Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa
File: wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa (raw, json)
Hash identifier: 5ew+YI6A03XXDHcW34IPcQmeliOZOZVp10AAv6PNozg=
Subject key identifier: C2:65:55:14:31:FA:5C:89:8A:D4:3A:B9:0F:7C:93:28:CE:CB:98:2E
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B8A4D666A467308E769E2863F5925
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa
Signing time: Thu 02 Jan 2025 09:49:29 +0000
ROA not before: Thu 02 Jan 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 185.150.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8a:4d:66:6a:46:73:08:e7:69:e2:86:3f:59:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c265551431fa5c898ad43ab90f7c9328cecb982e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:e3:b5:e1:b1:08:aa:3a:aa:fc:b9:1c:35:
73:3e:84:f9:0b:dd:72:c9:b9:3a:ef:00:a1:05:fb:
49:eb:bb:f1:b2:97:6c:4f:0a:e1:9e:7d:d3:b9:f4:
12:cf:3f:5a:23:1f:f2:11:c2:29:2b:78:8b:7e:24:
43:56:7f:21:ff:95:e4:5f:90:d8:84:ed:75:56:49:
cf:a5:24:a8:03:ee:57:79:0a:77:3d:58:59:e0:5f:
a9:16:aa:b4:a1:25:06:2f:cf:d3:ca:31:63:5f:05:
02:7a:41:38:e2:fe:58:54:02:74:05:64:9e:22:48:
2a:3e:b9:d2:b3:fd:79:3d:b1:63:45:77:97:f4:64:
15:90:30:a9:81:39:96:5e:3b:ff:46:af:2d:c1:c3:
19:24:77:b2:f0:eb:80:b3:35:24:4b:69:af:d4:4c:
4a:b0:90:28:21:0e:fb:00:c2:ce:7c:54:56:3f:8c:
84:1e:df:47:b0:4a:23:e5:e1:53:8b:dc:79:d9:c3:
7c:29:ae:b8:1a:a7:b6:e2:59:1a:c7:81:ac:70:70:
f1:05:0f:4e:07:6f:e2:9b:b7:f7:9e:a0:46:ed:53:
7d:d7:38:7a:99:42:e2:34:38:9d:0b:8d:93:31:ae:
55:99:28:67:c6:d3:b2:7d:5c:e9:aa:77:5f:99:af:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:55:14:31:FA:5C:89:8A:D4:3A:B9:0F:7C:93:28:CE:CB:98:2E
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wmVVFDH6XImK1Dq5D3yTKM7LmC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.204.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9d:12:a5:ff:62:fc:03:7e:cf:07:b4:8b:97:1c:1c:cc:27:
7e:ca:e4:30:28:86:f4:11:db:f5:15:78:7e:09:fa:ac:8d:09:
2d:6c:e6:e8:6a:bc:5c:ff:13:ae:6f:21:fb:2e:93:3d:9f:33:
d3:9a:eb:1b:05:5f:28:42:2f:e0:a9:36:e9:95:75:5a:31:57:
2c:86:f7:de:d5:b9:06:a4:3b:bf:48:37:e4:5d:18:f5:59:15:
bd:ab:fb:bc:2c:25:d6:2f:f7:e1:f6:80:51:82:03:86:51:f0:
40:e7:03:80:dc:3d:36:d6:7a:24:9f:f3:ed:84:84:75:dd:32:
dd:37:89:01:72:b8:b4:f1:fa:7c:ea:ef:40:19:bd:cc:49:2b:
3f:35:81:ef:b9:5e:37:27:0a:48:33:49:94:d7:69:a8:84:33:
3e:ce:40:d2:b2:f0:56:b7:ae:13:dc:90:62:f8:56:fd:12:83:
5b:fd:32:50:4e:43:d1:b0:e0:7f:22:42:b9:1e:e4:2c:d5:b7:
de:01:d2:51:05:c6:ad:78:84:88:98:a4:83:e3:7b:56:ff:23:
42:ea:14:a2:44:b7:92:26:d3:f1:e5:bb:53:ca:98:42:17:fb:
f2:d2:84:fa:6e:20:0f:46:4b:1a:00:64:09:82:d9:f1:fe:e3:
90:ca:bb:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma4pNZmpGcwjnaeKGP1klMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwMTAyMDk0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjY1NTUxNDMxZmE1Yzg5OGFkNDNhYjkwZjdjOTMyOGNlY2I5ODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3LjteGxCKo6qvy5HDVzPoT5C91y
ybk67wChBftJ67vxspdsTwrhnn3TufQSzz9aIx/yEcIpK3iLfiRDVn8h/5XkX5DY
hO11VknPpSSoA+5XeQp3PVhZ4F+pFqq0oSUGL8/TyjFjXwUCekE44v5YVAJ0BWSe
IkgqPrnSs/15PbFjRXeX9GQVkDCpgTmWXjv/Rq8twcMZJHey8OuAszUkS2mv1ExK
sJAoIQ77AMLOfFRWP4yEHt9HsEoj5eFTi9x52cN8Ka64Gqe24lkax4GscHDxBQ9O
B2/im7f3nqBG7VN91zh6mULiNDidC42TMa5VmShnxtOyfVzpqndfma9QiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMJlVRQx+lyJitQ6uQ98kyjOy5guMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvd21WVkZESDZYSW1LMURxNUQzeVRLTTdMbUM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZbMMA0G
CSqGSIb3DQEBCwUAA4IBAQBEnRKl/2L8A37PB7SLlxwczCd+yuQwKIb0Edv1FXh+
CfqsjQktbOboarxc/xOubyH7LpM9nzPTmusbBV8oQi/gqTbplXVaMVcshvfe1bkG
pDu/SDfkXRj1WRW9q/u8LCXWL/fh9oBRggOGUfBA5wOA3D021nokn/PthIR13TLd
N4kBcri08fp86u9AGb3MSSs/NYHvuV43JwpIM0mU12mohDM+zkDSsvBWt64T3JBi
+Fb9EoNb/TJQTkPRsOB/IkK5HuQs1bfeAdJRBcateISImKSD43tW/yNC6hSiRLeS
JtPx5btTyphCF/vy0oT6biAPRksaAGQJgtnx/uOQyrtS
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:39:29 2025 by rpki-client