Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/WXi3e70vzKXr57p5xH5XbKw9YoA.roa
File: WXi3e70vzKXr57p5xH5XbKw9YoA.roa (raw, json)
Hash identifier: ieqlpogMXxFKWAC/IIkMhMja07W8cjuC8K+PLJo1p+Q=
Subject key identifier: 59:78:B7:7B:BD:2F:CC:A5:EB:E7:BA:79:C4:7E:57:6C:AC:3D:62:80
Certificate issuer: /CN=bc3a252a8fcca0361da234a4f3ddb957789d0e55
Certificate serial: 019425FDCDE8E138C116C0282EC6384DB286
Authority key identifier: BC:3A:25:2A:8F:CC:A0:36:1D:A2:34:A4:F3:DD:B9:57:78:9D:0E:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDolKo_MoDYdojSk8925V3idDlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/WXi3e70vzKXr57p5xH5XbKw9YoA.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 212.96.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/vDolKo_MoDYdojSk8925V3idDlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/vDolKo_MoDYdojSk8925V3idDlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDolKo_MoDYdojSk8925V3idDlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cd:e8:e1:38:c1:16:c0:28:2e:c6:38:4d:b2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3a252a8fcca0361da234a4f3ddb957789d0e55
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5978b77bbd2fcca5ebe7ba79c47e576cac3d6280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:c5:d7:17:be:d1:b3:f1:88:9d:b7:22:46:
5b:6b:62:52:86:c3:2e:1f:52:fd:70:63:40:69:56:
14:05:da:f2:6d:c9:7a:b3:66:ec:51:50:02:ef:15:
9a:fa:7f:b8:94:87:a7:82:20:9d:1c:d7:9e:f6:76:
7c:6a:98:12:f9:56:0c:ff:4f:1f:f7:a5:f6:56:a1:
bd:6a:3c:83:ad:12:ef:6e:ab:0a:fa:57:4d:0c:4a:
88:24:ee:f5:30:a2:1d:a8:ca:c0:a2:d3:b4:b3:81:
63:44:9e:4b:08:63:c9:3e:91:94:20:2d:dd:5b:b3:
d6:2c:e0:52:9d:ec:4d:e4:c4:0f:69:75:84:f2:59:
de:05:8c:02:b5:c7:91:44:10:e7:89:d2:9c:e4:8c:
dc:ef:ae:78:06:89:41:a9:62:b9:28:dc:5c:0d:19:
2f:86:93:ee:93:78:67:aa:08:69:34:2d:ce:4d:15:
f1:ce:ba:ef:2a:5a:90:c1:df:13:b6:20:d2:1f:59:
02:8b:b6:6e:92:78:9b:6e:12:ab:bc:8a:7d:4b:06:
95:b9:b0:8f:0b:e7:ae:1a:47:12:ff:03:0f:a4:5f:
cf:a4:f4:a5:ba:4e:59:19:dc:cd:87:88:b6:b6:be:
f7:4f:bb:ae:86:16:43:0c:ae:d5:f2:11:b0:53:b5:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:78:B7:7B:BD:2F:CC:A5:EB:E7:BA:79:C4:7E:57:6C:AC:3D:62:80
X509v3 Authority Key Identifier:
keyid:BC:3A:25:2A:8F:CC:A0:36:1D:A2:34:A4:F3:DD:B9:57:78:9D:0E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDolKo_MoDYdojSk8925V3idDlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/WXi3e70vzKXr57p5xH5XbKw9YoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/vDolKo_MoDYdojSk8925V3idDlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.96.150.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:d0:de:00:8b:b3:0a:9e:fe:35:e0:63:48:0d:c1:8f:35:c3:
3f:ce:95:35:19:1e:27:52:7f:c9:1f:45:af:f6:18:ba:b1:70:
9f:09:db:ce:95:99:bb:ad:96:61:9d:fb:6a:39:5c:52:af:d7:
d5:15:28:d5:fc:64:0c:b1:83:99:0e:2e:ea:b2:ff:08:df:49:
e2:a6:40:df:b3:d2:22:f0:30:e6:2c:f3:cb:c0:33:8f:9a:d2:
08:a5:be:ec:86:1b:2d:8d:ed:0c:3b:d6:97:ad:c5:18:47:c3:
8e:8e:d4:3f:73:a5:a4:45:5f:df:a5:e4:8f:f0:af:4e:1a:81:
d9:b1:a1:57:f3:61:23:fb:0e:85:87:42:0e:78:1e:e1:b3:f1:
41:4e:a9:d8:d7:a7:a5:b9:d8:74:7d:08:21:c7:ff:9a:ac:d4:
e0:eb:08:2e:1a:9f:25:7b:3f:b3:a0:74:52:80:40:bc:5a:00:
9a:73:bb:17:d8:46:f9:ce:ca:49:6b:45:4f:4c:0d:ca:86:cd:
a4:57:5f:c8:61:0c:4e:e2:e3:49:a3:f9:80:e3:19:53:67:88:
51:2d:9e:8c:7e:34:ca:95:90:38:10:83:d3:4a:50:d4:4c:4b:
9f:d1:e0:f4:25:0d:57:e5:ac:a0:4e:f6:40:4f:de:1c:7b:8d:
2d:8d:f7:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/c3o4TjBFsAoLsY4TbKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjM2EyNTJhOGZjY2EwMzYxZGEyMzRhNGYzZGRiOTU3Nzg5
ZDBlNTUwHhcNMjUwMTAyMDc0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTc4Yjc3YmJkMmZjY2E1ZWJlN2JhNzljNDdlNTc2Y2FjM2Q2MjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVrF1xe+0bPxiJ23IkZba2JShsMu
H1L9cGNAaVYUBdrybcl6s2bsUVAC7xWa+n+4lIengiCdHNee9nZ8apgS+VYM/08f
96X2VqG9ajyDrRLvbqsK+ldNDEqIJO71MKIdqMrAotO0s4FjRJ5LCGPJPpGUIC3d
W7PWLOBSnexN5MQPaXWE8lneBYwCtceRRBDnidKc5Izc7654BolBqWK5KNxcDRkv
hpPuk3hnqghpNC3OTRXxzrrvKlqQwd8TtiDSH1kCi7ZuknibbhKrvIp9SwaVubCP
C+euGkcS/wMPpF/PpPSluk5ZGdzNh4i2tr73T7uuhhZDDK7V8hGwU7UThQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFl4t3u9L8yl6+e6ecR+V2ysPWKAMB8GA1UdIwQY
MBaAFLw6JSqPzKA2HaI0pPPduVd4nQ5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRvbEtvX01vRFlkb2pTazg5MjVWM2lkRGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zMjRmMDUtOWEwNy00NGNiLTg3MDkt
MGExOTUxOGY3MzU4LzEvV1hpM2U3MHZ6S1hyNTdwNXhINVhiS3c5WW9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zMjRmMDUtOWEwNy00NGNiLTg3MDktMGExOTUxOGY3MzU4
LzEvdkRvbEtvX01vRFlkb2pTazg5MjVWM2lkRGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1GCWMA0G
CSqGSIb3DQEBCwUAA4IBAQDR0N4Ai7MKnv414GNIDcGPNcM/zpU1GR4nUn/JH0Wv
9hi6sXCfCdvOlZm7rZZhnftqOVxSr9fVFSjV/GQMsYOZDi7qsv8I30nipkDfs9Ii
8DDmLPPLwDOPmtIIpb7shhstje0MO9aXrcUYR8OOjtQ/c6WkRV/fpeSP8K9OGoHZ
saFX82Ej+w6Fh0IOeB7hs/FBTqnY16eludh0fQghx/+arNTg6wguGp8lez+zoHRS
gEC8WgCac7sX2Eb5zspJa0VPTA3Khs2kV1/IYQxO4uNJo/mA4xlTZ4hRLZ6MfjTK
lZA4EIPTSlDUTEuf0eD0JQ1X5aygTvZAT94ce40tjff2
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:50 2025 by rpki-client