Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/WlzyMJALtky3UfCL3LeynZJn274.roa
File: WlzyMJALtky3UfCL3LeynZJn274.roa (raw, json)
Hash identifier: cFugyqePAm3Z5xloXfQbWqCEPWkm4mnJFuRR8A9Tn3Q=
Subject key identifier: 5A:5C:F2:30:90:0B:B6:4C:B7:51:F0:8B:DC:B7:B2:9D:92:67:DB:BE
Certificate issuer: /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial: 0194258ECF38F2B7BD4F1D9DDDD736C2C1F4
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/WlzyMJALtky3UfCL3LeynZJn274.roa
Signing time: Thu 02 Jan 2025 05:48:23 +0000
ROA not before: Thu 02 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38719
IP address blocks: 176.74.24.0/21 maxlen: 24
185.184.152.0/22 maxlen: 24
2a00:fd80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:cf:38:f2:b7:bd:4f:1d:9d:dd:d7:36:c2:c1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Validity
Not Before: Jan 2 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a5cf230900bb64cb751f08bdcb7b29d9267dbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:94:7b:fb:ae:f3:eb:1a:66:59:67:9f:6f:
8b:05:0a:35:fd:30:fa:bc:22:64:9e:63:41:64:98:
cd:db:fa:7f:8a:e8:6d:dc:f9:97:01:67:17:71:f6:
76:f5:62:b7:23:b0:32:a1:2a:de:c6:f0:79:d0:c8:
04:7b:e1:da:33:64:06:6a:b9:21:be:93:d2:c1:1b:
d1:70:e6:2d:9e:c8:b1:70:09:01:0e:67:9f:f3:76:
00:04:76:e3:74:a4:27:84:2c:a0:94:75:fe:2a:47:
32:48:a0:17:95:50:c6:6a:bb:5f:51:11:37:04:a7:
a8:e9:60:c6:33:6e:0c:65:e2:5a:be:46:12:5a:89:
86:f9:27:3f:97:f3:2e:ff:8e:5a:0a:7b:af:c5:6f:
a8:5a:e6:11:67:fa:7b:cc:8f:a1:6d:41:5c:06:60:
b8:d1:4a:cf:87:2a:42:28:2b:11:01:eb:b3:a9:8b:
d8:33:01:dd:08:47:e0:82:fa:a1:b1:54:fc:8b:1e:
da:67:0f:26:cd:e8:4c:aa:bb:ab:46:aa:9c:69:d3:
b9:f9:24:5e:c8:62:b1:9b:e6:16:1d:b3:fa:47:84:
4b:0d:13:5c:d0:b1:8a:1c:13:82:7f:d0:56:4d:83:
fe:c2:cb:a3:a8:a2:fc:8a:a6:c5:2e:03:b7:10:fd:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5C:F2:30:90:0B:B6:4C:B7:51:F0:8B:DC:B7:B2:9D:92:67:DB:BE
X509v3 Authority Key Identifier:
keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/WlzyMJALtky3UfCL3LeynZJn274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.24.0/21
185.184.152.0/22
IPv6:
2a00:fd80::/32
Signature Algorithm: sha256WithRSAEncryption
a0:77:e7:55:6c:2e:54:45:c3:45:5b:9b:9a:1a:a3:8e:23:4b:
67:75:f2:f4:f0:ac:1d:a7:19:e3:c1:18:64:44:bf:f3:1a:77:
9a:85:a6:52:36:43:94:cc:15:45:a7:b7:d3:f1:41:9c:c3:b2:
94:33:1d:0f:25:b6:e0:fe:96:cc:21:60:10:d2:0c:21:26:63:
2a:c7:cf:2a:e2:9b:ae:9d:c1:45:be:57:66:e9:67:32:b7:78:
a2:b3:f5:f6:62:90:04:75:f5:4a:07:9c:57:fb:2f:bc:fa:58:
7c:82:cf:4c:3f:96:ca:b9:3f:e9:14:1b:dc:f3:71:13:a1:b1:
1a:36:eb:4d:2d:c5:34:b0:1a:b1:70:3a:bb:33:1a:50:b0:f7:
c7:d6:21:fc:28:ca:c3:cb:39:71:73:75:4e:09:a3:f3:fc:98:
57:7a:3c:81:38:db:f0:d6:06:33:5c:ee:5a:26:c7:a0:ba:54:
04:ad:32:97:5f:e0:cf:f9:97:37:5c:4b:f7:62:b5:cd:6b:bc:
4d:c4:aa:37:8c:f3:e3:92:a6:68:b0:36:70:1b:98:3b:aa:a3:
fc:61:86:35:f8:74:cc:75:89:fc:0d:0c:53:82:5d:a0:a0:ff:
99:a3:47:49:19:c4:bd:8f:50:3f:a3:5e:02:23:92:15:d5:8d:
c9:f4:8a:13
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQljs848re9Tx2d3dc2wsH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzdjY2Q3YTk0NDE1ZGZjNjhjY2NhODc0ZTk0YzJlOGMy
MjIwMmQwHhcNMjUwMTAyMDU0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTVjZjIzMDkwMGJiNjRjYjc1MWYwOGJkY2I3YjI5ZDkyNjdkYmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOGUe/uu8+saZllnn2+LBQo1/TD6
vCJknmNBZJjN2/p/iuht3PmXAWcXcfZ29WK3I7AyoSrexvB50MgEe+HaM2QGarkh
vpPSwRvRcOYtnsixcAkBDmef83YABHbjdKQnhCyglHX+KkcySKAXlVDGartfURE3
BKeo6WDGM24MZeJavkYSWomG+Sc/l/Mu/45aCnuvxW+oWuYRZ/p7zI+hbUFcBmC4
0UrPhypCKCsRAeuzqYvYMwHdCEfggvqhsVT8ix7aZw8mzehMqrurRqqcadO5+SRe
yGKxm+YWHbP6R4RLDRNc0LGKHBOCf9BWTYP+wsujqKL8iqbFLgO3EP3/xwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFpc8jCQC7ZMt1Hwi9y3sp2SZ9u+MB8GA1UdIwQY
MBaAFE13zNepRBXfxozMqHTpTC6MIiAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjIt
MTBlNTdmNTZhMTdhLzEvV2x6eU1KQUx0a3kzVWZDTDNMZXluWkpuMjc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjItMTBlNTdmNTZhMTdh
LzEvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsEoYAwQC
ubiYMA0EAgACMAcDBQAqAP2AMA0GCSqGSIb3DQEBCwUAA4IBAQCgd+dVbC5URcNF
W5uaGqOOI0tndfL08KwdpxnjwRhkRL/zGneahaZSNkOUzBVFp7fT8UGcw7KUMx0P
Jbbg/pbMIWAQ0gwhJmMqx88q4puuncFFvldm6Wcyt3iis/X2YpAEdfVKB5xX+y+8
+lh8gs9MP5bKuT/pFBvc83ETobEaNutNLcU0sBqxcDq7MxpQsPfH1iH8KMrDyzlx
c3VOCaPz/JhXejyBONvw1gYzXO5aJsegulQErTKXX+DP+Zc3XEv3YrXNa7xNxKo3
jPPjkqZosDZwG5g7qqP8YYY1+HTMdYn8DQxTgl2goP+Zo0dJGcS9j1A/o14CI5IV
1Y3J9IoT
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:38:06 2025 by rpki-client