Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/KWunod-zk9nUyGQLaX0WWlDz8Hk.roa
File: KWunod-zk9nUyGQLaX0WWlDz8Hk.roa (raw, json)
Hash identifier: jg5cFNw/BR34Fq2GfC2OIJItcaZUD8MAY2g0M7t7mYg=
Subject key identifier: 29:6B:A7:A1:DF:B3:93:D9:D4:C8:64:0B:69:7D:16:5A:50:F3:F0:79
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 0194221FA5EEF6A9D365D6A36B21FFEDEB0E
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/KWunod-zk9nUyGQLaX0WWlDz8Hk.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34907
IP address blocks: 193.3.162.0/24 maxlen: 24
194.31.232.0/24 maxlen: 24
195.245.200.0/24 maxlen: 24
2001:67c:178c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a5:ee:f6:a9:d3:65:d6:a3:6b:21:ff:ed:eb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=296ba7a1dfb393d9d4c8640b697d165a50f3f079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:61:7e:93:db:de:05:bc:77:76:e5:37:48:
cd:7c:91:86:44:13:b9:1f:c4:16:56:55:de:b5:4f:
c3:f6:8d:c5:80:4b:b8:91:25:da:98:3f:9e:8d:30:
8f:1d:57:1c:7a:1f:a5:01:03:31:1a:6f:1e:04:b9:
b1:41:e9:6a:48:5d:ab:57:eb:21:1f:c5:06:37:bf:
45:92:0e:fc:30:bc:8b:e5:b2:26:5b:bd:72:2f:8c:
e7:77:06:0f:a2:af:d1:df:0c:9d:85:65:67:e0:72:
a4:35:b1:84:0c:bf:a9:d0:4f:44:5f:62:3d:26:77:
fd:39:39:42:0c:13:b1:62:1c:7f:90:71:f4:a2:ee:
16:bc:fb:76:20:4f:66:49:b3:7d:5a:a2:f4:ad:fd:
80:bd:ba:14:8b:da:34:c6:66:6a:48:fe:f8:c0:8b:
47:51:01:18:27:ff:51:a4:5c:b3:c3:3d:33:a7:52:
ec:9e:31:40:4b:2f:c9:7c:27:73:0d:4e:15:75:b2:
20:03:f6:7e:4e:db:c8:92:70:e1:c2:2a:ad:88:f6:
11:7e:79:39:5d:a9:a5:fd:23:6d:55:fa:19:5e:ec:
7c:27:b5:23:a7:ff:ca:06:0a:6d:b3:a4:e4:56:60:
42:40:81:e4:23:4f:30:09:1b:a2:e9:c3:27:44:4a:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:A7:A1:DF:B3:93:D9:D4:C8:64:0B:69:7D:16:5A:50:F3:F0:79
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/KWunod-zk9nUyGQLaX0WWlDz8Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.162.0/24
194.31.232.0/24
195.245.200.0/24
IPv6:
2001:67c:178c::/48
Signature Algorithm: sha256WithRSAEncryption
0c:ef:ff:f4:8f:b2:f4:a0:c8:0c:c7:18:fb:d6:4a:83:b6:e3:
13:c5:25:ae:5a:2f:3f:c5:f6:6c:94:da:b6:4b:27:20:f9:41:
f0:84:c9:74:87:53:02:5a:cb:5f:6e:93:60:98:c1:eb:3e:b8:
d7:ee:eb:13:ba:26:3a:67:65:09:f4:a8:68:ee:cd:79:16:e1:
3c:95:6b:a6:6b:14:e7:db:22:8a:ec:87:15:00:8a:96:d7:8f:
99:a1:ab:ea:5f:f7:49:fe:00:37:87:4c:65:15:4f:e3:49:4e:
99:38:ab:7b:b7:f6:aa:e0:48:24:00:5c:3b:b2:04:75:42:0c:
e8:12:40:d1:db:38:1c:91:f4:dd:13:27:14:28:b3:fc:f2:15:
44:33:22:0f:bf:8d:2e:a0:3d:10:a3:3b:e6:9a:59:2f:4b:bd:
9d:4e:b4:f2:36:91:ce:2d:22:68:1e:9a:5b:26:b4:d7:83:bf:
bd:4d:4d:9f:b3:b5:80:1d:e7:0f:d0:f8:da:9d:6d:13:04:2b:
26:11:29:fa:46:97:85:a1:f7:26:67:f4:71:06:fe:43:84:52:
14:d9:9f:c2:79:9e:4b:e4:8f:2b:c5:7d:b8:d0:61:a7:01:1b:
8b:30:d4:71:4e:5a:0a:76:5e:bc:99:da:7b:96:fd:08:ec:65:
2c:81:27:5a
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQiH6Xu9qnTZdajayH/7esOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOGJhZTkyMzMwNWE3MWM1MjZhNmZjZjU3YzI5ZDZjMTZh
NDI2OWUwHhcNMjUwMTAxMTM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTZiYTdhMWRmYjM5M2Q5ZDRjODY0MGI2OTdkMTY1YTUwZjNmMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllBhfpPb3gW8d3blN0jNfJGGRBO5
H8QWVlXetU/D9o3FgEu4kSXamD+ejTCPHVcceh+lAQMxGm8eBLmxQelqSF2rV+sh
H8UGN79Fkg78MLyL5bImW71yL4zndwYPoq/R3wydhWVn4HKkNbGEDL+p0E9EX2I9
Jnf9OTlCDBOxYhx/kHH0ou4WvPt2IE9mSbN9WqL0rf2AvboUi9o0xmZqSP74wItH
UQEYJ/9RpFyzwz0zp1LsnjFASy/JfCdzDU4VdbIgA/Z+TtvIknDhwiqtiPYRfnk5
Xaml/SNtVfoZXux8J7Ujp//KBgpts6TkVmBCQIHkI08wCRui6cMnREpFQQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFClrp6Hfs5PZ1MhkC2l9FlpQ8/B5MB8GA1UdIwQY
MBaAFHqLrpIzBaccUmpvz1fCnWwWpCaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW91dWtqTUZweHhTYW1fUFY4S2RiQmFrSnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yYTFlNWMtMTAxMC00MDk4LTk0Yzkt
ZGUwYzU3MGJhODUwLzEvS1d1bm9kLXprOW5VeUdRTGFYMFdXbER6OEhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yYTFlNWMtMTAxMC00MDk4LTk0YzktZGUwYzU3MGJhODUw
LzEvZW91dWtqTUZweHhTYW1fUFY4S2RiQmFrSnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAwQOiAwQA
wh/oAwQAw/XIMA8EAgACMAkDBwAgAQZ8F4wwDQYJKoZIhvcNAQELBQADggEBAAzv
//SPsvSgyAzHGPvWSoO24xPFJa5aLz/F9myU2rZLJyD5QfCEyXSHUwJay19uk2CY
wes+uNfu6xO6JjpnZQn0qGjuzXkW4TyVa6ZrFOfbIorshxUAipbXj5mhq+pf90n+
ADeHTGUVT+NJTpk4q3u39qrgSCQAXDuyBHVCDOgSQNHbOByR9N0TJxQos/zyFUQz
Ig+/jS6gPRCjO+aaWS9LvZ1OtPI2kc4tImgemlsmtNeDv71NTZ+ztYAd5w/Q+Nqd
bRMEKyYRKfpGl4Wh9yZn9HEG/kOEUhTZn8J5nkvkjyvFfbjQYacBG4sw1HFOWgp2
XryZ2nuW/QjsZSyBJ1o=
-----END CERTIFICATE-----
Generated at Fri Apr 18 17:01:23 2025 by rpki-client