Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/WKmjvN-mPD8di-iGYQiqfhge8Vw.roa
File: WKmjvN-mPD8di-iGYQiqfhge8Vw.roa (raw, json)
Hash identifier: zI48l97EZdJlaUlzK3DPSPK2EIfu4G5TJJaSKzy/CB8=
Subject key identifier: 58:A9:A3:BC:DF:A6:3C:3F:1D:8B:E8:86:61:08:AA:7E:18:1E:F1:5C
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 018CC9BB020E580C2BE3E73F0A2C771899A8
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/WKmjvN-mPD8di-iGYQiqfhge8Vw.roa
Signing time: Tue 02 Jan 2024 10:32:05 +0000
ROA not before: Tue 02 Jan 2024 10:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 192.109.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:02:0e:58:0c:2b:e3:e7:3f:0a:2c:77:18:99:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 2 10:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58a9a3bcdfa63c3f1d8be8866108aa7e181ef15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:5d:f0:ba:41:28:85:00:f1:96:c1:cc:46:
2a:4b:33:0a:c3:3d:02:cb:70:ae:82:34:87:e6:29:
f5:c0:eb:33:65:60:9d:26:78:21:08:3d:a0:b2:91:
3b:0c:9c:36:1e:ed:e7:b9:66:c3:a8:bd:4a:4c:2a:
0a:94:e4:91:d1:23:cd:65:33:d0:ea:b4:bf:42:b8:
23:12:34:cc:00:87:df:33:66:b6:5d:da:0b:30:61:
ab:f0:e4:d2:74:55:09:15:6e:6b:da:81:b4:2c:0c:
be:f2:fb:9e:6c:f6:ad:97:be:2f:6f:e7:5a:ef:59:
63:32:d6:92:53:7c:3d:b2:55:d7:25:b4:5a:21:f7:
70:72:7e:35:d2:9e:57:a6:ae:22:05:20:40:d4:ea:
b7:cf:71:e8:cc:51:ca:bb:a8:0a:ea:9e:8b:71:d7:
99:b1:be:af:37:6d:b5:d3:e4:2d:d4:3b:c1:d1:5c:
68:b8:95:79:ea:76:be:53:a7:c1:3e:a5:ae:49:25:
57:dc:43:ac:57:f5:de:47:e6:a1:5a:5f:9b:8e:eb:
a2:9d:99:f8:0a:7b:f0:4a:8b:0d:fa:b8:39:b3:ca:
2b:cc:9d:2c:6e:85:b3:65:eb:31:28:16:dc:9a:a7:
21:87:20:06:c2:5e:de:4e:cc:59:26:e2:a9:b0:41:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:A3:BC:DF:A6:3C:3F:1D:8B:E8:86:61:08:AA:7E:18:1E:F1:5C
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/WKmjvN-mPD8di-iGYQiqfhge8Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:4b:07:cc:3f:dc:2a:5e:8f:51:99:62:18:6e:fc:07:43:5b:
7d:63:79:6b:9e:e3:9f:8e:ac:84:fa:d8:47:d3:8e:7b:59:ed:
9e:1e:5e:68:f5:56:6c:45:6f:b5:77:f4:0f:25:ad:47:e2:d6:
2d:8e:e7:a1:0a:33:d0:8f:d7:40:45:1b:6b:ce:5c:81:3b:50:
c0:f3:42:93:d5:5a:dd:87:1e:35:5e:45:e7:8f:97:0f:00:de:
13:c1:e9:6d:34:4b:6f:d3:d9:34:1b:9e:06:c6:81:fc:82:47:
2e:c3:74:c9:8d:20:fd:d3:66:1d:b8:71:e5:03:32:a2:44:7d:
b5:05:36:65:7e:23:14:48:a5:cd:d1:99:5a:05:8c:e3:8a:21:
24:3e:a3:9a:a5:e7:6d:9b:e6:e2:ea:d1:54:65:22:85:a5:ab:
73:ab:49:0a:c3:48:1e:61:de:20:0d:04:52:e4:87:ce:e4:a2:
ae:eb:5c:a3:be:88:9b:b1:fe:76:e6:4e:55:b8:73:c0:c6:f1:
95:1a:65:6f:1f:0f:48:93:63:c6:f4:b8:70:13:f7:05:52:b1:
18:18:96:b4:7f:4e:25:05:f5:98:de:f9:a3:0d:4f:55:58:e5:
5f:50:ac:04:f2:5d:89:c2:f7:2f:ae:cd:a6:cc:8d:c0:bb:2e:
ef:8a:4a:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJuwIOWAwr4+c/Cix3GJmoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjVhMTBlNGZkMjY1NWFkYmJiNDBlZGUxOGIyNjE1YWM1
NThlYTkwHhcNMjQwMTAyMTAzMjA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGE5YTNiY2RmYTYzYzNmMWQ4YmU4ODY2MTA4YWE3ZTE4MWVmMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5Zd8LpBKIUA8ZbBzEYqSzMKwz0C
y3CugjSH5in1wOszZWCdJnghCD2gspE7DJw2Hu3nuWbDqL1KTCoKlOSR0SPNZTPQ
6rS/QrgjEjTMAIffM2a2XdoLMGGr8OTSdFUJFW5r2oG0LAy+8vuebPatl74vb+da
71ljMtaSU3w9slXXJbRaIfdwcn410p5Xpq4iBSBA1Oq3z3HozFHKu6gK6p6LcdeZ
sb6vN2210+Qt1DvB0VxouJV56na+U6fBPqWuSSVX3EOsV/XeR+ahWl+bjuuinZn4
CnvwSosN+rg5s8orzJ0sboWzZesxKBbcmqchhyAGwl7eTsxZJuKpsEGAwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFipo7zfpjw/HYvohmEIqn4YHvFcMB8GA1UdIwQY
MBaAFEH1oQ5P0mVa27tA7eGLJhWsVY6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUt
ODc5MDIwNmYwZDc0LzEvV0ttanZOLW1QRDhkaS1pR1lRaXFmaGdlOFZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUtODc5MDIwNmYwZDc0
LzEvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG3JMA0G
CSqGSIb3DQEBCwUAA4IBAQCjSwfMP9wqXo9RmWIYbvwHQ1t9Y3lrnuOfjqyE+thH
0457We2eHl5o9VZsRW+1d/QPJa1H4tYtjuehCjPQj9dARRtrzlyBO1DA80KT1Vrd
hx41XkXnj5cPAN4TweltNEtv09k0G54GxoH8gkcuw3TJjSD902YduHHlAzKiRH21
BTZlfiMUSKXN0ZlaBYzjiiEkPqOapedtm+bi6tFUZSKFpatzq0kKw0geYd4gDQRS
5IfO5KKu61yjvoibsf525k5VuHPAxvGVGmVvHw9Ik2PG9LhwE/cFUrEYGJa0f04l
BfWY3vmjDU9VWOVfUKwE8l2Jwvcvrs2mzI3Auy7vikoi
-----END CERTIFICATE-----
Generated at Mon May 6 10:50:34 2024 by rpki-client on console-fra.rpki-client.org