Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/Wps5zB5HXSoh-aThSrhBkudXZQM.roa
File: Wps5zB5HXSoh-aThSrhBkudXZQM.roa (raw, json)
Hash identifier: pXypMrh+Cp4Odo0DNRSbecVbraHkewSm/x9jEul+Juc=
Subject key identifier: 5A:9B:39:CC:1E:47:5D:2A:21:F9:A4:E1:4A:B8:41:92:E7:57:65:03
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 018CC6B7F02F67112BDEE172DA6719710CDE
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/Wps5zB5HXSoh-aThSrhBkudXZQM.roa
Signing time: Mon 01 Jan 2024 20:29:52 +0000
ROA not before: Mon 01 Jan 2024 20:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42731
IP address blocks: 194.176.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f0:2f:67:11:2b:de:e1:72:da:67:19:71:0c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Jan 1 20:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a9b39cc1e475d2a21f9a4e14ab84192e7576503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bb:77:40:e5:8b:95:b7:db:93:d1:3b:c4:0a:
ff:12:f2:10:99:b1:0a:55:4d:fe:7f:f0:d9:a6:ab:
86:03:32:a6:78:2e:59:9f:2a:16:99:6b:09:19:ea:
c5:40:55:5b:a1:81:7d:b3:5c:70:c0:64:13:e8:ff:
19:1b:1b:a4:67:3c:0e:1f:9b:b1:8b:2b:de:c0:12:
d7:60:d3:83:2e:28:4b:e2:bb:5e:02:cc:10:a5:9d:
f0:65:5e:ab:44:87:51:fe:eb:9e:af:c5:70:43:20:
d3:0d:83:47:0e:6e:52:74:63:d0:1a:b3:18:28:93:
14:64:e8:26:9c:97:ea:4e:c3:df:d3:78:57:7b:0d:
56:32:84:0b:5f:94:05:69:78:3d:ca:81:11:b1:31:
dd:1e:6b:b9:7e:ed:10:8d:22:6a:40:e1:00:cc:31:
29:7a:29:6c:21:1e:25:7c:12:29:d4:a5:0c:ef:1a:
32:43:1b:86:71:6b:d9:c6:cd:68:09:c2:0f:f8:bb:
37:28:3f:fa:99:99:a5:af:29:3c:63:75:e4:ab:6d:
eb:f1:d2:ec:ed:68:bb:20:2c:59:9b:dc:af:98:7a:
e9:e2:61:4b:50:2f:f6:4e:bd:2a:bc:96:a3:ee:22:
84:50:7d:ea:4f:82:65:b2:53:9f:22:ab:84:29:08:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9B:39:CC:1E:47:5D:2A:21:F9:A4:E1:4A:B8:41:92:E7:57:65:03
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/Wps5zB5HXSoh-aThSrhBkudXZQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.190.0/24
Signature Algorithm: sha256WithRSAEncryption
43:17:a6:18:4e:df:ab:34:36:ca:cb:1f:bb:2c:aa:8c:ad:96:
97:54:60:56:5a:90:fa:64:76:56:20:2b:5f:0d:93:00:88:ac:
ac:1a:90:75:fb:c0:88:bc:15:8f:d4:d1:3e:7a:77:e1:68:04:
db:79:9b:7e:87:c9:30:bb:72:41:69:70:16:07:29:42:a7:27:
e1:d1:48:31:b2:82:2e:05:d6:3c:50:35:b2:fa:65:97:15:42:
db:8a:d7:14:f9:0c:b8:c6:97:28:a8:c6:d8:6d:c9:ef:ef:28:
b3:48:94:c2:50:0c:ce:02:9b:b6:57:46:97:c1:33:b7:12:3f:
2e:4e:fc:3d:a0:5f:c4:96:17:35:e0:ea:21:59:7e:0a:9d:56:
c0:08:0a:1d:80:f8:69:64:32:51:f6:00:11:98:e2:06:4e:1c:
9a:e3:42:56:fa:60:0e:9b:58:2d:a7:5c:c0:8a:af:5a:0a:31:
43:ac:de:19:55:5f:7d:4c:e4:ea:9f:b9:a0:9a:4c:c0:f7:92:
e1:b5:f9:11:a0:88:55:6b:d4:2d:cf:0c:c8:72:ca:64:a8:e4:
20:19:ce:7d:e2:2b:c1:64:b2:b0:49:ca:bd:c9:45:08:5f:56:
8c:d2:c4:03:3a:89:36:e0:99:92:1d:0f:e2:06:b6:71:c4:95:
44:67:dc:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt/AvZxEr3uFy2mcZcQzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YjgwZDVmNGE5YzkyZGQ5MmE0NjA1NzE5ZTBhZThkMWE2
MmMwNDMwHhcNMjQwMTAxMjAyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTliMzljYzFlNDc1ZDJhMjFmOWE0ZTE0YWI4NDE5MmU3NTc2NTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bt3QOWLlbfbk9E7xAr/EvIQmbEK
VU3+f/DZpquGAzKmeC5ZnyoWmWsJGerFQFVboYF9s1xwwGQT6P8ZGxukZzwOH5ux
iyvewBLXYNODLihL4rteAswQpZ3wZV6rRIdR/uuer8VwQyDTDYNHDm5SdGPQGrMY
KJMUZOgmnJfqTsPf03hXew1WMoQLX5QFaXg9yoERsTHdHmu5fu0QjSJqQOEAzDEp
eilsIR4lfBIp1KUM7xoyQxuGcWvZxs1oCcIP+Ls3KD/6mZmlryk8Y3Xkq23r8dLs
7Wi7ICxZm9yvmHrp4mFLUC/2Tr0qvJaj7iKEUH3qT4JlslOfIquEKQiB3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqbOcweR10qIfmk4Uq4QZLnV2UDMB8GA1UdIwQY
MBaAFAe4DV9KnJLdkqRgVxngro0aYsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUt
YTI2NWYzODA5M2EwLzEvV3BzNXpCNUhYU29oLWFUaFNyaEJrdWRYWlFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUtYTI2NWYzODA5M2Ew
LzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrC+MA0G
CSqGSIb3DQEBCwUAA4IBAQBDF6YYTt+rNDbKyx+7LKqMrZaXVGBWWpD6ZHZWICtf
DZMAiKysGpB1+8CIvBWP1NE+enfhaATbeZt+h8kwu3JBaXAWBylCpyfh0UgxsoIu
BdY8UDWy+mWXFULbitcU+Qy4xpcoqMbYbcnv7yizSJTCUAzOApu2V0aXwTO3Ej8u
Tvw9oF/Elhc14OohWX4KnVbACAodgPhpZDJR9gARmOIGThya40JW+mAOm1gtp1zA
iq9aCjFDrN4ZVV99TOTqn7mgmkzA95LhtfkRoIhVa9QtzwzIcspkqOQgGc594ivB
ZLKwScq9yUUIX1aM0sQDOok24JmSHQ/iBrZxxJVEZ9yy
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:42:31 2024 by rpki-client on console-ams.rpki-client.org