Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wdp1spVpZwuLkRidhLNx3so58wY.roa
File: Wdp1spVpZwuLkRidhLNx3so58wY.roa (raw, json)
Hash identifier: lhZf7sI7/qz1OEx/Tu3sNlYbZ+M3ysEV9Cc8/f3sJLM=
Subject key identifier: 59:DA:75:B2:95:69:67:0B:8B:91:18:9D:84:B3:71:DE:CA:39:F3:06
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522221783010970E3A4BDA9FD89CF56
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wdp1spVpZwuLkRidhLNx3so58wY.roa
Signing time: Thu 02 Jan 2025 03:49:41 +0000
ROA not before: Thu 02 Jan 2025 03:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205794
IP address blocks: 2a0e:97c0:831::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:22:17:83:01:09:70:e3:a4:bd:a9:fd:89:cf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59da75b29569670b8b91189d84b371deca39f306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:53:47:fe:b9:a2:0a:be:8c:a4:82:0c:a5:
c7:19:30:f9:43:81:ae:23:a0:4f:b4:bc:3e:29:bc:
98:8c:e9:1b:69:80:c8:08:2c:bc:a6:ae:0c:1c:d1:
3d:8d:6d:65:d4:b2:bc:ad:ca:3a:31:38:55:69:6b:
d8:6b:73:3c:f3:a6:a8:e6:50:6c:9a:f0:5a:93:cc:
48:4b:55:b2:fa:46:11:fd:76:63:e9:ed:0a:62:0f:
3b:a2:8e:df:0d:20:2d:96:d8:f4:c2:5e:f6:0d:7a:
3b:c1:ff:1c:2d:4a:5a:1c:ce:d5:3f:20:01:fd:c6:
0f:1d:ad:ec:e8:b3:a2:e4:51:d7:d1:1a:94:20:b5:
6a:a0:56:25:76:14:16:55:45:a6:70:04:44:d7:c4:
4b:dd:88:31:4c:c8:8e:f4:64:b3:74:23:c2:31:f2:
e3:c8:fd:f5:1e:a3:43:d5:b4:0a:e6:ee:79:07:f7:
28:87:ee:7f:3e:08:35:40:48:de:22:27:7a:cd:79:
3a:77:d4:0c:74:b7:12:4f:d2:02:f3:65:6e:73:a1:
a7:c9:25:15:8d:f0:58:78:41:ad:8d:e6:c6:22:4b:
20:73:4b:07:60:fd:ed:14:89:88:95:42:e2:cf:4d:
5e:db:9a:1e:a3:ef:a3:d5:5a:b5:5c:14:d3:b6:cc:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:75:B2:95:69:67:0B:8B:91:18:9D:84:B3:71:DE:CA:39:F3:06
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wdp1spVpZwuLkRidhLNx3so58wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:831::/48
Signature Algorithm: sha256WithRSAEncryption
27:37:35:6f:7e:a7:3d:78:6c:7f:f6:34:44:1d:59:18:c1:4e:
2e:88:f7:e2:be:14:73:2a:f9:d7:3d:45:f6:78:f7:c8:7b:bd:
19:0e:dd:c1:e8:34:70:d2:99:b1:93:26:46:42:64:dc:f7:ad:
da:02:1b:4a:09:8f:d9:63:1a:01:b9:2a:38:9f:6d:86:64:b6:
8b:67:f8:cf:12:5e:4f:d4:a9:45:d0:9b:d3:0d:e8:6a:d3:d0:
e6:29:a6:d6:0c:0e:38:82:59:41:ba:2a:9f:c2:9c:0d:ff:eb:
0e:2f:57:f4:0f:7b:6f:ab:aa:39:27:42:89:b8:4f:c9:73:3a:
c4:c4:be:58:38:c3:c7:a1:04:7d:a9:17:6d:fc:b4:45:22:55:
1a:ec:41:dc:b8:fe:41:28:c5:e1:d5:96:09:ed:09:f4:7f:39:
4f:c9:89:2f:a2:3f:6b:b8:54:bb:fe:48:69:dc:d7:01:8c:0f:
a1:ac:52:40:40:a3:a9:03:0c:83:49:cc:1c:0f:e6:bd:cd:17:
fa:0f:3f:39:82:96:8f:75:95:c0:bc:45:f9:9f:4f:15:56:5a:
b0:e3:65:c2:c0:bb:f8:81:d9:90:28:ba:49:a0:32:9b:9a:4a:
ec:bd:5a:15:d6:3c:0a:d6:bc:d8:ff:bc:e2:79:94:f4:c5:1a:
64:7a:59:a3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIiIXgwEJcOOkvan9ic9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWRhNzViMjk1Njk2NzBiOGI5MTE4OWQ4NGIzNzFkZWNhMzlmMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlFTR/65ogq+jKSCDKXHGTD5Q4Gu
I6BPtLw+KbyYjOkbaYDICCy8pq4MHNE9jW1l1LK8rco6MThVaWvYa3M886ao5lBs
mvBak8xIS1Wy+kYR/XZj6e0KYg87oo7fDSAtltj0wl72DXo7wf8cLUpaHM7VPyAB
/cYPHa3s6LOi5FHX0RqUILVqoFYldhQWVUWmcARE18RL3YgxTMiO9GSzdCPCMfLj
yP31HqND1bQK5u55B/coh+5/Pgg1QEjeIid6zXk6d9QMdLcST9IC82Vuc6GnySUV
jfBYeEGtjebGIksgc0sHYP3tFImIlULiz01e25oeo++j1Vq1XBTTtsyKLQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFnadbKVaWcLi5EYnYSzcd7KOfMGMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvV2RwMXNwVnBad3VMa1JpZGhMTngzc281OHdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAgx
MA0GCSqGSIb3DQEBCwUAA4IBAQAnNzVvfqc9eGx/9jREHVkYwU4uiPfivhRzKvnX
PUX2ePfIe70ZDt3B6DRw0pmxkyZGQmTc963aAhtKCY/ZYxoBuSo4n22GZLaLZ/jP
El5P1KlF0JvTDehq09DmKabWDA44gllBuiqfwpwN/+sOL1f0D3tvq6o5J0KJuE/J
czrExL5YOMPHoQR9qRdt/LRFIlUa7EHcuP5BKMXh1ZYJ7Qn0fzlPyYkvoj9ruFS7
/khp3NcBjA+hrFJAQKOpAwyDScwcD+a9zRf6Dz85gpaPdZXAvEX5n08VVlqw42XC
wLv4gdmQKLpJoDKbmkrsvVoV1jwK1rzY/7zieZT0xRpkelmj
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:01:48 2025 by rpki-client