Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa
File: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (raw, json)
Hash identifier: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=
Subject key identifier: 58:FB:7C:A0:AA:F5:12:64:0E:20:AD:08:EE:A9:C7:F4:36:0F:BC:91
Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial: 019421B1C206DE306A26944C120764539C8B
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56638
IP address blocks: 192.162.216.0/24 maxlen: 24
192.162.217.0/24 maxlen: 24
192.162.218.0/24 maxlen: 24
192.162.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c2:06:de:30:6a:26:94:4c:12:07:64:53:9c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58fb7ca0aaf512640e20ad08eea9c7f4360fbc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:0b:4f:58:54:f6:d3:fe:59:bd:d9:17:58:
ff:0b:dc:f6:86:c1:86:18:67:c3:ea:91:0e:22:88:
8c:63:70:24:2b:11:96:85:7d:0d:83:1e:b7:32:e7:
07:78:a0:40:d3:cb:62:6d:6b:bf:70:0b:81:6c:aa:
79:94:0d:57:c6:3a:95:f3:e3:e2:5e:15:37:c4:8e:
4b:df:ab:26:ef:61:dc:a8:1a:97:4c:b5:50:16:a8:
e1:91:e2:d2:2e:6b:61:8b:fc:28:af:e2:c9:72:ff:
2a:dd:bd:d0:0d:89:d0:23:13:af:30:0b:76:61:51:
71:05:88:53:2d:ed:ef:69:da:0e:0a:de:13:bc:44:
e4:70:68:b0:ca:fb:47:2a:14:fd:67:d0:0e:7c:32:
54:63:79:0a:e0:83:f0:50:72:2d:40:6f:9b:1c:07:
48:e7:5d:bf:7f:1d:14:42:32:3d:29:a7:b1:26:39:
ca:ae:92:9a:49:1c:96:38:9d:55:6f:ee:57:25:12:
c1:5c:19:82:15:ae:d1:a4:e4:85:5c:f7:48:38:03:
78:99:1a:ff:0c:26:21:84:2e:07:66:9e:31:e2:6d:
4b:d6:52:c5:cf:ec:0a:6d:2c:8e:d6:cb:4a:9a:26:
51:9e:0a:8c:b8:88:74:d0:5d:10:e0:d2:81:f7:5e:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FB:7C:A0:AA:F5:12:64:0E:20:AD:08:EE:A9:C7:F4:36:0F:BC:91
X509v3 Authority Key Identifier:
keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.216.0/22
Signature Algorithm: sha256WithRSAEncryption
18:00:d4:05:a2:fa:d0:43:10:1b:72:29:35:cd:2c:c3:e4:de:
75:6e:5f:7f:ef:b9:48:11:77:fb:36:c1:c4:c1:65:33:88:42:
59:28:36:09:5a:48:25:d2:58:fd:a9:f6:be:78:8c:90:8f:ce:
52:d1:ce:0a:58:3c:17:7b:8b:4f:f2:20:aa:87:ef:98:34:d3:
bb:13:73:42:80:89:16:a9:ae:27:06:05:a2:d4:d3:73:d7:69:
f6:44:8a:9f:f1:9d:ae:93:54:ef:26:0b:d0:ba:52:e5:0e:f5:
24:aa:6c:e1:32:64:d2:10:9f:44:f5:3d:ac:80:1a:e0:0c:63:
5f:a7:7e:53:8b:55:d3:d7:88:36:4f:46:28:8a:7d:a8:fa:34:
a2:0d:5f:22:0a:f4:78:5a:e7:98:80:95:9f:4b:dd:8e:3e:06:
6a:b7:5b:57:2a:7e:83:2f:cf:77:ad:e3:c3:d4:6f:c1:ae:75:
27:1a:09:1f:b9:06:5e:5a:20:1d:d4:3c:03:bb:da:65:9d:41:
15:89:fb:3f:d4:62:da:c4:ac:f0:f7:d9:2e:a2:b7:78:5c:ba:
42:52:b7:09:74:3a:8d:c2:7b:f9:ef:fc:30:f0:4c:a8:89:2b:
38:d3:ec:60:85:2d:c3:38:05:48:24:50:f3:82:3f:43:24:28:
22:90:9b:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhscIG3jBqJpRMEgdkU5yLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzRmNzM0YzM2OTVlNjc5MDZhNzAzMmViMmU1OWZiM2Vi
NDFiMjIwHhcNMjUwMTAxMTE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGZiN2NhMGFhZjUxMjY0MGUyMGFkMDhlZWE5YzdmNDM2MGZiYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlgLT1hU9tP+Wb3ZF1j/C9z2hsGG
GGfD6pEOIoiMY3AkKxGWhX0Ngx63MucHeKBA08tibWu/cAuBbKp5lA1XxjqV8+Pi
XhU3xI5L36sm72HcqBqXTLVQFqjhkeLSLmthi/wor+LJcv8q3b3QDYnQIxOvMAt2
YVFxBYhTLe3vadoOCt4TvETkcGiwyvtHKhT9Z9AOfDJUY3kK4IPwUHItQG+bHAdI
512/fx0UQjI9KaexJjnKrpKaSRyWOJ1Vb+5XJRLBXBmCFa7RpOSFXPdIOAN4mRr/
DCYhhC4HZp4x4m1L1lLFz+wKbSyO1stKmiZRngqMuIh00F0Q4NKB915n5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFj7fKCq9RJkDiCtCO6px/Q2D7yRMB8GA1UdIwQY
MBaAFPN09zTDaV5nkGpwMusuWfs+tBsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt
NGJlZjgzMjhhYWFiLzEvV1B0OG9LcjFFbVFPSUswSTdxbkg5RFlQdkpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi
LzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKLYMA0G
CSqGSIb3DQEBCwUAA4IBAQAYANQFovrQQxAbcik1zSzD5N51bl9/77lIEXf7NsHE
wWUziEJZKDYJWkgl0lj9qfa+eIyQj85S0c4KWDwXe4tP8iCqh++YNNO7E3NCgIkW
qa4nBgWi1NNz12n2RIqf8Z2uk1TvJgvQulLlDvUkqmzhMmTSEJ9E9T2sgBrgDGNf
p35Ti1XT14g2T0Yoin2o+jSiDV8iCvR4WueYgJWfS92OPgZqt1tXKn6DL893rePD
1G/BrnUnGgkfuQZeWiAd1DwDu9plnUEVifs/1GLaxKzw99kuord4XLpCUrcJdDqN
wnv57/ww8EyoiSs40+xghS3DOAVIJFDzgj9DJCgikJu9
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:55 2025 by rpki-client