Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa
File: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (raw, json)
Hash identifier: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=
Subject key identifier: 59:CD:BE:50:70:53:7C:5F:97:1C:BC:E0:41:2D:12:C0:29:AF:94:1D
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019425223A65C10EDAC6D8F11AD445D35F04
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210016
IP address blocks: 46.21.251.0/24 maxlen: 24
212.126.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3a:65:c1:0e:da:c6:d8:f1:1a:d4:45:d3:5f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59cdbe5070537c5f971cbce0412d12c029af941d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:f9:ac:1b:b1:cc:49:40:34:a7:74:7c:2e:
8a:55:94:95:39:56:9c:7b:c1:3b:4f:50:2a:af:3d:
6e:3d:75:7d:6e:c1:82:23:55:20:67:da:c0:5c:e3:
e2:01:69:d3:a7:e9:02:f1:56:6d:69:0a:50:54:f8:
cb:08:bd:12:72:35:46:bf:af:d6:6f:5b:b2:29:b4:
8d:76:b5:75:70:74:64:0b:c7:35:11:33:51:fc:5e:
c9:e1:b4:7d:b5:8f:c9:0c:56:2c:f7:a2:c7:eb:f1:
1f:f3:5e:77:b5:49:9d:1e:bd:86:d8:46:cd:56:be:
55:0a:0e:d1:54:c3:ac:b9:ce:cb:06:51:05:cb:1f:
3d:fc:de:67:f9:b4:74:bf:b7:e6:02:a4:90:be:53:
c3:de:bd:5a:3b:93:19:54:6d:48:7e:fd:b3:12:1d:
ba:eb:37:34:be:89:83:bf:41:f7:ad:25:88:c1:ab:
f4:2d:95:04:78:2c:5d:fc:fd:58:c3:5b:b0:5a:69:
2b:02:65:46:f8:05:a1:f3:91:2b:39:27:60:2c:21:
63:3c:74:e9:15:50:03:7e:a3:a2:f7:f6:9d:7d:6e:
9f:07:c8:12:95:df:78:db:0e:18:55:b8:ff:2a:e7:
59:57:1c:9f:1a:33:a2:2f:fb:a8:95:a5:71:8f:53:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CD:BE:50:70:53:7C:5F:97:1C:BC:E0:41:2D:12:C0:29:AF:94:1D
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.116.0/24
Signature Algorithm: sha256WithRSAEncryption
37:96:dd:b8:1e:5f:7c:9b:7c:9a:77:4f:b3:d1:f1:1d:5f:56:
90:5e:dd:3c:45:c3:32:b4:01:04:24:91:fb:a4:5a:98:8c:88:
f1:dc:58:30:89:41:23:e3:34:12:73:b5:cf:02:c6:93:ee:a0:
4b:bc:f5:4e:c4:34:e1:19:20:be:37:35:c2:26:83:4a:c0:4f:
8e:b8:3e:9d:29:93:01:6d:20:f3:63:14:17:4d:d2:55:52:34:
52:f2:50:ce:a5:e1:00:74:00:4c:6a:de:1e:dd:31:5e:15:82:
36:32:23:fa:13:df:02:39:e3:8a:8b:e8:2e:da:36:8d:12:dc:
a2:98:3e:16:f5:ee:17:64:6f:6d:2e:11:04:08:2f:34:79:13:
c2:ad:7c:70:be:d0:08:4e:47:a6:9b:6c:23:66:08:3e:c5:4d:
7b:18:da:db:6b:7d:e0:75:ab:e1:ad:43:19:1a:ca:6b:93:4a:
de:47:ad:1c:cd:69:0a:f8:00:e3:c0:50:01:40:55:34:23:f2:
a3:1f:87:89:58:f5:fd:46:fe:c6:46:df:50:1f:36:87:30:f6:
8d:4f:c5:6e:ea:06:f9:24:d6:68:a5:87:22:1c:15:7e:c3:36:
50:71:7d:10:ca:c1:13:7f:4d:4b:b5:23:32:16:29:c7:bc:db:
b3:74:dc:be
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQlIjplwQ7axtjxGtRF018EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy
MzMyMmMwHhcNMjUwMTAyMDM0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWNkYmU1MDcwNTM3YzVmOTcxY2JjZTA0MTJkMTJjMDI5YWY5NDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv35rBuxzElANKd0fC6KVZSVOVac
e8E7T1Aqrz1uPXV9bsGCI1UgZ9rAXOPiAWnTp+kC8VZtaQpQVPjLCL0ScjVGv6/W
b1uyKbSNdrV1cHRkC8c1ETNR/F7J4bR9tY/JDFYs96LH6/Ef8153tUmdHr2G2EbN
Vr5VCg7RVMOsuc7LBlEFyx89/N5n+bR0v7fmAqSQvlPD3r1aO5MZVG1Ifv2zEh26
6zc0vomDv0H3rSWIwav0LZUEeCxd/P1Yw1uwWmkrAmVG+AWh85ErOSdgLCFjPHTp
FVADfqOi9/adfW6fB8gSld942w4YVbj/KudZVxyfGjOiL/uolaVxj1NpIwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFnNvlBwU3xflxy84EEtEsApr5QdMB8GA1UdIwQY
MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0
LWE0OWU1YzY2MzNiZC8xL1djMi1VSEJUZkYtWEhMemdRUzBTd0NtdmxCMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNi
ZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAuFfsD
BADUfnQwDQYJKoZIhvcNAQELBQADggEBADeW3bgeX3ybfJp3T7PR8R1fVpBe3TxF
wzK0AQQkkfukWpiMiPHcWDCJQSPjNBJztc8CxpPuoEu89U7ENOEZIL43NcImg0rA
T464Pp0pkwFtIPNjFBdN0lVSNFLyUM6l4QB0AExq3h7dMV4VgjYyI/oT3wI544qL
6C7aNo0S3KKYPhb17hdkb20uEQQILzR5E8KtfHC+0AhOR6abbCNmCD7FTXsY2ttr
feB1q+GtQxkaymuTSt5HrRzNaQr4AOPAUAFAVTQj8qMfh4lY9f1G/sZG31AfNocw
9o1PxW7qBvkk1milhyIcFX7DNlBxfRDKwRN/TUu1IzIWKce827N03L4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:16 2025 by rpki-client