Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/Wb3lkfWf6ka0qstTNr3DHQk98Io.roa
File: Wb3lkfWf6ka0qstTNr3DHQk98Io.roa (raw, json)
Hash identifier: GA6ShDwKxVTanoCjEQltZxPOXFGDZucgrHs4qUUB0mE=
Subject key identifier: 59:BD:E5:91:F5:9F:EA:46:B4:AA:CB:53:36:BD:C3:1D:09:3D:F0:8A
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 01942826551427DC9BBB9077DF4628489BF5
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/Wb3lkfWf6ka0qstTNr3DHQk98Io.roa
Signing time: Thu 02 Jan 2025 17:53:08 +0000
ROA not before: Thu 02 Jan 2025 17:53:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202667
IP address blocks: 212.87.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:55:14:27:dc:9b:bb:90:77:df:46:28:48:9b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 2 17:53:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59bde591f59fea46b4aacb5336bdc31d093df08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:10:66:c9:55:21:8a:66:48:4f:7d:e7:16:
c7:b2:7f:51:f9:43:1a:94:aa:23:49:db:9f:b7:5e:
6a:a6:f5:66:a2:fa:b6:57:ed:fc:87:06:87:8b:71:
56:e7:bb:22:0e:9b:25:fa:8a:ea:85:9e:84:1a:ea:
58:e4:3c:b3:6e:04:5d:68:bb:22:bf:6f:c7:8f:01:
24:c2:e0:87:8e:15:f2:9c:07:45:76:29:f5:2c:e2:
c9:33:ba:10:78:c9:de:19:89:62:8c:05:50:4a:ed:
80:3a:85:b6:28:af:d2:8e:3f:21:6c:b5:0e:74:66:
05:3a:77:4e:06:c3:04:91:e2:54:9d:c2:f3:0d:4f:
b9:3e:9c:7a:c8:3d:52:cd:ef:3e:f5:f9:5a:86:a4:
3b:48:72:e4:c7:4b:5d:91:d1:7b:ec:d5:88:f5:94:
b8:05:d0:06:ed:46:1d:a3:25:d5:58:b4:37:75:89:
c2:10:4c:30:d2:ef:ee:00:ea:8a:85:57:0c:be:f0:
ca:4e:54:da:f8:62:36:ce:da:05:fb:84:33:fb:d6:
97:26:8c:af:ac:f7:22:b6:f9:82:d6:a9:a2:33:d4:
22:e0:58:8c:06:3b:e5:6c:a7:cb:67:b5:ec:25:02:
67:0d:82:fe:47:9e:ac:e3:61:1c:7a:51:f2:98:f1:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:E5:91:F5:9F:EA:46:B4:AA:CB:53:36:BD:C3:1D:09:3D:F0:8A
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/Wb3lkfWf6ka0qstTNr3DHQk98Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.252.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:64:88:91:3f:95:30:f5:1e:6e:0c:9c:3f:61:c5:af:23:90:
cf:4a:04:27:04:38:d7:2e:36:10:41:8b:2a:3d:ef:3c:db:89:
9a:21:29:5c:52:c8:0a:4d:b3:bb:91:42:e7:d5:80:a9:d3:37:
ad:7e:54:9d:91:b7:43:96:4c:f3:05:7e:95:09:a6:e3:6f:51:
06:2e:2b:36:51:81:35:44:fe:43:3c:44:a5:eb:42:4e:b8:dd:
2b:db:a5:ca:f8:e5:39:fd:60:3d:bc:e7:8f:cf:2d:62:57:0c:
57:c1:16:78:ab:43:c8:5f:59:ce:8f:d6:f5:1b:95:0a:a7:87:
f5:9d:21:75:21:94:79:d4:bc:66:7e:29:62:05:bb:33:8d:b0:
6f:18:b5:1a:2b:36:aa:18:d8:a5:64:1e:f2:90:7b:6b:18:f7:
91:eb:77:e6:35:f4:91:d7:e6:e0:1b:86:16:1a:67:1c:36:52:
65:85:e8:65:cc:62:78:dd:d5:20:f9:12:55:7f:37:cc:1a:e4:
cf:2a:ac:89:49:93:d6:dc:b6:df:33:19:66:05:99:b0:ce:6c:
fc:cf:8a:7e:f9:b3:e8:75:b6:8b:4b:71:b5:84:06:e3:6f:43:
c0:bb:71:db:ce:74:0f:92:aa:b4:e7:3e:c1:6d:bc:80:0d:3f:
c8:5c:c2:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJlUUJ9ybu5B330YoSJv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmFhOTYxYjQ3N2Q1NDIzZDg1YjdkNDNmM2VmYTI2MzI2
ZDcwOTAwHhcNMjUwMTAyMTc1MzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWJkZTU5MWY1OWZlYTQ2YjRhYWNiNTMzNmJkYzMxZDA5M2RmMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSgQZslVIYpmSE995xbHsn9R+UMa
lKojSduft15qpvVmovq2V+38hwaHi3FW57siDpsl+orqhZ6EGupY5DyzbgRdaLsi
v2/HjwEkwuCHjhXynAdFdin1LOLJM7oQeMneGYlijAVQSu2AOoW2KK/Sjj8hbLUO
dGYFOndOBsMEkeJUncLzDU+5Ppx6yD1Sze8+9flahqQ7SHLkx0tdkdF77NWI9ZS4
BdAG7UYdoyXVWLQ3dYnCEEww0u/uAOqKhVcMvvDKTlTa+GI2ztoF+4Qz+9aXJoyv
rPcitvmC1qmiM9Qi4FiMBjvlbKfLZ7XsJQJnDYL+R56s42EcelHymPFM7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFm95ZH1n+pGtKrLUza9wx0JPfCKMB8GA1UdIwQY
MBaAFLAqqWG0d9VCPYW31D8++iYybXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEt
MDc4N2E1MDNjYTY5LzEvV2IzbGtmV2Y2a2EwcXN0VE5yM0RIUWs5OElvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEtMDc4N2E1MDNjYTY5
LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Ff8MA0G
CSqGSIb3DQEBCwUAA4IBAQCqZIiRP5Uw9R5uDJw/YcWvI5DPSgQnBDjXLjYQQYsq
Pe8824maISlcUsgKTbO7kULn1YCp0zetflSdkbdDlkzzBX6VCabjb1EGLis2UYE1
RP5DPESl60JOuN0r26XK+OU5/WA9vOePzy1iVwxXwRZ4q0PIX1nOj9b1G5UKp4f1
nSF1IZR51LxmfiliBbszjbBvGLUaKzaqGNilZB7ykHtrGPeR63fmNfSR1+bgG4YW
GmccNlJlhehlzGJ43dUg+RJVfzfMGuTPKqyJSZPW3LbfMxlmBZmwzmz8z4p++bPo
dbaLS3G1hAbjb0PAu3HbznQPkqq05z7BbbyADT/IXMJJ
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:39:51 2025 by rpki-client