Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/wuzH2my_mYDAlouZ5aRNnbo5Kzg.roa
File: wuzH2my_mYDAlouZ5aRNnbo5Kzg.roa (raw, json)
Hash identifier: 8mZfF16h11ohkGa7jPqqzWnLZjCYH45hphmVsvoXp/I=
Subject key identifier: C2:EC:C7:DA:6C:BF:99:80:C0:96:8B:99:E5:A4:4D:9D:BA:39:2B:38
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 01942521641E430061BCAA845964A49FE4D0
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/wuzH2my_mYDAlouZ5aRNnbo5Kzg.roa
Signing time: Thu 02 Jan 2025 03:48:52 +0000
ROA not before: Thu 02 Jan 2025 03:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35680
IP address blocks: 77.120.96.0/22 maxlen: 22
77.120.100.0/22 maxlen: 22
77.120.104.0/22 maxlen: 22
77.120.108.0/22 maxlen: 22
77.120.112.0/22 maxlen: 22
77.120.116.0/22 maxlen: 22
77.120.120.0/22 maxlen: 22
77.120.124.0/22 maxlen: 22
77.123.128.0/22 maxlen: 22
77.123.132.0/22 maxlen: 22
77.123.136.0/22 maxlen: 22
77.123.140.0/22 maxlen: 22
77.123.144.0/22 maxlen: 22
77.123.148.0/22 maxlen: 22
77.123.152.0/22 maxlen: 22
77.123.156.0/22 maxlen: 22
82.144.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:64:1e:43:00:61:bc:aa:84:59:64:a4:9f:e4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2ecc7da6cbf9980c0968b99e5a44d9dba392b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:7d:9d:aa:4e:84:41:c3:db:44:71:5f:8f:
0c:ea:5f:03:cb:dd:0d:bf:09:ec:2f:c6:16:3c:1e:
e9:b0:d1:a7:45:1a:84:0c:e8:6e:ed:e0:d9:00:5a:
64:0b:ae:94:6c:ca:a9:5d:a5:2e:bb:53:76:9f:e7:
1a:0a:c2:32:9c:d1:89:1f:f4:0d:04:95:8a:53:13:
86:f2:1d:73:3b:e3:69:ce:be:e1:ef:cc:42:49:9c:
54:48:5f:a3:2d:d1:df:0e:60:21:3a:9d:7c:3c:5f:
8f:7f:77:b0:27:50:b6:7d:80:5c:d7:41:69:2a:f0:
3f:18:44:39:06:4e:11:10:8d:f8:d4:87:e4:f4:59:
15:46:a6:a2:ee:b5:18:9b:21:34:19:04:87:79:b3:
c3:a5:fa:84:b4:26:4d:91:77:b8:1e:16:db:a6:e5:
a3:67:46:68:40:e4:cd:b3:07:48:0f:8d:f7:8c:48:
22:dc:17:e4:b8:95:e6:aa:0c:10:d5:b0:6a:cd:89:
c0:b3:07:b1:5a:cb:5b:2f:5b:48:6e:cd:65:95:ff:
03:3b:c3:ef:69:cb:c9:da:89:0f:00:b9:41:17:97:
c6:21:48:c2:2a:56:d4:db:b8:88:72:f3:66:59:4b:
93:fe:96:78:0d:ee:53:a0:c9:22:6f:c3:38:ca:f4:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EC:C7:DA:6C:BF:99:80:C0:96:8B:99:E5:A4:4D:9D:BA:39:2B:38
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/wuzH2my_mYDAlouZ5aRNnbo5Kzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.96.0/19
77.123.128.0/19
82.144.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:e2:17:af:04:63:91:ae:7d:55:b6:ef:17:24:a0:a7:95:2f:
a0:ae:a9:a9:69:e0:be:28:7a:73:ac:20:49:de:70:7f:8c:ac:
68:9b:eb:25:91:18:6d:e4:38:6a:b6:f6:ea:ec:39:28:69:d2:
9d:9a:6c:58:1d:ae:40:7c:27:16:79:dd:6f:85:a8:c3:38:9c:
0a:84:e8:49:34:a5:14:c3:f0:d1:90:9e:76:12:e8:ef:32:59:
65:e4:c9:b2:49:56:50:b6:ba:04:3d:d6:6a:7e:ea:f3:6f:51:
e0:5c:6d:42:8e:0f:68:0c:d8:da:f1:b9:34:85:e2:9d:23:33:
57:cf:ec:bf:16:1a:67:5d:4f:8c:c8:c1:68:70:fd:3c:31:49:
94:2e:d4:6a:83:47:77:0a:61:b6:40:34:3b:e8:31:7a:46:d8:
27:e9:ea:ec:63:ad:58:dd:21:5e:00:fc:d3:cb:d4:d3:95:0b:
bf:d2:0e:8d:bb:e5:56:25:e3:01:9b:a4:e4:d4:8d:0a:67:6b:
73:02:9a:be:6d:10:b2:e0:9c:df:ba:c7:2e:b9:e6:73:4c:c4:
17:6a:72:5d:b8:95:45:c8:97:d4:2f:98:fa:d7:6f:06:d7:18:
7b:68:ae:98:3e:3b:f2:e6:24:53:67:27:6d:c8:1f:f1:5e:5a:
08:3c:92:65
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIWQeQwBhvKqEWWSkn+TQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz
YjY3YWEwHhcNMjUwMTAyMDM0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmVjYzdkYTZjYmY5OTgwYzA5NjhiOTllNWE0NGQ5ZGJhMzkyYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/19napOhEHD20RxX48M6l8Dy90N
vwnsL8YWPB7psNGnRRqEDOhu7eDZAFpkC66UbMqpXaUuu1N2n+caCsIynNGJH/QN
BJWKUxOG8h1zO+Npzr7h78xCSZxUSF+jLdHfDmAhOp18PF+Pf3ewJ1C2fYBc10Fp
KvA/GEQ5Bk4REI341Ifk9FkVRqai7rUYmyE0GQSHebPDpfqEtCZNkXe4HhbbpuWj
Z0ZoQOTNswdID433jEgi3BfkuJXmqgwQ1bBqzYnAswexWstbL1tIbs1llf8DO8Pv
acvJ2okPALlBF5fGIUjCKlbU27iIcvNmWUuT/pZ4De5ToMkib8M4yvRdpwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMLsx9psv5mAwJaLmeWkTZ26OSs4MB8GA1UdIwQY
MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt
OTQ0Y2U3ZWViMTU0LzEvd3V6SDJteV9tWURBbG91WjVhUk5uYm81S3pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0
LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFTXhgAwQF
TXuAAwQCUpDcMA0GCSqGSIb3DQEBCwUAA4IBAQCp4hevBGORrn1Vtu8XJKCnlS+g
rqmpaeC+KHpzrCBJ3nB/jKxom+slkRht5Dhqtvbq7DkoadKdmmxYHa5AfCcWed1v
hajDOJwKhOhJNKUUw/DRkJ52EujvMlll5MmySVZQtroEPdZqfurzb1HgXG1Cjg9o
DNja8bk0heKdIzNXz+y/FhpnXU+MyMFocP08MUmULtRqg0d3CmG2QDQ76DF6Rtgn
6ersY61Y3SFeAPzTy9TTlQu/0g6Nu+VWJeMBm6Tk1I0KZ2tzApq+bRCy4Jzfuscu
ueZzTMQXanJduJVFyJfUL5j6128G1xh7aK6YPjvy5iRTZydtyB/xXloIPJJl
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:50:36 2025 by rpki-client