Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/wcBe8u24JXjeTWcCpL97nHKl1AU.roa
File: wcBe8u24JXjeTWcCpL97nHKl1AU.roa (raw, json)
Hash identifier: OcQcSR3oTfsUHozUBTzFplqG9Qb0tgWAtrlG+anwobY=
Subject key identifier: C1:C0:5E:F2:ED:B8:25:78:DE:4D:67:02:A4:BF:7B:9C:72:A5:D4:05
Certificate issuer: /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial: 019424B3DE4DCF373DFF389143D5DE84F439
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/wcBe8u24JXjeTWcCpL97nHKl1AU.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 185.171.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:de:4d:cf:37:3d:ff:38:91:43:d5:de:84:f4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c05ef2edb82578de4d6702a4bf7b9c72a5d405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:b5:1e:c2:e3:c7:2e:49:39:01:cc:e4:66:
c5:04:7c:b5:c0:71:00:d1:84:82:f1:42:a4:af:c2:
ff:61:26:a0:80:3f:1b:6a:19:bd:56:b3:2d:28:c8:
ad:4a:3b:d8:c5:15:20:0c:9f:e8:bf:d2:20:07:3e:
c9:53:cf:98:bb:12:80:93:4c:a4:77:04:ae:5c:96:
c1:2d:01:be:c8:7b:5b:55:67:54:1e:e3:fd:38:80:
7b:8b:e7:d7:01:49:67:bc:0c:17:03:7c:a5:1a:5b:
3e:82:7e:12:c7:93:65:46:08:42:6b:b2:fb:f6:50:
b1:23:74:a4:0e:b2:bd:64:b5:60:da:f3:e1:ab:73:
14:ac:c1:4f:11:5a:e8:e4:02:bc:37:1c:2f:0d:40:
d9:01:e6:dd:78:ec:7a:84:70:8f:5d:d0:e8:0f:ef:
7a:5a:bd:37:da:73:ac:d2:eb:2c:15:db:ce:2d:16:
e6:ee:2f:20:90:ca:ac:ab:ec:20:d5:93:35:16:7e:
e8:df:84:41:19:d2:d8:07:9b:0c:1e:a4:49:b8:2c:
1b:e1:10:38:41:80:0b:22:74:27:d5:bc:0d:6a:f8:
72:3e:1c:ea:d9:ea:3f:07:04:c3:a9:e2:23:49:a0:
2d:28:05:34:01:7b:8a:e5:0b:dc:a8:43:5e:82:ed:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:5E:F2:ED:B8:25:78:DE:4D:67:02:A4:BF:7B:9C:72:A5:D4:05
X509v3 Authority Key Identifier:
keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/wcBe8u24JXjeTWcCpL97nHKl1AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f0:04:4b:71:55:05:71:3a:09:cb:b4:ad:7c:4a:67:49:c7:
02:cb:58:31:c7:20:25:75:3f:71:0c:96:00:69:74:f7:26:43:
b2:a0:d2:87:bc:c2:46:a2:78:c0:61:ad:61:5b:45:c7:04:ae:
de:2c:76:30:4e:56:ee:66:27:2a:17:79:1e:07:7e:b9:98:fa:
54:9a:37:1f:cc:79:05:6f:44:ac:b4:d2:df:9c:44:dd:1b:bc:
55:b9:c5:6b:a2:42:76:76:08:3c:1e:3a:41:31:6b:15:45:34:
84:3e:cf:78:c7:63:7a:97:eb:61:a4:6a:f0:1b:09:15:c2:39:
cf:d6:8a:17:74:9a:0a:c6:f0:69:1a:3b:07:22:25:8c:2f:26:
df:c6:0b:0b:b8:ee:b3:76:82:15:c5:cd:62:81:e8:01:12:67:
db:53:17:eb:d1:75:33:bf:a3:c5:bd:eb:36:86:85:27:8f:8d:
07:20:c7:f0:cd:ed:42:ee:29:6e:5e:f9:0d:f3:40:62:72:14:
5a:fa:af:f8:8e:49:e7:b8:61:aa:1c:ed:46:04:22:65:01:78:
83:a5:29:0c:da:8b:5f:f6:5b:59:6e:e2:17:1a:a3:19:8f:2c:
35:7a:b3:ff:76:cf:cd:d0:e0:58:14:30:88:83:10:4e:d3:6a:
9a:a7:27:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks95Nzzc9/ziRQ9XehPQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWJkZGFlNmE3YWNlZTgzYTMyMmEwZTc0M2E2NzU5ZDg1
MzY1ZjIwHhcNMjUwMTAyMDE0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWMwNWVmMmVkYjgyNTc4ZGU0ZDY3MDJhNGJmN2I5YzcyYTVkNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPK1HsLjxy5JOQHM5GbFBHy1wHEA
0YSC8UKkr8L/YSaggD8bahm9VrMtKMitSjvYxRUgDJ/ov9IgBz7JU8+YuxKAk0yk
dwSuXJbBLQG+yHtbVWdUHuP9OIB7i+fXAUlnvAwXA3ylGls+gn4Sx5NlRghCa7L7
9lCxI3SkDrK9ZLVg2vPhq3MUrMFPEVro5AK8NxwvDUDZAebdeOx6hHCPXdDoD+96
Wr032nOs0ussFdvOLRbm7i8gkMqsq+wg1ZM1Fn7o34RBGdLYB5sMHqRJuCwb4RA4
QYALInQn1bwNavhyPhzq2eo/BwTDqeIjSaAtKAU0AXuK5QvcqENegu2abQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHAXvLtuCV43k1nAqS/e5xypdQFMB8GA1UdIwQY
MBaAFEbr3a5qes7oOjIqDnQ6Z1nYU2XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81YzY1YWYtYjNmOS00YmIzLWE3MDIt
MmJjOTA3OTRkMzhkLzEvd2NCZTh1MjRKWGplVFdjQ3BMOTduSEtsMUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81YzY1YWYtYjNmOS00YmIzLWE3MDItMmJjOTA3OTRkMzhk
LzEvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuasWMA0G
CSqGSIb3DQEBCwUAA4IBAQBK8ARLcVUFcToJy7StfEpnSccCy1gxxyAldT9xDJYA
aXT3JkOyoNKHvMJGonjAYa1hW0XHBK7eLHYwTlbuZicqF3keB365mPpUmjcfzHkF
b0SstNLfnETdG7xVucVrokJ2dgg8HjpBMWsVRTSEPs94x2N6l+thpGrwGwkVwjnP
1ooXdJoKxvBpGjsHIiWMLybfxgsLuO6zdoIVxc1igegBEmfbUxfr0XUzv6PFves2
hoUnj40HIMfwze1C7iluXvkN80BichRa+q/4jknnuGGqHO1GBCJlAXiDpSkM2otf
9ltZbuIXGqMZjyw1erP/ds/N0OBYFDCIgxBO02qapyed
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:22 2025 by rpki-client