Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa
File: WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa (raw, json)
Hash identifier: j430VQypl4xdO0dg2dxgGLE5xR8YBPLi6F+UcN6kXHs=
Subject key identifier: 5A:D2:DD:32:F6:29:43:38:B4:7C:64:CB:D5:0D:C7:43:F0:D1:78:C6
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA3D9DEBB8021BA45CACC24975198F
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215365
IP address blocks: 37.114.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3d:9d:eb:b8:02:1b:a4:5c:ac:c2:49:75:19:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ad2dd32f6294338b47c64cbd50dc743f0d178c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5d:4b:3d:45:1b:27:40:09:51:dc:b8:cf:a4:
41:53:02:25:cb:e7:ce:af:ff:ce:56:1c:9d:3e:d8:
5f:6a:53:a0:0b:1d:03:95:cf:82:14:6d:3a:68:df:
9d:37:f9:c7:be:7b:b6:78:1c:f5:75:7e:0f:78:5a:
95:a5:9c:dd:4e:b8:71:fc:02:8f:12:a6:a5:7c:f3:
8f:ce:5f:f1:f7:81:47:4f:74:9d:6c:d7:60:09:ef:
39:95:be:94:a8:03:8c:4c:14:52:71:3b:88:f3:c8:
fa:02:9f:ba:03:1e:ae:14:2c:1b:ee:db:a9:fb:4a:
8c:63:c5:f8:6b:a2:78:e8:a6:aa:55:07:ee:ce:80:
91:23:3d:3e:c1:8e:9e:da:5e:c7:dc:67:17:d2:dc:
53:b6:1d:52:9b:29:1c:b2:3f:2f:bd:7f:ba:79:c0:
d8:db:23:5c:8c:8b:30:c6:bc:04:06:30:86:02:34:
56:7c:a7:b9:53:a2:d8:db:2e:6f:db:dd:e3:6e:3d:
d0:80:53:e7:6f:79:0c:24:b9:3b:f2:bb:44:03:8e:
83:90:5a:4d:da:b8:60:3b:cf:4d:13:61:4d:99:c0:
44:5a:ac:33:b4:1e:74:de:44:55:a6:5e:c3:de:34:
00:d7:9f:54:68:26:9a:cd:5f:b6:9f:0a:c3:68:7a:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:DD:32:F6:29:43:38:B4:7C:64:CB:D5:0D:C7:43:F0:D1:78:C6
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.35.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d5:29:17:4f:00:5e:1b:14:0d:90:ae:9a:b2:bb:54:20:e9:
7e:e8:69:8e:d6:4c:17:29:e6:2f:9c:23:98:05:c0:70:94:4d:
93:ee:62:66:eb:aa:d5:16:79:61:1a:8d:1e:d9:69:cf:73:4b:
d7:dd:f2:dd:2a:da:42:7d:2d:e4:d0:66:1e:03:0b:0d:6a:1f:
0e:cf:6f:fb:e4:1b:21:b6:63:2a:87:f8:81:d8:c2:a0:5b:d1:
83:a7:58:c1:f4:a9:c6:40:39:e6:eb:8b:62:0c:54:01:65:04:
34:d6:99:b3:4b:7a:c0:0d:83:5f:21:8a:62:e1:20:c6:88:3f:
e6:1c:0c:41:4b:9a:74:15:5b:63:b0:a7:f5:a5:fd:35:e2:a4:
7e:7b:f6:7b:ad:0a:64:a0:e8:06:cf:d0:2b:3c:65:2a:4e:32:
15:f9:f7:dd:1b:42:cf:97:f3:41:df:9e:71:c2:ca:d3:8d:3e:
8b:01:a2:be:fa:9e:9d:6e:a4:ce:7c:b6:70:80:15:46:10:0c:
fe:61:19:57:d7:be:f3:40:5e:ac:b0:ed:2e:52:84:c5:ff:03:
f8:92:4b:9b:0a:b2:2f:71:1e:e0:f5:83:2b:35:0b:91:e2:c4:
9b:10:36:9d:11:df:d3:98:2a:12:81:8c:84:45:42:b8:0c:4f:
a9:7f:d9:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+j2d67gCG6RcrMJJdRmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjUwMTAxMDM0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWQyZGQzMmY2Mjk0MzM4YjQ3YzY0Y2JkNTBkYzc0M2YwZDE3OGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6l1LPUUbJ0AJUdy4z6RBUwIly+fO
r//OVhydPthfalOgCx0Dlc+CFG06aN+dN/nHvnu2eBz1dX4PeFqVpZzdTrhx/AKP
EqalfPOPzl/x94FHT3SdbNdgCe85lb6UqAOMTBRScTuI88j6Ap+6Ax6uFCwb7tup
+0qMY8X4a6J46KaqVQfuzoCRIz0+wY6e2l7H3GcX0txTth1Smykcsj8vvX+6ecDY
2yNcjIswxrwEBjCGAjRWfKe5U6LY2y5v293jbj3QgFPnb3kMJLk78rtEA46DkFpN
2rhgO89NE2FNmcBEWqwztB503kRVpl7D3jQA159UaCaazV+2nwrDaHp0vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFrS3TL2KUM4tHxky9UNx0Pw0XjGMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvV3RMZE12WXBRemkwZkdUTDFRM0hRX0RSZU1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm
LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJXIjMA0G
CSqGSIb3DQEBCwUAA4IBAQCr1SkXTwBeGxQNkK6asrtUIOl+6GmO1kwXKeYvnCOY
BcBwlE2T7mJm66rVFnlhGo0e2WnPc0vX3fLdKtpCfS3k0GYeAwsNah8Oz2/75Bsh
tmMqh/iB2MKgW9GDp1jB9KnGQDnm64tiDFQBZQQ01pmzS3rADYNfIYpi4SDGiD/m
HAxBS5p0FVtjsKf1pf014qR+e/Z7rQpkoOgGz9ArPGUqTjIV+ffdG0LPl/NB355x
wsrTjT6LAaK++p6dbqTOfLZwgBVGEAz+YRlX177zQF6ssO0uUoTF/wP4kkubCrIv
cR7g9YMrNQuR4sSbEDadEd/TmCoSgYyERUK4DE+pf9kk
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:45 2025 by rpki-client