Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/sQw9W7aILGy9Pa9_58J_ycedqSY.roa
File: sQw9W7aILGy9Pa9_58J_ycedqSY.roa (raw, json)
Hash identifier: 3h6rvOsq/U2tYyEzeXc8KFTE7Z25JXJxvFL7/RbG7Wg=
Subject key identifier: B1:0C:3D:5B:B6:88:2C:6C:BD:3D:AF:7F:E7:C2:7F:C9:C7:9D:A9:26
Certificate issuer: /CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Certificate serial: 01942067F377AD3A3CABA7FA88EE8C6E7E73
Authority key identifier: 5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/sQw9W7aILGy9Pa9_58J_ycedqSY.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209959
IP address blocks: 185.215.92.0/22 maxlen: 22
2a02:fc40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f3:77:ad:3a:3c:ab:a7:fa:88:ee:8c:6e:7e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b10c3d5bb6882c6cbd3daf7fe7c27fc9c79da926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3b:53:e9:72:f1:34:84:42:31:75:96:cf:59:
fb:27:aa:25:e8:cf:b3:6e:df:e4:81:19:05:52:fa:
9e:5f:ac:a0:8c:0d:6e:f6:b4:eb:ab:4a:f9:8b:32:
8b:c7:2a:a7:55:38:03:6e:22:f7:18:03:f6:39:fc:
d9:9f:86:36:bc:69:8a:34:35:01:73:9e:28:c8:21:
24:b5:6e:99:34:7b:38:4b:87:51:11:f1:0e:0d:fa:
be:17:20:d0:05:22:92:b5:72:ca:e3:01:f4:02:54:
58:26:aa:f0:31:7f:d1:47:bd:06:b4:df:c4:f5:fc:
66:38:26:8e:a8:5f:30:a0:12:91:82:11:76:0a:ac:
48:e6:ae:89:60:2d:f5:0a:92:ff:3f:78:90:89:57:
b6:5f:c8:84:2e:89:54:21:a3:ba:d0:52:3c:be:ff:
e2:a1:f2:dd:3b:c2:0b:89:91:7b:c3:31:b5:92:b3:
10:f6:41:68:ac:cb:cc:02:ff:a9:e1:41:66:81:ac:
3a:c9:c1:b4:dd:52:31:7c:86:dc:03:fc:5e:76:31:
28:47:08:9b:c1:da:13:c2:63:28:a8:5c:fe:3d:ce:
3e:e8:62:0b:37:a9:57:52:3a:bb:6c:40:9b:dd:24:
74:de:06:a3:f8:b7:af:61:44:80:43:e9:26:03:89:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0C:3D:5B:B6:88:2C:6C:BD:3D:AF:7F:E7:C2:7F:C9:C7:9D:A9:26
X509v3 Authority Key Identifier:
keyid:5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/sQw9W7aILGy9Pa9_58J_ycedqSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.92.0/22
IPv6:
2a02:fc40::/29
Signature Algorithm: sha256WithRSAEncryption
de:f9:89:90:3d:13:a2:ba:9d:e8:65:00:68:2f:df:8f:98:e1:
6a:55:2c:9a:8d:b1:5b:1b:da:8b:33:ed:99:8f:1f:47:f7:54:
93:0a:7f:ee:60:f1:d1:81:de:d3:57:5e:95:12:10:d8:0f:13:
9c:82:6f:df:cf:4a:73:12:f7:bc:bb:1a:8f:d4:12:7f:ab:0e:
d8:fc:8a:1a:ef:43:07:2c:d8:96:bc:ae:25:d2:4d:85:1b:3e:
c0:38:b1:62:01:c9:7c:1b:bf:1f:6a:b3:52:19:40:35:77:b4:
1d:e3:65:d3:f6:a7:b7:e7:5f:94:8f:2c:2f:31:67:93:cc:8b:
e2:b9:11:e5:9d:25:c5:19:98:b7:8d:1c:76:5b:1f:99:76:54:
e1:b3:9c:2a:8d:9c:6a:f5:86:8e:15:0a:13:2a:d0:df:84:ba:
1c:ad:16:ec:80:91:b0:4d:b0:03:26:10:47:ff:df:d3:36:3d:
df:61:13:20:29:d6:04:0b:05:9b:f0:d2:2b:e9:0c:31:86:b4:
5c:8b:b2:52:d5:8f:16:d5:a3:00:89:cc:1e:4d:fd:07:fe:52:
8d:ea:2b:b4:a4:92:a6:50:a9:73:31:3f:75:af:fe:ca:13:2b:
f1:46:73:ac:0b:73:6b:25:f4:f3:9c:da:98:53:89:2d:12:6a:
4b:59:ae:fa
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgZ/N3rTo8q6f6iO6Mbn5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGFjZDIxMTIzZjllNzVhOTJhMGU2ZDRiMjZmOWU5Yzk2
MzY3NWYwHhcNMjUwMTAxMDU0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTBjM2Q1YmI2ODgyYzZjYmQzZGFmN2ZlN2MyN2ZjOWM3OWRhOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DtT6XLxNIRCMXWWz1n7J6ol6M+z
bt/kgRkFUvqeX6ygjA1u9rTrq0r5izKLxyqnVTgDbiL3GAP2OfzZn4Y2vGmKNDUB
c54oyCEktW6ZNHs4S4dREfEODfq+FyDQBSKStXLK4wH0AlRYJqrwMX/RR70GtN/E
9fxmOCaOqF8woBKRghF2CqxI5q6JYC31CpL/P3iQiVe2X8iELolUIaO60FI8vv/i
ofLdO8ILiZF7wzG1krMQ9kForMvMAv+p4UFmgaw6ycG03VIxfIbcA/xedjEoRwib
wdoTwmMoqFz+Pc4+6GILN6lXUjq7bECb3SR03gaj+LevYUSAQ+kmA4mK9wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLEMPVu2iCxsvT2vf+fCf8nHnakmMB8GA1UdIwQY
MBaAFFpKzSESP551qSoObUsm+enJY2dfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2tyTklSSV9ubldwS2c1dFN5YjU2Y2xqWjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zMWNiYzgtM2MyMy00YmRmLTgzYTQt
YmNkMzMwMjgxMGUzLzEvc1F3OVc3YUlMR3k5UGE5XzU4Sl95Y2VkcVNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zMWNiYzgtM2MyMy00YmRmLTgzYTQtYmNkMzMwMjgxMGUz
LzEvV2tyTklSSV9ubldwS2c1dFN5YjU2Y2xqWjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuddcMA0E
AgACMAcDBQMqAvxAMA0GCSqGSIb3DQEBCwUAA4IBAQDe+YmQPROiup3oZQBoL9+P
mOFqVSyajbFbG9qLM+2Zjx9H91STCn/uYPHRgd7TV16VEhDYDxOcgm/fz0pzEve8
uxqP1BJ/qw7Y/Ioa70MHLNiWvK4l0k2FGz7AOLFiAcl8G78farNSGUA1d7Qd42XT
9qe351+UjywvMWeTzIviuRHlnSXFGZi3jRx2Wx+ZdlThs5wqjZxq9YaOFQoTKtDf
hLocrRbsgJGwTbADJhBH/9/TNj3fYRMgKdYECwWb8NIr6QwxhrRci7JS1Y8W1aMA
icweTf0H/lKN6iu0pJKmUKlzMT91r/7KEyvxRnOsC3NrJfTznNqYU4ktEmpLWa76
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:55:35 2025 by rpki-client