Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/c3GX2BFKDEhmANmZ86G-emEKbTk.roa
File: c3GX2BFKDEhmANmZ86G-emEKbTk.roa (raw, json)
Hash identifier: mk77AQBdXW18vflWaTb98uk+eKpn+5cvtwdROZ1ovY0=
Subject key identifier: 73:71:97:D8:11:4A:0C:48:66:00:D9:99:F3:A1:BE:7A:61:0A:6D:39
Certificate issuer: /CN=c29cc9d3c496f8a92204d40a665edf538190d539
Certificate serial: 019425218905844AB7D96ACA7A7C01A9E61E
Authority key identifier: C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/c3GX2BFKDEhmANmZ86G-emEKbTk.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41652
IP address blocks: 193.93.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:89:05:84:4a:b7:d9:6a:ca:7a:7c:01:a9:e6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c29cc9d3c496f8a92204d40a665edf538190d539
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=737197d8114a0c486600d999f3a1be7a610a6d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d0:90:70:0a:7e:42:7f:c4:43:c2:7f:ae:95:
f5:93:75:99:77:4c:d0:c7:8a:6c:47:4e:60:4a:21:
32:7b:2d:c6:ec:e8:af:11:fa:c7:8a:c7:79:de:77:
33:24:d1:75:a5:ac:a5:c5:c7:7a:37:34:59:aa:10:
b1:5d:86:85:a3:45:90:ab:da:d7:9b:cb:1f:c5:04:
26:8f:90:a2:31:60:28:7e:b2:d3:3a:a7:22:c8:ad:
a5:f5:4d:10:23:de:6b:f4:3c:e7:65:2f:c3:83:a5:
d0:6a:b4:ee:ae:d2:82:c5:79:85:dd:9a:9c:ab:2a:
f5:a9:82:a6:e3:5e:4a:99:6e:2b:a3:56:22:34:39:
c8:73:3a:3d:a2:47:a7:03:43:47:82:12:e9:4b:a5:
aa:00:1d:47:ef:5b:d8:21:45:59:a4:a6:da:e2:ab:
a9:6e:6a:5c:71:0b:67:cc:44:ea:d0:b1:59:30:6b:
64:7f:e0:d4:ef:0e:fa:f3:b3:1c:bf:9d:6d:0f:47:
75:e8:a7:f1:04:b8:54:87:02:76:eb:23:09:6d:db:
38:19:87:d1:58:a5:c1:75:11:0c:1e:a2:b0:8a:f5:
30:12:1f:bf:06:86:04:87:62:c8:33:8e:5a:e9:66:
63:e1:db:9b:8d:9b:a2:c8:7d:c0:ee:0e:e3:b6:d7:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:97:D8:11:4A:0C:48:66:00:D9:99:F3:A1:BE:7A:61:0A:6D:39
X509v3 Authority Key Identifier:
keyid:C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/c3GX2BFKDEhmANmZ86G-emEKbTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9f:b0:d0:1b:05:03:48:17:55:0c:bd:f3:04:87:18:3a:af:
d4:21:ce:cd:c3:83:f2:98:1c:34:9d:aa:2d:fe:d0:47:ac:57:
d3:7b:a7:89:71:7c:aa:30:e0:de:59:d9:5e:77:fc:e1:4d:97:
53:ed:74:c1:29:9f:d3:4c:5e:5b:9f:55:33:ce:3a:d5:dc:2d:
d8:89:02:ab:38:83:7a:15:29:51:3d:c1:c5:d7:dd:58:9d:d6:
32:fd:42:97:2c:9b:f4:77:3a:23:6e:d9:71:d9:8c:95:37:0e:
e3:b4:67:fc:25:cf:d3:8c:3b:bf:57:6e:bd:8c:44:73:aa:06:
e6:18:c2:a5:b6:6d:e6:05:c5:2c:6e:1e:3c:77:3c:35:96:74:
10:c9:b7:a4:f9:e0:f9:14:df:12:9e:3b:2e:88:75:35:ad:03:
a0:9e:a3:9f:86:42:71:eb:a9:a9:a3:8a:da:0e:a5:b8:53:83:
46:27:fa:fb:17:d1:82:60:72:f4:de:4d:96:7c:b9:e8:33:1f:
81:27:71:65:ea:ed:c3:e9:1f:c4:a7:90:48:d9:a8:a1:ba:cd:
b7:5e:8b:ba:85:9c:05:1e:dc:a7:01:d0:3b:77:be:2c:98:20:
ee:d4:55:c7:ad:e9:88:a4:9e:c2:cd:11:3b:51:99:c6:18:59:
2e:f1:1a:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIYkFhEq32WrKenwBqeYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOWNjOWQzYzQ5NmY4YTkyMjA0ZDQwYTY2NWVkZjUzODE5
MGQ1MzkwHhcNMjUwMTAyMDM0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzcxOTdkODExNGEwYzQ4NjYwMGQ5OTlmM2ExYmU3YTYxMGE2ZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dCQcAp+Qn/EQ8J/rpX1k3WZd0zQ
x4psR05gSiEyey3G7OivEfrHisd53nczJNF1paylxcd6NzRZqhCxXYaFo0WQq9rX
m8sfxQQmj5CiMWAofrLTOqciyK2l9U0QI95r9DznZS/Dg6XQarTurtKCxXmF3Zqc
qyr1qYKm415KmW4ro1YiNDnIczo9okenA0NHghLpS6WqAB1H71vYIUVZpKba4qup
bmpccQtnzETq0LFZMGtkf+DU7w7687Mcv51tD0d16KfxBLhUhwJ26yMJbds4GYfR
WKXBdREMHqKwivUwEh+/BoYEh2LIM45a6WZj4dubjZuiyH3A7g7jttdSmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHNxl9gRSgxIZgDZmfOhvnphCm05MB8GA1UdIwQY
MBaAFMKcydPElvipIgTUCmZe31OBkNU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3B6SjA4U1ctS2tpQk5RS1psN2ZVNEdRMVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZjVhNGQtZjVmMi00MTczLWI2OTAt
MDZiOWNhMmY2MGM3LzEvYzNHWDJCRktERWhtQU5tWjg2Ry1lbUVLYlRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xZjVhNGQtZjVmMi00MTczLWI2OTAtMDZiOWNhMmY2MGM3
LzEvd3B6SjA4U1ctS2tpQk5RS1psN2ZVNEdRMVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwV21MA0G
CSqGSIb3DQEBCwUAA4IBAQB/n7DQGwUDSBdVDL3zBIcYOq/UIc7Nw4PymBw0naot
/tBHrFfTe6eJcXyqMODeWdled/zhTZdT7XTBKZ/TTF5bn1UzzjrV3C3YiQKrOIN6
FSlRPcHF191YndYy/UKXLJv0dzojbtlx2YyVNw7jtGf8Jc/TjDu/V269jERzqgbm
GMKltm3mBcUsbh48dzw1lnQQybek+eD5FN8SnjsuiHU1rQOgnqOfhkJx66mpo4ra
DqW4U4NGJ/r7F9GCYHL03k2WfLnoMx+BJ3Fl6u3D6R/Ep5BI2aihus23Xou6hZwF
HtynAdA7d74smCDu1FXHremIpJ7CzRE7UZnGGFku8RpL
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:16 2025 by rpki-client