Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/WLmUyFV8H24Y5kzvnWadWBycLgo.roa
File: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (raw, json)
Hash identifier: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=
Subject key identifier: 58:B9:94:C8:55:7C:1F:6E:18:E6:4C:EF:9D:66:9D:58:1C:9C:2E:0A
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 01941FFA94E6185C05784DF13B0BC31F2B2F
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/WLmUyFV8H24Y5kzvnWadWBycLgo.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1836
IP address blocks: 185.169.60.0/22 maxlen: 22
2a0a:3d00::/48 maxlen: 48
2a0a:3d00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:94:e6:18:5c:05:78:4d:f1:3b:0b:c3:1f:2b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58b994c8557c1f6e18e64cef9d669d581c9c2e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:bb:03:dd:f0:bb:9c:15:b6:e1:70:7f:e6:
61:0c:5e:45:ec:06:0c:ba:b2:3f:0d:8d:37:82:cf:
19:dd:24:39:a6:aa:7b:75:1e:67:33:70:b3:a3:0c:
4c:69:b5:bc:9f:9b:d5:ad:f1:6e:a7:30:d4:33:e5:
be:dc:0d:6d:06:1b:ba:7f:b7:0b:3d:f0:f0:6c:fa:
e6:9a:06:39:43:e3:d3:f3:11:65:c5:a2:ed:42:03:
a9:84:88:5d:ff:a7:14:7b:19:98:95:3e:ec:8e:aa:
91:2f:61:06:35:0b:9a:ba:3d:07:b8:73:0a:85:60:
08:a1:f7:2c:47:f7:5f:67:80:e5:0a:b6:52:24:ea:
92:65:8d:cb:23:40:26:8f:fe:21:14:9c:77:40:fc:
e4:38:d6:46:60:61:c3:7f:96:65:bf:bf:fc:c9:6d:
d5:71:ba:7e:e0:ba:69:cb:3b:b7:6f:c6:94:3d:4f:
80:6d:e0:2e:1e:8a:72:07:51:ff:0e:ed:29:81:33:
23:18:80:44:09:b7:67:bf:6a:13:20:3f:63:85:47:
5c:0e:e1:38:03:8b:af:33:b4:f5:54:7d:64:e2:97:
b8:f0:e2:59:b9:3f:9e:3f:75:70:27:10:61:2c:8d:
1b:a6:be:6f:ac:32:c9:a0:35:73:b3:be:10:c5:33:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B9:94:C8:55:7C:1F:6E:18:E6:4C:EF:9D:66:9D:58:1C:9C:2E:0A
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/WLmUyFV8H24Y5kzvnWadWBycLgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.60.0/22
IPv6:
2a0a:3d00::/47
Signature Algorithm: sha256WithRSAEncryption
23:29:21:d4:fa:47:bf:90:38:9b:18:56:d9:b1:25:35:eb:d9:
3c:40:b9:26:80:58:e4:59:ab:ed:4b:df:48:a0:80:cf:fd:b1:
78:1c:4f:46:8a:79:ec:90:2b:35:e3:d3:1f:35:5a:c6:13:ad:
ee:06:46:04:62:c7:92:53:31:d3:9f:e4:5f:5d:69:7b:78:0a:
b6:0f:b9:7e:51:31:eb:b6:53:91:db:e1:7f:a8:69:ea:24:e0:
26:af:c2:e9:a5:5d:c6:d4:67:47:78:d2:8d:34:8d:c5:49:a8:
9a:a7:19:6b:2e:e2:2d:da:d9:6c:47:48:10:56:37:ae:98:3e:
5e:da:e9:be:f0:84:e0:44:64:f3:6a:25:b3:a9:6c:4a:cd:a8:
b7:01:1f:2a:a8:28:1c:15:10:91:b9:39:d0:2e:8c:33:74:1b:
ff:24:63:42:3b:97:60:19:10:09:e7:04:0c:22:ef:0f:7d:85:
be:36:2f:97:6a:13:61:01:63:30:22:fd:99:7b:87:ca:17:c0:
ed:7b:ed:e1:ea:22:bb:44:b4:06:b2:94:d5:37:ab:0d:ba:1c:
01:50:e5:b1:0c:fb:c5:fe:fc:61:b4:18:64:d2:0d:33:6e:17:
0c:de:f2:05:bb:1b:bf:69:e1:60:86:6c:f3:63:14:7d:3b:df:
31:25:6e:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQf+pTmGFwFeE3xOwvDHysvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Yzk4Y2JiMzdmZWEyZTljOWE2ZWI2ZjkyODg3YzA1YTRj
NTA2OTEwHhcNMjUwMTAxMDM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGI5OTRjODU1N2MxZjZlMThlNjRjZWY5ZDY2OWQ1ODFjOWMyZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFe7A93wu5wVtuFwf+ZhDF5F7AYM
urI/DY03gs8Z3SQ5pqp7dR5nM3CzowxMabW8n5vVrfFupzDUM+W+3A1tBhu6f7cL
PfDwbPrmmgY5Q+PT8xFlxaLtQgOphIhd/6cUexmYlT7sjqqRL2EGNQuauj0HuHMK
hWAIofcsR/dfZ4DlCrZSJOqSZY3LI0Amj/4hFJx3QPzkONZGYGHDf5Zlv7/8yW3V
cbp+4Lppyzu3b8aUPU+AbeAuHopyB1H/Du0pgTMjGIBECbdnv2oTID9jhUdcDuE4
A4uvM7T1VH1k4pe48OJZuT+eP3VwJxBhLI0bpr5vrDLJoDVzs74QxTMyIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFi5lMhVfB9uGOZM751mnVgcnC4KMB8GA1UdIwQY
MBaAFHnJjLs3/qLpyabrb5KIfAWkxQaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQt
OTE1MTc1ZTM2ZThlLzEvV0xtVXlGVjhIMjRZNWt6dm5XYWRXQnljTGdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQtOTE1MTc1ZTM2ZThl
LzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuak8MA8E
AgACMAkDBwEqCj0AAAAwDQYJKoZIhvcNAQELBQADggEBACMpIdT6R7+QOJsYVtmx
JTXr2TxAuSaAWORZq+1L30iggM/9sXgcT0aKeeyQKzXj0x81WsYTre4GRgRix5JT
MdOf5F9daXt4CrYPuX5RMeu2U5Hb4X+oaeok4CavwumlXcbUZ0d40o00jcVJqJqn
GWsu4i3a2WxHSBBWN66YPl7a6b7whOBEZPNqJbOpbErNqLcBHyqoKBwVEJG5OdAu
jDN0G/8kY0I7l2AZEAnnBAwi7w99hb42L5dqE2EBYzAi/Zl7h8oXwO177eHqIrtE
tAaylNU3qw26HAFQ5bEM+8X+/GG0GGTSDTNuFwze8gW7G79p4WCGbPNjFH073zEl
bik=
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:31:38 2025 by rpki-client