Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/wWGuCPdphUs_eKBjHhgWWicWBII.roa
File: wWGuCPdphUs_eKBjHhgWWicWBII.roa (raw, json)
Hash identifier: 1jm5XKh1aMX6HpzHe+DQQPDaRRd764CuRn0qMeeeBoo=
Subject key identifier: C1:61:AE:08:F7:69:85:4B:3F:78:A0:63:1E:18:16:5A:27:16:04:82
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 018CC3B6FFE91DF9C16C3335E6496FE2218C
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/wWGuCPdphUs_eKBjHhgWWicWBII.roa
Signing time: Mon 01 Jan 2024 06:29:59 +0000
ROA not before: Mon 01 Jan 2024 06:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60161
IP address blocks: 212.138.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ff:e9:1d:f9:c1:6c:33:35:e6:49:6f:e2:21:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jan 1 06:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c161ae08f769854b3f78a0631e18165a27160482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:3f:e7:cd:e3:99:9f:2c:ae:f5:66:8d:58:
b9:ab:68:80:d3:d1:89:5f:f1:aa:05:60:c8:67:04:
a6:e4:2c:87:42:bc:a0:b7:59:22:a9:36:4e:91:a6:
b5:79:4a:8b:c9:2a:ac:26:10:af:8f:d3:98:e5:0c:
21:b2:79:47:05:56:ec:3a:2b:b7:05:8b:5e:52:d7:
0f:9d:6d:80:54:70:7d:7d:b4:89:3a:e5:ad:b3:6d:
9f:a5:d0:07:30:c6:d8:30:c0:8e:e4:2d:b7:22:c8:
38:2c:4c:a0:77:e5:d8:fa:eb:6a:52:2b:c0:4f:f2:
f8:8d:cf:b9:b3:b4:f4:e5:e4:12:cc:12:36:77:2b:
e5:7d:39:75:30:45:ce:19:cc:7d:1d:23:2d:40:a7:
8b:fc:88:38:af:3d:7f:73:8b:4d:5f:15:3c:a9:7c:
b4:12:2e:e1:cc:1e:31:ae:ff:9c:2a:af:35:3d:46:
46:31:74:5c:6f:c4:f1:1b:ca:d1:ad:a5:d3:cc:2b:
7b:eb:ac:11:b2:15:81:cc:84:25:4f:aa:e6:fa:5a:
c8:77:7b:cc:69:89:71:c3:85:13:a0:40:32:c9:b8:
3f:c2:c6:3f:6e:cd:be:d8:cf:1f:91:54:2a:10:78:
bf:3a:e5:ab:09:07:26:15:17:ac:84:b0:7a:79:33:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:AE:08:F7:69:85:4B:3F:78:A0:63:1E:18:16:5A:27:16:04:82
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/wWGuCPdphUs_eKBjHhgWWicWBII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.138.192.0/24
Signature Algorithm: sha256WithRSAEncryption
15:17:35:06:6a:ae:47:61:b5:d5:c5:b5:dc:59:f1:eb:05:1c:
cc:e2:d3:de:79:75:3a:5e:57:8c:b6:93:be:d0:40:50:8b:f7:
ca:22:7f:8e:cb:19:70:5f:77:66:c5:79:f5:24:56:e5:ea:43:
bc:f7:c9:3f:de:96:35:6f:3b:9d:a5:ac:a6:65:26:89:e9:51:
aa:5e:fa:2b:2e:81:c8:b5:b2:12:5f:1c:67:77:a8:b2:97:1e:
51:16:0f:8f:6a:79:bd:40:4a:da:b7:9a:e7:66:74:32:03:aa:
1d:6c:73:af:d4:6f:90:de:57:c6:11:7a:9f:c2:da:d4:33:49:
09:c0:39:64:f9:2a:10:6f:4d:79:d4:86:99:28:2f:c7:f5:ff:
40:69:b2:84:d4:fa:cd:24:a5:16:c7:bf:6b:28:6a:cf:25:1c:
15:2e:47:ad:75:ba:8b:f8:3a:40:b3:c4:ae:bd:19:a4:6b:03:
73:56:1e:1f:48:20:c3:91:b3:81:79:fa:bc:f1:ef:e7:50:73:
44:51:36:a3:f1:d3:e2:96:9c:20:a1:e0:83:8a:8a:d9:4c:08:
ce:57:e2:b5:04:72:80:ff:16:12:fc:1d:b3:14:ce:38:a0:19:
41:76:95:ac:68:7a:2b:cb:5a:1e:e8:22:b2:50:4b:e2:53:e9:
8b:0e:32:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtv/pHfnBbDM15klv4iGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjQwMTAxMDYyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTYxYWUwOGY3Njk4NTRiM2Y3OGEwNjMxZTE4MTY1YTI3MTYwNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAg/583jmZ8srvVmjVi5q2iA09GJ
X/GqBWDIZwSm5CyHQrygt1kiqTZOkaa1eUqLySqsJhCvj9OY5QwhsnlHBVbsOiu3
BYteUtcPnW2AVHB9fbSJOuWts22fpdAHMMbYMMCO5C23Isg4LEygd+XY+utqUivA
T/L4jc+5s7T05eQSzBI2dyvlfTl1MEXOGcx9HSMtQKeL/Ig4rz1/c4tNXxU8qXy0
Ei7hzB4xrv+cKq81PUZGMXRcb8TxG8rRraXTzCt766wRshWBzIQlT6rm+lrId3vM
aYlxw4UToEAyybg/wsY/bs2+2M8fkVQqEHi/OuWrCQcmFReshLB6eTPfKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFhrgj3aYVLP3igYx4YFlonFgSCMB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvd1dHdUNQZHBoVXNfZUtCakhoZ1dXaWNXQklJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IrAMA0G
CSqGSIb3DQEBCwUAA4IBAQAVFzUGaq5HYbXVxbXcWfHrBRzM4tPeeXU6XleMtpO+
0EBQi/fKIn+OyxlwX3dmxXn1JFbl6kO898k/3pY1bzudpaymZSaJ6VGqXvorLoHI
tbISXxxnd6iylx5RFg+Panm9QErat5rnZnQyA6odbHOv1G+Q3lfGEXqfwtrUM0kJ
wDlk+SoQb0151IaZKC/H9f9AabKE1PrNJKUWx79rKGrPJRwVLketdbqL+DpAs8Su
vRmkawNzVh4fSCDDkbOBefq88e/nUHNEUTaj8dPilpwgoeCDiorZTAjOV+K1BHKA
/xYS/B2zFM44oBlBdpWsaHory1oe6CKyUEviU+mLDjLn
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:02:45 2024 by rpki-client on console-ams.rpki-client.org