Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/WMvTsPZVS0U2OZBcjuFYwltYNE4.roa
File: WMvTsPZVS0U2OZBcjuFYwltYNE4.roa (raw, json)
Hash identifier: 1A+nnJYORQYAEgiISECGnxCiUXJtXD/JDL4kR4cHlDI=
Subject key identifier: 58:CB:D3:B0:F6:55:4B:45:36:39:90:5C:8E:E1:58:C2:5B:58:34:4E
Certificate issuer: /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial: 0194236A31CC7CB45982C886FF810A438435
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/WMvTsPZVS0U2OZBcjuFYwltYNE4.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12213
IP address blocks: 193.19.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:31:cc:7c:b4:59:82:c8:86:ff:81:0a:43:84:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58cbd3b0f6554b453639905c8ee158c25b58344e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:0f:d4:0e:fd:ce:4d:e3:d0:f8:4d:85:22:
45:67:c2:a3:2e:5e:6d:66:8c:ba:b9:20:f7:d3:9c:
e5:80:e0:de:34:59:26:21:60:86:29:eb:44:70:ca:
22:9b:0f:54:93:ee:62:20:bd:66:a5:4c:16:ba:30:
8d:db:02:c5:cf:ff:b9:b1:be:69:da:25:3a:b0:5f:
5f:e3:d4:84:9e:34:5d:35:37:33:58:3e:7f:19:a9:
dd:5c:da:4e:20:aa:c1:5b:a9:bb:35:08:da:53:ff:
ea:68:0f:c2:a3:9f:e4:5c:7f:fc:08:dc:48:2c:33:
c5:ea:1d:ab:3b:88:48:39:bd:86:32:f9:37:9b:f0:
5d:a3:8f:d5:04:49:c6:18:12:f9:e2:02:59:2a:53:
56:5e:35:fe:7d:ec:27:15:9b:9d:6d:f5:36:52:60:
34:83:9e:46:0c:29:25:d5:e6:54:63:89:7d:2b:60:
1b:2f:d3:57:84:6b:9e:f5:cc:7b:a8:17:06:33:9b:
17:fe:25:14:78:2c:a2:f6:29:db:0e:9c:e6:90:8a:
4b:eb:23:dc:c6:71:04:dc:30:6c:6c:e1:bd:96:46:
1e:1c:31:23:9b:6b:20:0b:f7:78:cb:61:b2:35:13:
19:9d:fb:43:f5:15:a5:fb:a1:91:9e:77:2f:66:ae:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CB:D3:B0:F6:55:4B:45:36:39:90:5C:8E:E1:58:C2:5B:58:34:4E
X509v3 Authority Key Identifier:
keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/WMvTsPZVS0U2OZBcjuFYwltYNE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.188.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d5:6f:77:97:61:e5:b7:21:25:92:82:ed:5c:0a:a8:4d:d8:
f0:39:e3:e8:72:c5:13:3f:e5:01:b6:57:30:aa:32:27:8d:75:
fd:59:4d:c4:36:55:73:ff:bb:8b:78:24:e6:d5:a1:83:e0:f5:
a8:e0:b0:a5:a9:a9:e8:bb:d9:72:b3:29:7b:29:41:d2:5f:a1:
c0:45:cb:f1:d3:d8:bb:9d:01:10:38:a0:b0:40:9c:6f:03:15:
16:e6:ce:3e:cb:32:73:e4:66:c5:c2:82:ab:8a:c5:23:db:02:
00:a8:12:c6:eb:50:37:c8:ef:23:bd:34:92:71:d0:b2:f6:fa:
76:84:e4:5c:20:81:5c:07:e6:ec:3d:cb:e8:0f:d7:40:3d:f0:
79:52:d0:1d:c0:c9:f4:40:27:90:94:0f:75:8a:7b:56:e3:bd:
ac:5e:c7:a8:f5:d9:fa:8b:a6:2d:65:f7:26:62:73:96:42:27:
90:7b:95:bb:b4:35:48:ae:a6:b1:78:73:d5:9b:28:27:1c:d1:
05:bf:e1:ac:d2:92:ce:af:af:06:4d:4b:e6:d8:b7:e5:a4:92:
3c:b3:1c:f3:a7:65:0e:5c:0f:3c:18:de:5d:93:88:9f:dd:a2:
b7:23:6d:7a:41:5a:a4:38:21:46:a9:ae:9b:58:03:a4:57:8d:
1b:4d:9b:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjajHMfLRZgsiG/4EKQ4Q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjk2ZmU5NDVhMjMxODA3NTNmNjdmNzc0OGU2ZjI5OWQy
ZTY3MmEwHhcNMjUwMTAxMTk0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGNiZDNiMGY2NTU0YjQ1MzYzOTkwNWM4ZWUxNThjMjViNTgzNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtEP1A79zk3j0PhNhSJFZ8KjLl5t
Zoy6uSD305zlgODeNFkmIWCGKetEcMoimw9Uk+5iIL1mpUwWujCN2wLFz/+5sb5p
2iU6sF9f49SEnjRdNTczWD5/GandXNpOIKrBW6m7NQjaU//qaA/Co5/kXH/8CNxI
LDPF6h2rO4hIOb2GMvk3m/Bdo4/VBEnGGBL54gJZKlNWXjX+fewnFZudbfU2UmA0
g55GDCkl1eZUY4l9K2AbL9NXhGue9cx7qBcGM5sX/iUUeCyi9inbDpzmkIpL6yPc
xnEE3DBsbOG9lkYeHDEjm2sgC/d4y2GyNRMZnftD9RWl+6GRnncvZq6E7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFjL07D2VUtFNjmQXI7hWMJbWDROMB8GA1UdIwQY
MBaAFD8pb+lFojGAdT9n93SObymdLmcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlsdjZVV2lNWUIxUDJmM2RJNXZLWjB1WnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jYmQzNjItNzY5NC00MTgzLTkxNWQt
OGY0ZjI5MWIyM2I2LzEvV012VHNQWlZTMFUyT1pCY2p1Rll3bHRZTkU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jYmQzNjItNzY5NC00MTgzLTkxNWQtOGY0ZjI5MWIyM2I2
LzEvUHlsdjZVV2lNWUIxUDJmM2RJNXZLWjB1WnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRO8MA0G
CSqGSIb3DQEBCwUAA4IBAQCG1W93l2HltyElkoLtXAqoTdjwOePocsUTP+UBtlcw
qjInjXX9WU3ENlVz/7uLeCTm1aGD4PWo4LClqanou9lysyl7KUHSX6HARcvx09i7
nQEQOKCwQJxvAxUW5s4+yzJz5GbFwoKrisUj2wIAqBLG61A3yO8jvTSScdCy9vp2
hORcIIFcB+bsPcvoD9dAPfB5UtAdwMn0QCeQlA91intW472sXseo9dn6i6YtZfcm
YnOWQieQe5W7tDVIrqaxeHPVmygnHNEFv+Gs0pLOr68GTUvm2LflpJI8sxzzp2UO
XA88GN5dk4if3aK3I216QVqkOCFGqa6bWAOkV40bTZsC
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:40:11 2025 by rpki-client