Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/dyUMR2H2DcBGgzVGNTrxavt5Oxw.roa
File: dyUMR2H2DcBGgzVGNTrxavt5Oxw.roa (raw, json)
Hash identifier: FFqBchcB73I3t37AaJsxQus46kLrppS0ZS76Nj++3PM=
Subject key identifier: 77:25:0C:47:61:F6:0D:C0:46:83:35:46:35:3A:F1:6A:FB:79:3B:1C
Certificate issuer: /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial: 0194F9CA74F65578BD28A6423FEC81A77F2B
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/dyUMR2H2DcBGgzVGNTrxavt5Oxw.roa
Signing time: Wed 12 Feb 2025 10:53:02 +0000
ROA not before: Wed 12 Feb 2025 10:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59787
IP address blocks: 62.233.41.0/24 maxlen: 24
185.31.156.0/22 maxlen: 22
185.31.156.0/24 maxlen: 24
185.31.157.0/24 maxlen: 24
185.31.158.0/24 maxlen: 24
185.31.159.0/24 maxlen: 24
185.90.56.0/22 maxlen: 22
185.90.56.0/24 maxlen: 24
185.90.57.0/24 maxlen: 24
185.90.58.0/24 maxlen: 24
185.90.59.0/24 maxlen: 24
185.204.111.0/24 maxlen: 24
185.248.35.0/24 maxlen: 24
194.39.124.0/22 maxlen: 22
194.39.124.0/24 maxlen: 24
194.39.125.0/24 maxlen: 24
194.39.126.0/24 maxlen: 24
194.39.127.0/24 maxlen: 24
2a00:bc20::/32 maxlen: 32
2a05:df40::/29 maxlen: 29
2a0c:c2c0::/29 maxlen: 29
2a10:7b40::/29 maxlen: 29
2a10:a4c0::/29 maxlen: 29
2a11:9ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:ca:74:f6:55:78:bd:28:a6:42:3f:ec:81:a7:7f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Validity
Not Before: Feb 12 10:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77250c4761f60dc046833546353af16afb793b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:20:be:f4:78:e7:bb:8b:11:ac:b5:ab:d7:
ed:10:36:da:fb:e1:09:d8:66:66:74:9d:ae:bb:b2:
52:5e:9a:7a:ce:9d:4f:2c:e6:51:78:39:06:51:21:
fc:41:4a:09:a8:c0:d1:c6:79:6a:7d:e6:d4:ae:22:
37:c9:dd:db:d5:d7:4d:32:7d:c6:9c:6f:1c:03:99:
00:8c:98:a8:05:3d:d5:49:7b:a2:c3:98:f9:85:e9:
c3:80:38:37:a8:16:08:16:a2:46:9a:1c:0b:e4:69:
dd:5e:eb:6e:05:fe:de:8f:d2:25:f4:59:65:34:0f:
e7:e0:96:5a:3c:d2:20:ed:da:62:4e:e8:9d:dc:2e:
a3:ef:25:a9:91:a6:12:20:72:89:1f:58:31:07:f7:
bf:91:f7:6b:69:a5:bd:38:b3:62:15:e5:c7:99:7a:
9f:05:82:21:ef:4a:e6:f7:a9:df:aa:54:f1:ca:fe:
fb:ce:30:fb:92:f3:bf:cd:4b:b8:07:10:d8:3c:41:
0a:00:6a:18:0a:ba:3b:dc:c9:39:e6:9e:c8:5e:98:
ed:f9:3a:43:4a:cb:06:43:76:ad:13:fa:8e:74:94:
cf:56:a3:ba:c5:d5:31:ae:39:18:64:30:1a:15:1c:
5f:94:e1:9e:0d:26:23:94:95:fe:88:0b:f6:0f:50:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:25:0C:47:61:F6:0D:C0:46:83:35:46:35:3A:F1:6A:FB:79:3B:1C
X509v3 Authority Key Identifier:
keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/dyUMR2H2DcBGgzVGNTrxavt5Oxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.41.0/24
185.31.156.0/22
185.90.56.0/22
185.204.111.0/24
185.248.35.0/24
194.39.124.0/22
IPv6:
2a00:bc20::/32
2a05:df40::/29
2a0c:c2c0::/29
2a10:7b40::/29
2a10:a4c0::/29
2a11:9ec0::/29
Signature Algorithm: sha256WithRSAEncryption
29:f8:f1:1b:ad:dc:fa:34:02:48:93:56:f2:92:7a:ee:53:71:
e6:8a:37:94:71:a8:43:a7:2f:b3:18:6a:d9:6b:48:7a:69:66:
a2:78:28:47:2f:a7:73:03:ed:f2:32:10:50:ea:9f:4b:05:03:
de:61:cd:75:6c:f1:32:ae:a6:7b:de:a3:86:f2:2b:41:7c:5c:
ac:24:ae:b7:f1:21:40:84:58:d4:73:31:2c:d6:c1:fe:18:c2:
69:c3:35:02:54:2b:c5:8f:34:b2:5f:b4:a5:7f:43:b8:4d:d2:
57:94:cb:12:78:37:d5:c0:1c:e8:c7:ad:cd:fb:1e:36:ab:d8:
7a:c2:b0:99:9c:a7:98:8e:2b:a8:df:1f:51:40:1b:44:03:1b:
a9:f9:2a:8a:3f:fa:82:c3:71:81:6e:4b:38:90:17:96:9c:57:
8f:df:d1:7f:7c:8b:2f:80:54:c2:7a:db:5e:f4:82:16:b1:a1:
3d:13:87:e2:b5:36:88:76:ce:b8:62:73:3b:91:5c:14:d5:98:
d4:3e:72:92:7b:45:19:7c:42:1d:9d:3b:c4:31:c5:9d:c5:dc:
c1:60:9a:53:e9:4b:f1:91:a8:90:f9:71:76:02:96:6a:30:3d:
f1:24:a7:3d:bc:cc:f8:e9:0f:a1:5f:89:f6:b7:f0:e5:1c:9d:
7b:b7:3e:b2
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZT5ynT2VXi9KKZCP+yBp38rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZTRkNmZhYjc3YWM3NzlmNDliZjZmYzhhYjgxZTIzYWQ0
Njc1NzYwHhcNMjUwMjEyMTA1MzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzI1MGM0NzYxZjYwZGMwNDY4MzM1NDYzNTNhZjE2YWZiNzkzYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5wgvvR457uLEay1q9ftEDba++EJ
2GZmdJ2uu7JSXpp6zp1PLOZReDkGUSH8QUoJqMDRxnlqfebUriI3yd3b1ddNMn3G
nG8cA5kAjJioBT3VSXuiw5j5henDgDg3qBYIFqJGmhwL5GndXutuBf7ej9Il9Fll
NA/n4JZaPNIg7dpiTuid3C6j7yWpkaYSIHKJH1gxB/e/kfdraaW9OLNiFeXHmXqf
BYIh70rm96nfqlTxyv77zjD7kvO/zUu4BxDYPEEKAGoYCro73Mk55p7IXpjt+TpD
SssGQ3atE/qOdJTPVqO6xdUxrjkYZDAaFRxflOGeDSYjlJX+iAv2D1ARSQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFHclDEdh9g3ARoM1RjU68Wr7eTscMB8GA1UdIwQY
MBaAFFnk1vq3esd59Jv2/Iq4HiOtRnV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2VUVy1yZDZ4M24wbV9iOGlyZ2VJNjFHZFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82NzQyMjUtYWM3Ny00N2EwLWFjZDEt
MjkzZmNhMmQ1MWVhLzEvZHlVTVIySDJEY0JHZ3pWR05UcnhhdnQ1T3h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82NzQyMjUtYWM3Ny00N2EwLWFjZDEtMjkzZmNhMmQ1MWVh
LzEvV2VUVy1yZDZ4M24wbV9iOGlyZ2VJNjFHZFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjAqBAIAATAkAwQAPukpAwQC
uR+cAwQCuVo4AwQAucxvAwQAufgjAwQCwid8MDAEAgACMCoDBQAqALwgAwUDKgXf
QAMFAyoMwsADBQMqEHtAAwUDKhCkwAMFAyoRnsAwDQYJKoZIhvcNAQELBQADggEB
ACn48Rut3Po0AkiTVvKSeu5TceaKN5RxqEOnL7MYatlrSHppZqJ4KEcvp3MD7fIy
EFDqn0sFA95hzXVs8TKupnveo4byK0F8XKwkrrfxIUCEWNRzMSzWwf4YwmnDNQJU
K8WPNLJftKV/Q7hN0leUyxJ4N9XAHOjHrc37Hjar2HrCsJmcp5iOK6jfH1FAG0QD
G6n5Koo/+oLDcYFuSziQF5acV4/f0X98iy+AVMJ62170ghaxoT0Th+K1Noh2zrhi
czuRXBTVmNQ+cpJ7RRl8Qh2dO8QxxZ3F3MFgmlPpS/GRqJD5cXYClmowPfEkpz28
zPjpD6Ffifa38OUcnXu3PrI=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:46:42 2025 by rpki-client