:bf:
58:dd:1f:9a:bd:73:f0:96:61:e8:6d:f6:c1:e5:2c:e1:7d:36:
6b:f4:34:35:76:8f:c2:60:ae:1a:31:0f:ac:2b:36:70:df:75:
3d:bd:2f:aa:1f:a9:06:d0:64:e0:95:26:87:02:cc:1a:2b:d6:
03:f0:74:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1fKQKeVYkRiIdpLIzUu8EQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmE3NzRiYTgyZmIwNDI3Zjc2NmU3ODNlNzcwZjRiZDk2
NDE2ZjkwHhcNMjQwMTMxMTA1NTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTVhNzA0NWIwNGQxOGQxYjdhMTlhZTIwZGVlYzQyZWViYTc4OTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+kLo8fBVUdo/afOVu6RNHHsQdnFW
Ox2H7FFi+KEouqG5o6PRP1PQZdFxtzXi/DRPQbyCer1sK4RDsxORTlJSmQ+7jF8n
t6DOgm9ktXl0X/IlnCfECuhukowLSYQqGXPLl2gr7SSj1/4YklxXvbPNUPoa03GL
55YDoLeoaUSM+SHvGuMPB5naJDyD8yrbcbtDlIQklz9cfnVvoPK8BM6ihDE4FKU0
BHozAVtIy7dZKrwsT6AtDMZUJLNYcAhryXUZ5cA7UE5mit+KcMoRcza2hxVAXV4K
gpG65kgp3z552/pn6ha9YDBrv2qlgpydmnY3GwQ/GI4hnx/zC93RXUU/nQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFlacEWwTRjRt6Ga4g3uxC7rp4lIMB8GA1UdIwQY
MBaAFOy6d0uoL7BCf3ZueD53D0vZZBb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUt
MzkyYjg2M2M5ZjAzLzEvV1Zwd1JiQk5HTkczb1pyaURlN0VMdXVuaVVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUtMzkyYjg2M2M5ZjAz
LzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUFSGAwQA
UFSUMA0GCSqGSIb3DQEBCwUAA4IBAQAsiXMuGBE7DxGt0Szre2RDDny7pA8HGY00
RLucLc6QelGOyzSozg80vwhkARBxRvfpmzoHsl/CmPVRC8IZPBgpOiw4sNnkJASF
qpZqHJUfiSf24xoNXLx0EyO3L2zD77N2t3xIoUuMSoNCBCRsIctBXDoYHVeiWdlR
cfrbJOuFIKdfx7BnGLYiywS+C9LjDBkxIiCPULJaluMXxpISmNhH5stkKgoswpFZ
2KnNWqL9Y+1naM0SSyCVeESvorO8KlTx2Xa3Qb9Y3R+avXPwlmHobfbB5SzhfTZr
9DQ1do/CYK4aMQ+sKzZw33U9vS+qH6kG0GTglSaHAswaK9YD8HRN
-----END CERTIFICATE-----
Generated at Sun May 19 11:41:20 2024 by rpki-client on console-ams.rpki-client.org