Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/WEP8t9A44--cEjL5pRqrcK4NrA0.roa
File: WEP8t9A44--cEjL5pRqrcK4NrA0.roa (raw, json)
Hash identifier: elcme8pyEkMhDdeVhgtzdCn+oqpKZYwu+OBHtYqbN08=
Subject key identifier: 58:43:FC:B7:D0:38:E3:EF:9C:12:32:F9:A5:1A:AB:70:AE:0D:AC:0D
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 019426D8E6F964BFC864968731EBDE361197
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/WEP8t9A44--cEjL5pRqrcK4NrA0.roa
Signing time: Thu 02 Jan 2025 11:48:56 +0000
ROA not before: Thu 02 Jan 2025 11:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9020
IP address blocks: 153.96.133.0/24 maxlen: 24
153.96.134.0/23 maxlen: 23
153.96.135.0/24 maxlen: 24
2a03:db80:3810::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:e6:f9:64:bf:c8:64:96:87:31:eb:de:36:11:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 2 11:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5843fcb7d038e3ef9c1232f9a51aab70ae0dac0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:45:f3:f2:18:23:b2:d7:69:9d:1b:b6:69:
0b:bb:e1:3e:7b:fb:41:67:67:b3:f6:1d:3d:f9:2f:
73:5d:c3:48:b4:b0:a1:82:da:ec:56:a5:60:95:fe:
01:85:8c:d7:de:29:86:81:09:b8:ab:a1:02:bf:fc:
77:9a:ba:dc:cb:c1:7c:f5:69:d0:8b:06:77:57:a9:
f9:74:a0:58:2a:cb:1b:7b:60:86:60:be:d5:52:68:
54:91:4c:63:3d:fe:a5:0a:4e:33:e7:75:0b:7e:f6:
c6:85:cc:70:2a:e5:84:fb:66:e9:73:aa:17:31:50:
10:71:8b:ad:e4:24:0e:da:aa:77:26:00:93:64:47:
72:3e:32:2e:fb:e1:e8:9c:b4:62:b4:0a:15:ab:50:
b7:74:cf:6e:3a:31:e0:31:18:a4:95:f8:34:d7:08:
23:01:e6:8e:9e:cd:48:0d:51:99:d4:77:b6:17:ea:
46:e3:2a:7b:71:22:7c:ec:ce:00:bb:29:40:40:3b:
61:ea:cf:d6:33:87:82:13:62:7f:b8:79:d4:41:8f:
30:bf:3e:5b:8c:44:18:6f:00:b3:70:d5:c6:e7:f9:
a4:81:13:85:3d:a5:19:94:8f:b4:15:fa:be:a5:6c:
f5:3a:a1:87:af:8d:78:33:51:5e:7c:c8:50:6b:a2:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:FC:B7:D0:38:E3:EF:9C:12:32:F9:A5:1A:AB:70:AE:0D:AC:0D
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/WEP8t9A44--cEjL5pRqrcK4NrA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.96.133.0-153.96.135.255
IPv6:
2a03:db80:3810::/48
Signature Algorithm: sha256WithRSAEncryption
56:e2:8b:1d:13:2b:a0:1f:73:08:14:84:02:67:8d:f7:a4:c7:
09:3c:61:92:7f:f1:b0:83:de:f1:52:5e:2f:b4:bf:63:97:9f:
14:e9:b2:37:b5:76:03:cb:bc:0e:9a:c4:96:96:eb:b6:cb:c8:
b8:e0:7f:19:77:87:db:04:d9:7a:00:c7:21:18:41:64:35:f2:
34:f8:15:41:79:a0:d3:11:92:95:6e:51:72:52:e4:c5:bb:6c:
33:fb:17:4d:15:70:84:3c:c6:8e:be:31:05:87:76:0f:1e:4e:
7e:c8:b5:49:06:8a:13:ee:38:ae:c6:28:f7:69:20:50:21:08:
11:1a:3b:c0:44:e6:49:96:31:a2:b3:8b:09:c8:f3:56:af:91:
e5:b7:84:dc:c9:71:cf:47:a9:4c:3c:3f:3e:ee:f1:b1:9b:7d:
20:5f:74:14:13:c3:09:fb:5f:4d:b3:4d:4c:3f:ed:44:a8:ef:
cb:b8:e8:58:54:10:85:77:d2:19:14:cf:ce:b3:98:3c:8c:ce:
93:61:81:11:42:dd:8d:43:34:00:35:3c:25:bd:e3:b5:12:bc:
45:aa:f6:8c:12:32:f7:1b:55:80:cc:e4:f4:35:58:73:04:49:
b9:9b:f2:8e:8b:e1:9d:9d:72:41:97:d1:c2:75:50:0f:fb:62:
83:7b:1f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQm2Ob5ZL/IZJaHMeveNhGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2
NDIwZGYwHhcNMjUwMTAyMTE0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODQzZmNiN2QwMzhlM2VmOWMxMjMyZjlhNTFhYWI3MGFlMGRhYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOFF8/IYI7LXaZ0btmkLu+E+e/tB
Z2ez9h09+S9zXcNItLChgtrsVqVglf4BhYzX3imGgQm4q6ECv/x3mrrcy8F89WnQ
iwZ3V6n5dKBYKssbe2CGYL7VUmhUkUxjPf6lCk4z53ULfvbGhcxwKuWE+2bpc6oX
MVAQcYut5CQO2qp3JgCTZEdyPjIu++HonLRitAoVq1C3dM9uOjHgMRiklfg01wgj
AeaOns1IDVGZ1He2F+pG4yp7cSJ87M4AuylAQDth6s/WM4eCE2J/uHnUQY8wvz5b
jEQYbwCzcNXG5/mkgROFPaUZlI+0Ffq+pWz1OqGHr414M1FefMhQa6JC/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhD/LfQOOPvnBIy+aUaq3CuDawNMB8GA1UdIwQY
MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct
YWQ4ZmJlYWE4ZGQ5LzEvV0VQOHQ5QTQ0LS1jRWpMNXBScXJjSzROckEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5
LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBACZYIUD
BAOZYIAwDwQCAAIwCQMHACoD24A4EDANBgkqhkiG9w0BAQsFAAOCAQEAVuKLHRMr
oB9zCBSEAmeN96THCTxhkn/xsIPe8VJeL7S/Y5efFOmyN7V2A8u8DprElpbrtsvI
uOB/GXeH2wTZegDHIRhBZDXyNPgVQXmg0xGSlW5RclLkxbtsM/sXTRVwhDzGjr4x
BYd2Dx5Ofsi1SQaKE+44rsYo92kgUCEIERo7wETmSZYxorOLCcjzVq+R5beE3Mlx
z0epTDw/Pu7xsZt9IF90FBPDCftfTbNNTD/tRKjvy7joWFQQhXfSGRTPzrOYPIzO
k2GBEULdjUM0ADU8Jb3jtRK8Rar2jBIy9xtVgMzk9DVYcwRJuZvyjovhnZ1yQZfR
wnVQD/tig3sf9A==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:57 2025 by rpki-client