Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/W-Swl_8KeYSfwOJ2jC-Drp0FJoI.roa
File: W-Swl_8KeYSfwOJ2jC-Drp0FJoI.roa (raw, json)
Hash identifier: /LAVeVuCQImOpPPb3FVNZO/gfTtSkF44Ck+t3G10yts=
Subject key identifier: 5B:E4:B0:97:FF:0A:79:84:9F:C0:E2:76:8C:2F:83:AE:9D:05:26:82
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F4862FBFD536B447F5BE95DA733DA
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/W-Swl_8KeYSfwOJ2jC-Drp0FJoI.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6220
IP address blocks: 213.198.48.0/24 maxlen: 24
213.198.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:48:62:fb:fd:53:6b:44:7f:5b:e9:5d:a7:33:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5be4b097ff0a79849fc0e2768c2f83ae9d052682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:f7:82:17:12:d5:bc:e4:b0:1c:99:50:b9:
67:21:16:8f:a0:bc:8a:49:68:3a:99:36:23:04:fb:
d5:d8:81:ba:b7:15:65:06:3b:bc:f6:0c:36:69:a0:
ef:5e:62:dc:30:ec:75:02:6d:74:73:3f:04:1c:f4:
f1:78:c1:fe:4d:a2:ed:f7:11:e6:bd:ae:38:ed:41:
47:eb:d3:6b:43:de:ad:11:00:6c:e9:30:0f:c9:0f:
e9:35:5c:6a:fa:e5:87:07:73:71:7c:3f:84:16:e3:
55:b2:5c:5c:c5:db:de:00:45:86:f3:9d:01:e2:19:
61:15:0b:47:b5:f5:6c:76:31:4c:c7:e2:57:a0:02:
bd:63:5c:ac:25:cf:39:b3:b0:cf:a3:48:4d:92:9b:
4c:65:a5:82:eb:0b:9c:8c:a6:38:99:84:99:45:43:
e9:c3:3a:bf:9b:ba:ed:47:cc:89:18:08:3f:64:94:
84:9c:5d:07:bc:bf:d9:88:a0:94:02:db:b0:26:62:
ca:88:f3:ca:fa:be:61:28:e6:31:d3:fd:88:14:1e:
c6:51:d4:31:d2:64:b2:27:5c:73:37:85:98:33:95:
96:13:09:02:75:91:70:87:2e:e0:a6:cc:60:a1:07:
ea:74:a6:0c:19:99:d6:c1:49:27:29:ea:57:5a:4d:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E4:B0:97:FF:0A:79:84:9F:C0:E2:76:8C:2F:83:AE:9D:05:26:82
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/W-Swl_8KeYSfwOJ2jC-Drp0FJoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.48.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:0f:5e:34:09:2e:b5:ca:33:e5:83:c0:6e:3a:0e:df:81:93:
d7:95:5d:c2:2d:a3:65:e2:92:c0:83:d8:45:9f:d3:74:f8:d7:
a6:64:c6:37:36:e2:c5:86:13:6e:c5:ac:7f:5c:20:6a:ef:a1:
b8:9f:05:07:77:10:6d:e7:e1:7b:7f:39:b8:31:c3:3f:6c:b3:
e1:5f:ca:61:ff:93:f9:d8:a3:2b:63:14:0c:e1:dd:b7:4b:c2:
b2:1b:93:a2:d1:76:fe:f7:5b:35:b6:c4:c6:62:af:d6:a1:21:
ce:f7:90:17:f7:02:1d:fd:6e:ad:fb:cc:07:66:17:6e:55:c6:
86:27:3f:54:05:fb:fb:2b:b2:37:8c:6c:9a:ce:57:d2:67:e1:
44:6d:0f:e9:c1:50:f9:e2:2c:0c:f6:e5:6e:cf:54:d5:62:b4:
e3:99:34:1c:94:42:d0:f4:f4:d4:e6:88:27:60:0c:9b:fa:de:
02:e4:56:0e:b3:a5:12:3d:15:ba:7e:de:54:77:2f:ad:1c:92:
98:82:fd:83:e7:bf:26:55:09:46:f1:36:f4:6a:4b:ed:79:3d:
36:0d:83:e8:64:28:80:1c:b1:5d:7a:b1:0d:fc:77:67:12:fd:
e3:bd:f9:3e:8e:54:66:e0:5f:d0:9e:47:9d:0f:ab:10:a0:07:
f3:9a:da:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj0hi+/1Ta0R/W+ldpzPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjUwMTAyMDU0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmU0YjA5N2ZmMGE3OTg0OWZjMGUyNzY4YzJmODNhZTlkMDUyNjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9L3ghcS1bzksByZULlnIRaPoLyK
SWg6mTYjBPvV2IG6txVlBju89gw2aaDvXmLcMOx1Am10cz8EHPTxeMH+TaLt9xHm
va447UFH69NrQ96tEQBs6TAPyQ/pNVxq+uWHB3NxfD+EFuNVslxcxdveAEWG850B
4hlhFQtHtfVsdjFMx+JXoAK9Y1ysJc85s7DPo0hNkptMZaWC6wucjKY4mYSZRUPp
wzq/m7rtR8yJGAg/ZJSEnF0HvL/ZiKCUAtuwJmLKiPPK+r5hKOYx0/2IFB7GUdQx
0mSyJ1xzN4WYM5WWEwkCdZFwhy7gpsxgoQfqdKYMGZnWwUknKepXWk1yRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFvksJf/CnmEn8Didowvg66dBSaCMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvVy1Td2xfOEtlWVNmd09KMmpDLURycDBGSm9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1cYwMA0G
CSqGSIb3DQEBCwUAA4IBAQBsD140CS61yjPlg8BuOg7fgZPXlV3CLaNl4pLAg9hF
n9N0+NemZMY3NuLFhhNuxax/XCBq76G4nwUHdxBt5+F7fzm4McM/bLPhX8ph/5P5
2KMrYxQM4d23S8KyG5Oi0Xb+91s1tsTGYq/WoSHO95AX9wId/W6t+8wHZhduVcaG
Jz9UBfv7K7I3jGyazlfSZ+FEbQ/pwVD54iwM9uVuz1TVYrTjmTQclELQ9PTU5ogn
YAyb+t4C5FYOs6USPRW6ft5Udy+tHJKYgv2D578mVQlG8Tb0akvteT02DYPoZCiA
HLFderEN/HdnEv3jvfk+jlRm4F/QnkedD6sQoAfzmtpL
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:00:19 2025 by rpki-client