Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa
File: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (raw, json)
Hash identifier: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=
Subject key identifier: 59:60:EB:D9:49:BC:35:75:F0:5A:E9:1B:2B:A7:23:D4:11:77:B7:B4
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E63EB4AD91533CF0207D7BF819A7
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa
Signing time: Wed 01 Jan 2025 21:48:59 +0000
ROA not before: Wed 01 Jan 2025 21:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199820
IP address blocks: 194.124.38.0/24 maxlen: 24
212.22.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e6:3e:b4:ad:91:53:3c:f0:20:7d:7b:f8:19:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5960ebd949bc3575f05ae91b2ba723d41177b7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:04:ae:e8:93:42:6b:c7:5d:6f:59:6a:fb:
09:9a:3d:f4:4e:93:f1:28:ce:fe:c5:02:93:ce:ee:
ec:7a:9d:14:2f:87:b6:6b:9b:b0:9b:7a:fc:53:00:
22:f3:62:5c:c4:3e:4d:0f:71:41:5f:58:b2:bf:14:
ed:a0:bd:5c:a7:bd:f7:25:60:7f:e6:8a:f9:9b:be:
4d:2c:18:fb:8c:6a:69:37:71:03:cc:0e:ff:34:3c:
a5:bd:de:20:d9:bc:bc:97:00:17:de:8f:4e:67:1c:
77:30:29:3e:32:b0:21:a3:c7:ef:4c:e5:b9:7e:93:
60:ae:50:fb:f9:79:51:23:40:9f:bb:8f:ec:47:11:
6c:8e:f1:13:11:9e:7a:7e:b3:6b:58:9c:2e:6c:dd:
82:30:79:6f:d5:13:75:af:08:e6:a8:ad:b0:bb:19:
0a:f3:6c:c3:0d:78:e0:42:54:61:f8:50:b5:83:ac:
5d:e5:94:ca:f5:2f:96:22:25:6e:74:b0:3d:9f:ab:
a9:ae:10:7d:67:df:93:c5:f2:46:7f:bf:b2:45:10:
b5:0a:62:00:a0:f5:eb:5c:41:78:0e:44:65:12:31:
c7:45:bb:cc:1d:28:61:49:61:7f:15:c3:7d:5d:c4:
0e:57:da:ca:e7:39:07:67:10:ae:4c:bf:e4:1d:81:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:60:EB:D9:49:BC:35:75:F0:5A:E9:1B:2B:A7:23:D4:11:77:B7:B4
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.38.0/24
212.22.78.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:a8:b4:9a:b8:ef:1c:34:ef:69:17:ee:dc:6d:23:73:6d:8e:
cb:94:26:a2:c8:73:a0:aa:c8:cf:3c:d4:f1:2a:d1:8e:9e:29:
a6:3a:ae:01:15:7b:18:8a:a5:e2:79:e3:59:80:ed:a8:3d:5a:
78:6a:d9:a2:70:c2:8f:be:c2:52:f4:f6:96:a5:e3:50:b6:95:
e6:f8:0b:f5:74:e8:df:ef:9b:e6:2f:94:c6:24:e6:9a:f6:4a:
bd:a2:7e:1c:fd:23:57:84:dd:13:28:ac:42:6c:af:c9:32:1a:
70:ff:20:cc:f1:62:5e:15:ad:c9:36:be:90:28:60:a7:d5:0d:
38:00:ea:b5:cd:03:b2:de:d2:63:e9:de:98:15:22:ab:9e:dd:
9f:c3:69:dd:d3:0e:2c:f7:18:da:83:bb:1b:b9:a7:3f:59:42:
69:d4:32:15:91:7b:bc:34:61:45:75:ee:59:f6:98:c2:78:af:
78:e0:14:94:86:36:bf:91:be:70:03:80:40:d3:73:83:dd:c4:
02:a9:9a:50:09:f5:f3:81:bb:9a:76:f0:79:e8:65:c1:be:c4:
c0:08:87:34:29:39:31:65:03:b6:45:aa:98:64:22:a3:5f:45:
13:1a:bd:58:61:a4:1d:8c:f1:5a:97:87:39:83:ee:8a:27:bb:
5a:59:8c:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1+Y+tK2RUzzwIH17+BmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjUwMTAxMjE0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTYwZWJkOTQ5YmMzNTc1ZjA1YWU5MWIyYmE3MjNkNDExNzdiN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYYEruiTQmvHXW9ZavsJmj30TpPx
KM7+xQKTzu7sep0UL4e2a5uwm3r8UwAi82JcxD5ND3FBX1iyvxTtoL1cp733JWB/
5or5m75NLBj7jGppN3EDzA7/NDylvd4g2by8lwAX3o9OZxx3MCk+MrAho8fvTOW5
fpNgrlD7+XlRI0Cfu4/sRxFsjvETEZ56frNrWJwubN2CMHlv1RN1rwjmqK2wuxkK
82zDDXjgQlRh+FC1g6xd5ZTK9S+WIiVudLA9n6uprhB9Z9+TxfJGf7+yRRC1CmIA
oPXrXEF4DkRlEjHHRbvMHShhSWF/FcN9XcQOV9rK5zkHZxCuTL/kHYFVKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFlg69lJvDV18FrpGyunI9QRd7e0MB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvV1dEcjJVbThOWFh3V3VrYks2Y2oxQkYzdDdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwnwmAwQA
1BZOMA0GCSqGSIb3DQEBCwUAA4IBAQDEqLSauO8cNO9pF+7cbSNzbY7LlCaiyHOg
qsjPPNTxKtGOnimmOq4BFXsYiqXieeNZgO2oPVp4atmicMKPvsJS9PaWpeNQtpXm
+Av1dOjf75vmL5TGJOaa9kq9on4c/SNXhN0TKKxCbK/JMhpw/yDM8WJeFa3JNr6Q
KGCn1Q04AOq1zQOy3tJj6d6YFSKrnt2fw2nd0w4s9xjag7sbuac/WUJp1DIVkXu8
NGFFde5Z9pjCeK944BSUhja/kb5wA4BA03OD3cQCqZpQCfXzgbuadvB56GXBvsTA
CIc0KTkxZQO2RaqYZCKjX0UTGr1YYaQdjPFal4c5g+6KJ7taWYwq
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:24:13 2025 by rpki-client