Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pwwgrgjsS_BYRmPS9r0tRuibWWM.roa
File: pwwgrgjsS_BYRmPS9r0tRuibWWM.roa (raw, json)
Hash identifier: LE3vzd4XMXIKDeWgO0vMu7VDUANPwRj882hzMNYjoUM=
Subject key identifier: A7:0C:20:AE:08:EC:4B:F0:58:46:63:D2:F6:BD:2D:46:E8:9B:59:63
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425221D0AC1B78AC6E88DC8768265DEDE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pwwgrgjsS_BYRmPS9r0tRuibWWM.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204841
IP address blocks: 45.12.252.0/24 maxlen: 24
2a0e:97c0:d30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1d:0a:c1:b7:8a:c6:e8:8d:c8:76:82:65:de:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a70c20ae08ec4bf0584663d2f6bd2d46e89b5963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:4d:1a:d0:58:e5:c5:63:30:9e:76:0c:9e:
d0:1e:6f:77:41:6e:59:a5:b9:fb:81:d5:6f:67:18:
b4:c4:43:c0:65:88:3f:e2:58:48:04:2f:c1:a7:db:
11:96:15:2c:fc:d3:5a:ce:fc:f5:3c:6d:92:0a:c2:
6a:b3:4c:cb:15:87:42:fd:59:79:b3:c8:f1:97:36:
56:6f:54:fe:80:51:57:0c:83:32:71:7d:9c:30:4f:
ce:3e:49:92:85:ca:cd:f5:97:3f:63:16:4a:c6:5e:
a6:4a:d4:9c:13:6c:00:64:19:b9:35:1c:ca:73:0a:
68:12:db:59:ee:0d:31:9f:69:22:71:91:a9:12:ed:
74:55:49:ee:df:67:dd:b1:7b:6d:80:9f:f2:97:ac:
af:65:54:3d:dd:f0:ee:4b:6b:80:2b:87:36:ed:88:
45:d4:00:cd:99:91:99:21:88:d8:83:14:dd:37:29:
58:36:30:78:19:dc:e0:c3:db:e8:1d:9f:07:cb:15:
a4:9c:b0:1f:a9:8d:b9:21:81:86:08:51:05:fb:bc:
0b:4c:ad:cf:85:96:fc:1a:09:be:76:52:8e:70:a3:
14:44:54:3a:e2:c3:68:e2:3b:20:4e:56:5f:00:25:
43:2d:e5:0f:9a:73:8e:5a:91:9d:88:76:fd:6b:68:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0C:20:AE:08:EC:4B:F0:58:46:63:D2:F6:BD:2D:46:E8:9B:59:63
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pwwgrgjsS_BYRmPS9r0tRuibWWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.252.0/24
IPv6:
2a0e:97c0:d30::/44
Signature Algorithm: sha256WithRSAEncryption
6e:56:80:45:68:f7:6b:66:da:bd:95:b9:dc:7e:13:86:0f:5d:
03:4b:d9:dd:d4:f6:c1:6f:8f:08:88:39:b2:dd:c6:81:34:07:
51:86:3f:f2:56:36:2f:a7:43:77:4e:35:d8:a5:43:33:61:7f:
c9:04:c3:19:4e:e8:66:97:b3:53:76:2d:15:24:0d:7f:87:77:
16:48:ce:d3:49:4b:52:6b:73:ff:a3:13:09:56:7b:96:5c:05:
dc:5c:6d:43:c6:55:bb:a9:fa:47:29:43:93:af:3c:17:6b:ae:
0c:96:4e:76:da:33:a9:9c:04:ac:fe:66:74:e6:1d:6d:e8:4c:
33:d3:1f:db:03:fb:3a:80:69:0a:3c:4b:6c:71:35:6a:a3:d0:
a1:bf:85:ce:a9:67:07:b4:7d:9e:05:4a:f0:31:2e:cb:cc:b8:
23:7c:50:a4:29:05:42:23:3f:2f:bf:28:97:ef:d5:bd:0d:90:
30:d2:76:a1:24:ff:c8:26:63:76:3a:5e:a4:09:c7:34:3b:ca:
de:d8:fb:36:e2:99:fa:8c:20:17:4b:48:b5:f0:13:dc:ec:63:
68:4e:58:d2:b6:1c:57:7d:a8:58:ef:4a:22:9b:ab:04:a7:2b:
6c:ee:bc:0b:c0:ac:67:c9:a6:9d:1b:d8:99:97:39:e0:d7:4b:
ca:99:e5:54
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQlIh0KwbeKxuiNyHaCZd7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzBjMjBhZTA4ZWM0YmYwNTg0NjYzZDJmNmJkMmQ0NmU4OWI1OTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyBNGtBY5cVjMJ52DJ7QHm93QW5Z
pbn7gdVvZxi0xEPAZYg/4lhIBC/Bp9sRlhUs/NNazvz1PG2SCsJqs0zLFYdC/Vl5
s8jxlzZWb1T+gFFXDIMycX2cME/OPkmShcrN9Zc/YxZKxl6mStScE2wAZBm5NRzK
cwpoEttZ7g0xn2kicZGpEu10VUnu32fdsXttgJ/yl6yvZVQ93fDuS2uAK4c27YhF
1ADNmZGZIYjYgxTdNylYNjB4Gdzgw9voHZ8HyxWknLAfqY25IYGGCFEF+7wLTK3P
hZb8Ggm+dlKOcKMURFQ64sNo4jsgTlZfACVDLeUPmnOOWpGdiHb9a2jTjQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKcMIK4I7EvwWEZj0va9LUbom1ljMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvcHd3Z3JnanNTX0JZUm1QUzlyMHRSdWliV1dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALQz8MA8E
AgACMAkDBwQqDpfADTAwDQYJKoZIhvcNAQELBQADggEBAG5WgEVo92tm2r2Vudx+
E4YPXQNL2d3U9sFvjwiIObLdxoE0B1GGP/JWNi+nQ3dONdilQzNhf8kEwxlO6GaX
s1N2LRUkDX+HdxZIztNJS1Jrc/+jEwlWe5ZcBdxcbUPGVbup+kcpQ5OvPBdrrgyW
TnbaM6mcBKz+ZnTmHW3oTDPTH9sD+zqAaQo8S2xxNWqj0KG/hc6pZwe0fZ4FSvAx
LsvMuCN8UKQpBUIjPy+/KJfv1b0NkDDSdqEk/8gmY3Y6XqQJxzQ7yt7Y+zbimfqM
IBdLSLXwE9zsY2hOWNK2HFd9qFjvSiKbqwSnK2zuvAvArGfJpp0b2JmXOeDXS8qZ
5VQ=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:39 2025 by rpki-client