Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wjqovTLXh-lg11q13czxBXdlYlM.roa
File: wjqovTLXh-lg11q13czxBXdlYlM.roa (raw, json)
Hash identifier: xV5GaQXTIUqYVuS7g+bITwS5aZzu7urUKapv2vlhHro=
Subject key identifier: C2:3A:A8:BD:32:D7:87:E9:60:D7:5A:B5:DD:CC:F1:05:77:65:62:53
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018D796C46C2F0B19BAE39A19480FE9113E2
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wjqovTLXh-lg11q13czxBXdlYlM.roa
Signing time: Mon 05 Feb 2024 13:19:15 +0000
ROA not before: Mon 05 Feb 2024 13:19:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39134
IP address blocks: 193.32.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:6c:46:c2:f0:b1:9b:ae:39:a1:94:80:fe:91:13:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 5 13:19:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c23aa8bd32d787e960d75ab5ddccf10577656253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:7e:6c:5b:cc:de:8a:57:a3:4f:4a:e9:91:
e7:53:3e:02:8a:64:d0:64:4f:a3:d7:3d:d1:8f:e1:
3e:25:38:fb:39:7b:da:10:04:55:fc:82:b7:74:95:
4e:1c:94:88:df:ab:4e:1c:b7:bf:5c:72:0c:bd:9c:
ef:b0:ee:bd:dd:d1:98:62:c6:95:4d:08:7a:d1:3e:
6c:00:02:cc:0e:65:ac:0a:aa:08:ce:99:eb:ec:4d:
51:da:f5:e5:b0:95:47:39:61:a4:21:85:a2:5f:fe:
b7:d4:96:b7:aa:05:9e:1b:a9:71:c4:c7:75:b5:a1:
b5:41:cf:98:32:09:66:d1:21:84:9a:12:69:9f:31:
08:00:e1:1e:85:c5:c2:b4:e9:d8:21:50:41:2d:5d:
5e:f2:c9:86:3b:ee:f0:59:0c:3a:9b:f7:85:3d:3b:
54:a7:1a:c5:27:9d:df:12:18:9b:94:50:db:90:11:
1c:d0:a4:18:2a:86:df:ee:f8:eb:47:e3:e9:9a:10:
fb:df:c2:46:9e:b9:af:ae:75:12:28:12:53:88:22:
e3:99:8b:ca:47:7a:7d:45:98:ca:39:eb:de:38:52:
60:4b:0a:ac:44:3e:94:43:84:02:d5:d3:63:86:16:
5c:bb:9d:cd:5e:21:01:09:db:06:96:28:20:58:cd:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3A:A8:BD:32:D7:87:E9:60:D7:5A:B5:DD:CC:F1:05:77:65:62:53
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wjqovTLXh-lg11q13czxBXdlYlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.191.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ff:9f:9c:45:09:b6:10:f4:e8:dc:8f:6e:ee:ff:ad:62:27:
10:7e:79:04:bb:41:cc:5a:5d:b7:25:94:88:68:2b:b3:eb:4e:
09:d3:50:31:7e:48:81:bf:b2:c4:3a:e8:8f:29:3a:86:64:f3:
e1:b6:d1:40:d6:a6:ba:c4:26:22:c2:66:93:61:48:bb:27:41:
d5:04:e4:31:01:ba:d0:d6:f5:51:d4:83:4a:aa:d0:eb:ad:d7:
2d:36:b9:5c:85:60:30:00:21:cf:48:02:9e:10:ad:9e:b5:c2:
08:ec:c9:d6:7f:a6:61:d5:fd:69:67:58:14:24:3f:bc:6b:59:
a7:36:9a:a0:6f:6d:a9:3a:a7:5b:9d:c3:f1:cc:6d:36:d8:65:
d7:58:9d:9c:6b:16:79:6d:b8:3f:d0:27:d2:4b:e1:f4:4b:bf:
1e:26:6f:82:a0:88:71:d6:55:d0:79:fc:d4:ef:cf:ca:f7:59:
a8:3f:38:3a:d4:46:83:78:50:c2:52:28:9b:1f:af:59:ba:4b:
5c:08:ac:16:8b:a0:8a:f1:f0:55:13:49:3a:d2:37:37:51:65:
84:4b:08:7b:98:e8:02:c1:69:ba:b3:c9:23:af:48:84:90:5e:
65:96:23:a3:d0:33:53:71:87:5d:43:51:07:92:b3:c0:a8:f5:
fe:63:f8:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY15bEbC8LGbrjmhlID+kRPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjQwMjA1MTMxOTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjNhYThiZDMyZDc4N2U5NjBkNzVhYjVkZGNjZjEwNTc3NjU2MjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWt+bFvM3opXo09K6ZHnUz4CimTQ
ZE+j1z3Rj+E+JTj7OXvaEARV/IK3dJVOHJSI36tOHLe/XHIMvZzvsO693dGYYsaV
TQh60T5sAALMDmWsCqoIzpnr7E1R2vXlsJVHOWGkIYWiX/631Ja3qgWeG6lxxMd1
taG1Qc+YMglm0SGEmhJpnzEIAOEehcXCtOnYIVBBLV1e8smGO+7wWQw6m/eFPTtU
pxrFJ53fEhiblFDbkBEc0KQYKobf7vjrR+PpmhD738JGnrmvrnUSKBJTiCLjmYvK
R3p9RZjKOeveOFJgSwqsRD6UQ4QC1dNjhhZcu53NXiEBCdsGliggWM2IywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMI6qL0y14fpYNdatd3M8QV3ZWJTMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvd2pxb3ZUTFhoLWxnMTFxMTNjenhCWGRsWWxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSC/MA0G
CSqGSIb3DQEBCwUAA4IBAQAw/5+cRQm2EPTo3I9u7v+tYicQfnkEu0HMWl23JZSI
aCuz604J01AxfkiBv7LEOuiPKTqGZPPhttFA1qa6xCYiwmaTYUi7J0HVBOQxAbrQ
1vVR1INKqtDrrdctNrlchWAwACHPSAKeEK2etcII7MnWf6Zh1f1pZ1gUJD+8a1mn
Npqgb22pOqdbncPxzG022GXXWJ2caxZ5bbg/0CfSS+H0S78eJm+CoIhx1lXQefzU
78/K91moPzg61EaDeFDCUiibH69ZuktcCKwWi6CK8fBVE0k60jc3UWWESwh7mOgC
wWm6s8kjr0iEkF5lliOj0DNTcYddQ1EHkrPAqPX+Y/gF
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:50 2024 by rpki-client on console-fra.rpki-client.org