Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/WX9ifdPc509PIWH1MshzaQ9gKs4.roa
File: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (raw, json)
Hash identifier: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=
Subject key identifier: 59:7F:62:7D:D3:DC:E7:4F:4F:21:61:F5:32:C8:73:69:0F:60:2A:CE
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 019426D9AF8586711EC992210AAAB97B10C5
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/WX9ifdPc509PIWH1MshzaQ9gKs4.roa
Signing time: Thu 02 Jan 2025 11:49:47 +0000
ROA not before: Thu 02 Jan 2025 11:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 193.22.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:af:85:86:71:1e:c9:92:21:0a:aa:b9:7b:10:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=597f627dd3dce74f4f2161f532c873690f602ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:83:1b:4b:d2:08:f6:f2:67:6a:b4:3a:88:
cf:e7:d2:8a:a3:c0:fe:cc:cd:d8:fe:65:f4:b1:cf:
f9:69:5d:03:9e:40:82:a5:d5:d4:97:95:37:18:68:
55:66:2f:cc:bd:c6:96:c6:57:a9:5a:c5:c3:b7:ee:
ca:71:69:14:7a:b2:18:cb:3b:b0:6e:7c:b0:be:fa:
f0:d5:d6:d3:3f:25:87:4e:b1:13:e6:06:b2:6a:b0:
d9:cc:30:e1:68:43:ac:eb:04:6b:f3:1c:13:6b:d3:
66:8b:c9:84:fc:e0:cb:a1:c7:23:04:b9:ab:b7:72:
10:72:e5:d7:5c:55:26:3b:4e:35:9b:c9:1c:4a:ff:
f3:92:73:23:f5:37:c6:99:5b:a9:98:43:1a:aa:11:
ef:9f:6a:63:88:c6:10:cd:9c:45:72:54:76:4c:a8:
0c:3c:0e:12:1c:bb:af:c6:57:6c:e8:00:93:3a:f1:
85:dc:a5:6d:99:82:7b:66:d3:e5:03:18:54:8b:0d:
95:3a:05:d0:01:96:c2:e7:87:bf:af:60:0f:43:d8:
b7:1f:e8:0a:0e:de:1b:0a:12:68:a7:24:78:0c:f4:
66:90:2d:ee:73:24:7c:bb:25:ea:1d:b9:aa:4b:04:
96:ac:f5:f6:45:6b:1c:64:08:34:b3:bd:62:cb:0b:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:62:7D:D3:DC:E7:4F:4F:21:61:F5:32:C8:73:69:0F:60:2A:CE
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/WX9ifdPc509PIWH1MshzaQ9gKs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.14.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5d:77:a5:84:52:2e:be:69:ae:3e:97:10:e2:bd:9e:cd:a9:
b4:b4:38:fc:69:91:5a:c2:bb:8c:62:55:05:4e:f8:fe:80:ea:
dd:36:f8:d9:ac:b8:98:06:62:f0:13:26:31:81:66:25:01:d2:
68:d5:54:99:5e:28:f1:96:17:66:fd:fe:ae:53:da:23:c4:3d:
a0:5a:1f:49:ef:1e:70:31:94:62:bc:08:0f:fb:f7:df:b1:56:
03:7c:04:73:19:5d:70:b2:f1:de:9e:72:b5:70:c3:53:1a:16:
e7:b9:aa:e4:a4:5a:17:6d:1b:ee:0b:b2:ff:12:4a:1b:b2:d4:
a2:90:7a:37:04:6b:e0:8e:65:86:6a:83:d6:15:95:75:a3:20:
a6:15:85:3f:ad:2f:6b:2d:b4:17:5e:59:b2:a8:de:de:25:15:
d9:d5:09:4f:3c:c4:82:83:49:8b:fa:14:f8:f6:88:9b:31:6b:
49:af:2b:a3:37:cc:eb:90:3d:bf:44:d6:75:2c:1b:74:f5:f0:
98:31:f3:ed:ea:a7:d4:71:55:c4:db:be:80:c3:4a:26:31:dc:
0b:7f:39:2f:73:2f:d5:98:f5:0a:64:b5:ac:df:74:43:f9:da:
d3:74:2e:25:20:6c:3e:0e:24:93:ce:19:df:83:14:4b:ee:b3:
20:a2:78:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2a+FhnEeyZIhCqq5exDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWRiMGM1YjJkOTYxMGVmNTg2ZTk3ZmJhMWZjYTg3NTAw
NmYzZGEwHhcNMjUwMTAyMTE0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTdmNjI3ZGQzZGNlNzRmNGYyMTYxZjUzMmM4NzM2OTBmNjAyYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3SDG0vSCPbyZ2q0OojP59KKo8D+
zM3Y/mX0sc/5aV0DnkCCpdXUl5U3GGhVZi/MvcaWxlepWsXDt+7KcWkUerIYyzuw
bnywvvrw1dbTPyWHTrET5gayarDZzDDhaEOs6wRr8xwTa9Nmi8mE/ODLoccjBLmr
t3IQcuXXXFUmO041m8kcSv/zknMj9TfGmVupmEMaqhHvn2pjiMYQzZxFclR2TKgM
PA4SHLuvxlds6ACTOvGF3KVtmYJ7ZtPlAxhUiw2VOgXQAZbC54e/r2APQ9i3H+gK
Dt4bChJopyR4DPRmkC3ucyR8uyXqHbmqSwSWrPX2RWscZAg0s71iywvEuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFl/Yn3T3OdPTyFh9TLIc2kPYCrOMB8GA1UdIwQY
MBaAFOGdsMWy2WEO9Ybpf7ofyodQBvPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQt
MGNmNzRiZTMwM2ZmLzEvV1g5aWZkUGM1MDlQSVdIMU1zaHphUTlnS3M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQtMGNmNzRiZTMwM2Zm
LzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRYOMA0G
CSqGSIb3DQEBCwUAA4IBAQBYXXelhFIuvmmuPpcQ4r2ezam0tDj8aZFawruMYlUF
Tvj+gOrdNvjZrLiYBmLwEyYxgWYlAdJo1VSZXijxlhdm/f6uU9ojxD2gWh9J7x5w
MZRivAgP+/ffsVYDfARzGV1wsvHennK1cMNTGhbnuarkpFoXbRvuC7L/EkobstSi
kHo3BGvgjmWGaoPWFZV1oyCmFYU/rS9rLbQXXlmyqN7eJRXZ1QlPPMSCg0mL+hT4
9oibMWtJryujN8zrkD2/RNZ1LBt09fCYMfPt6qfUcVXE276Aw0omMdwLfzkvcy/V
mPUKZLWs33RD+drTdC4lIGw+DiSTzhnfgxRL7rMgonhJ
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:13 2025 by rpki-client