Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/wCYSBxlEFn9C3bKzEBin_RqzoTU.roa
File: wCYSBxlEFn9C3bKzEBin_RqzoTU.roa (raw, json)
Hash identifier: HuM1kg7JZIqnFeWlmolggLVBCkZTp9UadWTeRelOxb8=
Subject key identifier: C0:26:12:07:19:44:16:7F:42:DD:B2:B3:10:18:A7:FD:1A:B3:A1:35
Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Certificate serial: 0194228DA7D51FD51267199800EC69E9D7B3
Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/wCYSBxlEFn9C3bKzEBin_RqzoTU.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198307
IP address blocks: 91.226.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a7:d5:1f:d5:12:67:19:98:00:ec:69:e9:d7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c02612071944167f42ddb2b31018a7fd1ab3a135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:33:81:1f:47:3f:0b:20:fb:b7:cc:39:c9:
0b:0c:f5:18:c7:e9:f5:56:6d:51:d8:41:de:43:5b:
bc:fa:4b:35:ca:bf:22:eb:0e:37:e6:fa:33:d8:8f:
1e:a8:24:40:3e:67:a8:8f:0a:43:73:80:d0:2b:c2:
7f:b9:3b:cc:ca:93:03:2d:7f:14:62:26:f2:81:5d:
27:90:ad:51:a1:65:f9:46:72:8b:50:1c:c9:56:20:
4c:d7:fc:07:32:4c:86:dd:7b:c8:76:18:a1:9f:2b:
1f:55:40:80:0b:c8:35:c7:47:f9:38:6b:01:71:d2:
9e:91:a3:61:0b:e5:a4:a7:4a:3f:9d:f2:18:99:46:
60:e3:9c:a9:e2:3a:55:30:6d:aa:53:6a:2e:23:51:
27:2f:a2:fe:e7:4a:e0:2c:8b:67:2b:fc:7b:cc:d5:
10:0b:25:4d:ae:b7:c2:44:62:51:97:80:0c:7e:2d:
86:f5:52:44:7a:e2:55:0f:d0:59:4c:e7:42:12:93:
ba:8d:09:44:ae:ed:23:2d:54:b0:15:7b:7d:28:a0:
e7:60:e8:57:d3:22:cc:91:a4:74:90:74:59:54:bf:
f3:2b:44:49:c8:5c:63:ea:d4:09:94:a5:ef:55:61:
59:37:89:ab:94:fe:e0:91:ca:e8:d2:1b:d1:bf:fd:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:12:07:19:44:16:7F:42:DD:B2:B3:10:18:A7:FD:1A:B3:A1:35
X509v3 Authority Key Identifier:
keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/wCYSBxlEFn9C3bKzEBin_RqzoTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.77.0/24
Signature Algorithm: sha256WithRSAEncryption
11:71:5f:82:41:04:27:9f:f9:15:86:83:57:5d:cb:d1:7c:f1:
9c:27:c7:a4:d2:2e:93:52:b4:18:dd:c9:bf:36:0a:55:d7:be:
5a:6a:36:2b:cb:e0:e6:ba:02:8a:e7:33:74:60:4f:9d:d0:3d:
95:85:11:c1:03:17:39:ca:41:12:72:1b:25:6c:11:8b:be:8b:
17:2b:68:23:83:af:3d:dc:15:38:e0:b9:82:6f:9b:da:f7:65:
8e:d2:d5:09:e4:6a:57:2b:d7:ee:39:10:ea:32:a5:b9:d2:32:
6c:2f:68:93:bc:64:5b:04:f9:35:6e:76:9a:b5:05:ab:88:03:
c5:5f:a9:76:06:17:9e:86:75:f4:92:1d:c4:5f:08:cd:ea:1c:
80:8c:c1:77:e6:a3:da:28:37:d6:0f:19:f9:19:45:52:14:aa:
6f:68:6c:b3:09:06:2a:ff:d3:72:4d:bf:f8:3b:cc:03:66:04:
1c:a4:21:53:fd:77:3e:3d:b6:78:a6:1c:1d:f7:ef:e6:2f:d1:
3e:0b:08:0f:91:a0:d7:61:5a:76:13:f8:c4:a4:49:50:58:96:
cb:26:dc:c3:3a:ce:ac:0e:6d:48:37:80:01:87:a2:33:dc:a7:
13:60:80:a6:70:9a:e1:09:67:c2:c5:87:93:55:7b:4d:b3:c6:
c5:9f:8d:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijafVH9USZxmYAOxp6dezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2FhZDExYzVkODk4MWQ5ODNjMzAxZTg2YTFhY2YyZDgx
MWFhYzEwHhcNMjUwMTAxMTU0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDI2MTIwNzE5NDQxNjdmNDJkZGIyYjMxMDE4YTdmZDFhYjNhMTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO8zgR9HPwsg+7fMOckLDPUYx+n1
Vm1R2EHeQ1u8+ks1yr8i6w435voz2I8eqCRAPmeojwpDc4DQK8J/uTvMypMDLX8U
YibygV0nkK1RoWX5RnKLUBzJViBM1/wHMkyG3XvIdhihnysfVUCAC8g1x0f5OGsB
cdKekaNhC+Wkp0o/nfIYmUZg45yp4jpVMG2qU2ouI1EnL6L+50rgLItnK/x7zNUQ
CyVNrrfCRGJRl4AMfi2G9VJEeuJVD9BZTOdCEpO6jQlEru0jLVSwFXt9KKDnYOhX
0yLMkaR0kHRZVL/zK0RJyFxj6tQJlKXvVWFZN4mrlP7gkcro0hvRv/0cPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMAmEgcZRBZ/Qt2ysxAYp/0as6E1MB8GA1UdIwQY
MBaAFBLKrRHF2JgdmDwwHoahrPLYEarBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82YzNmYTEtNjNiNS00YmRjLTk0YmUt
ZWI3Yjk1OTBlMzAzLzEvd0NZU0J4bEVGbjlDM2JLekVCaW5fUnF6b1RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82YzNmYTEtNjNiNS00YmRjLTk0YmUtZWI3Yjk1OTBlMzAz
LzEvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+JNMA0G
CSqGSIb3DQEBCwUAA4IBAQARcV+CQQQnn/kVhoNXXcvRfPGcJ8ek0i6TUrQY3cm/
NgpV175aajYry+DmugKK5zN0YE+d0D2VhRHBAxc5ykESchslbBGLvosXK2gjg689
3BU44LmCb5va92WO0tUJ5GpXK9fuORDqMqW50jJsL2iTvGRbBPk1bnaatQWriAPF
X6l2BheehnX0kh3EXwjN6hyAjMF35qPaKDfWDxn5GUVSFKpvaGyzCQYq/9NyTb/4
O8wDZgQcpCFT/Xc+PbZ4phwd9+/mL9E+CwgPkaDXYVp2E/jEpElQWJbLJtzDOs6s
Dm1IN4ABh6Iz3KcTYICmcJrhCWfCxYeTVXtNs8bFn40k
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:39:44 2025 by rpki-client