Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/WV7QPmFglb32ubsYCfgK2rSXhGk.roa
File: WV7QPmFglb32ubsYCfgK2rSXhGk.roa (raw, json)
Hash identifier: 7jclXGuRVqisqCezIaon+r4NXFS6nrK/O3nscYXGo0k=
Subject key identifier: 59:5E:D0:3E:61:60:95:BD:F6:B9:BB:18:09:F8:0A:DA:B4:97:84:69
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 019428235DCDA8810C77311A90075232D7EF
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/WV7QPmFglb32ubsYCfgK2rSXhGk.roa
Signing time: Thu 02 Jan 2025 17:49:53 +0000
ROA not before: Thu 02 Jan 2025 17:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 193.39.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:5d:cd:a8:81:0c:77:31:1a:90:07:52:32:d7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Jan 2 17:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=595ed03e616095bdf6b9bb1809f80adab4978469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:0f:e8:93:b0:70:cd:31:ae:f1:48:2c:b1:
cc:42:44:cb:15:32:7a:b8:b3:4f:26:8d:a6:15:32:
5d:e3:ff:05:23:4b:b7:dd:e6:b3:2f:88:64:3c:7c:
2e:83:e7:02:00:7c:83:85:e5:9e:ae:f6:8b:99:27:
f0:22:a0:aa:44:73:f8:ea:ca:30:8e:5e:93:20:f2:
be:f8:2a:a1:3b:8a:92:5d:7c:57:ba:39:cb:51:da:
4a:b5:ba:ae:f9:8c:f5:23:ae:d6:d6:37:75:04:06:
f5:91:1b:f5:0a:ec:65:0d:37:37:c0:cd:03:a0:72:
e7:62:9b:4a:34:52:15:99:63:84:e4:e5:d7:88:76:
59:ab:9e:40:74:90:12:10:e2:4b:de:78:cf:2f:b9:
e5:28:08:85:58:38:75:2d:ee:fe:58:c6:10:18:73:
de:f6:33:7c:42:32:10:14:21:36:b7:48:da:2d:de:
b8:8f:9b:ba:96:c0:40:f0:e7:dd:d7:60:59:d2:29:
2c:82:a6:3f:38:94:43:af:a0:e2:74:ca:57:9f:18:
51:9e:23:58:f2:95:1c:03:da:46:64:94:2b:49:de:
2c:76:1e:86:54:b0:ae:4c:d3:67:03:48:70:27:b4:
6a:cb:f0:58:b3:70:7d:91:be:4c:59:0f:34:7e:ae:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5E:D0:3E:61:60:95:BD:F6:B9:BB:18:09:F8:0A:DA:B4:97:84:69
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/WV7QPmFglb32ubsYCfgK2rSXhGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:ff:db:24:4d:14:2f:91:90:02:d6:97:b7:58:4e:8a:6b:a2:
72:d8:35:3a:0f:6d:82:9b:30:1d:00:0e:9d:d8:52:6c:20:68:
b5:24:79:94:39:d9:b7:08:13:62:a1:73:0c:71:06:96:2f:e5:
0e:01:f1:07:20:10:08:de:31:9a:30:78:19:c7:05:30:ff:d1:
1d:a3:3c:62:a5:87:0b:9e:32:de:5c:d2:74:81:cf:02:3e:7f:
ff:4d:7a:a4:2e:66:34:b2:f9:04:fe:3f:a5:37:ca:c2:02:f7:
9d:03:a0:ad:41:f1:19:63:5b:20:9f:50:73:84:26:b0:55:cf:
80:bc:4a:40:be:9d:20:dd:63:ea:ae:56:d3:ac:75:59:3a:3b:
b0:25:56:aa:9d:00:2b:c8:16:ac:88:a7:1f:75:a4:8a:0f:3f:
b3:89:83:ad:2a:1a:6f:6e:a2:d9:e3:02:1b:f4:05:79:06:37:
fa:15:17:f4:e8:9a:63:cd:8b:5b:b0:0c:5a:03:07:7f:ae:f7:
51:22:e3:4f:3f:47:d0:a0:45:61:34:cb:45:b7:71:02:d2:de:
09:94:20:01:e9:68:7f:96:e4:1e:bc:7f:2a:81:ea:0f:fb:ad:
e2:b1:72:02:cd:ed:8c:06:56:c9:06:f6:e1:74:a8:39:b7:4e:
22:31:58:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI13NqIEMdzEakAdSMtfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MjFhMzlhZWQ5ZGE0ZWUzYWI2NjM5ZDI0NDUwOGZhMWU4
ZDIwZjYwHhcNMjUwMTAyMTc0OTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTVlZDAzZTYxNjA5NWJkZjZiOWJiMTgwOWY4MGFkYWI0OTc4NDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWAP6JOwcM0xrvFILLHMQkTLFTJ6
uLNPJo2mFTJd4/8FI0u33eazL4hkPHwug+cCAHyDheWervaLmSfwIqCqRHP46sow
jl6TIPK++CqhO4qSXXxXujnLUdpKtbqu+Yz1I67W1jd1BAb1kRv1CuxlDTc3wM0D
oHLnYptKNFIVmWOE5OXXiHZZq55AdJASEOJL3njPL7nlKAiFWDh1Le7+WMYQGHPe
9jN8QjIQFCE2t0jaLd64j5u6lsBA8Ofd12BZ0iksgqY/OJRDr6DidMpXnxhRniNY
8pUcA9pGZJQrSd4sdh6GVLCuTNNnA0hwJ7Rqy/BYs3B9kb5MWQ80fq4cmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFle0D5hYJW99rm7GAn4Ctq0l4RpMB8GA1UdIwQY
MBaAFIgho5rtnaTuOrZjnSRFCPoejSD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAt
ZjYwZDZmNzE4MmExLzEvV1Y3UVBtRmdsYjMydWJzWUNmZ0syclNYaEdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAtZjYwZDZmNzE4MmEx
LzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSe8MA0G
CSqGSIb3DQEBCwUAA4IBAQCu/9skTRQvkZAC1pe3WE6Ka6Jy2DU6D22CmzAdAA6d
2FJsIGi1JHmUOdm3CBNioXMMcQaWL+UOAfEHIBAI3jGaMHgZxwUw/9EdozxipYcL
njLeXNJ0gc8CPn//TXqkLmY0svkE/j+lN8rCAvedA6CtQfEZY1sgn1BzhCawVc+A
vEpAvp0g3WPqrlbTrHVZOjuwJVaqnQAryBasiKcfdaSKDz+ziYOtKhpvbqLZ4wIb
9AV5Bjf6FRf06JpjzYtbsAxaAwd/rvdRIuNPP0fQoEVhNMtFt3EC0t4JlCAB6Wh/
luQevH8qgeoP+63isXICze2MBlbJBvbhdKg5t04iMVhs
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:36 2025 by rpki-client