Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/WBerlCoyvzWnSx7AM9uVxy9XUro.roa
File: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (raw, json)
Hash identifier: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=
Subject key identifier: 58:17:AB:94:2A:32:BF:35:A7:4B:1E:C0:33:DB:95:C7:2F:57:52:BA
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0194258E41A5E990FC53AFD942312593AD84
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/WBerlCoyvzWnSx7AM9uVxy9XUro.roa
Signing time: Thu 02 Jan 2025 05:47:47 +0000
ROA not before: Thu 02 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 90.159.208.0/20 maxlen: 20
90.159.220.0/24 maxlen: 24
90.159.224.0/20 maxlen: 20
90.159.224.0/21 maxlen: 21
90.159.232.0/22 maxlen: 22
90.159.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:41:a5:e9:90:fc:53:af:d9:42:31:25:93:ad:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 2 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5817ab942a32bf35a74b1ec033db95c72f5752ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:f2:8f:70:59:da:cb:69:f5:e3:5c:4b:6a:
01:ef:8f:fd:de:4a:55:f9:1a:2a:f3:c7:8d:fa:04:
44:74:4e:56:6b:92:af:c5:a0:17:69:8c:57:af:8b:
29:89:81:7b:ae:f9:93:34:b0:1d:0f:38:9e:11:db:
be:87:f1:17:8f:bc:65:1f:98:7a:c2:36:0c:99:f4:
e2:d5:cb:e9:30:08:58:ac:e7:95:77:61:d6:18:80:
93:4b:a8:9a:4c:6f:30:0e:31:3f:ec:46:ea:02:aa:
58:25:fc:24:07:bd:ae:f1:44:e7:f7:db:98:e1:f6:
78:f6:80:1b:77:02:51:b7:21:6b:17:9a:a3:02:bf:
19:12:ca:86:0b:12:75:fa:02:58:69:d4:48:90:b5:
76:e5:6c:36:db:0f:88:fa:3f:10:8b:89:14:08:ee:
b0:65:4f:8f:9d:6c:3a:ff:1c:9e:c0:a3:68:2d:78:
23:c2:36:2a:e9:44:f6:4f:6f:b2:b4:2e:ba:ff:7a:
d0:0d:2d:7d:b7:8c:6b:d6:43:21:5e:cf:86:62:af:
ca:00:a5:df:e2:c6:fa:ac:78:cd:db:2d:c3:24:85:
90:1e:86:9e:35:60:6d:c9:bc:fd:e0:2d:e1:ff:ca:
62:b1:82:66:93:19:7d:4a:75:91:12:48:b2:bb:b1:
31:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:17:AB:94:2A:32:BF:35:A7:4B:1E:C0:33:DB:95:C7:2F:57:52:BA
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/WBerlCoyvzWnSx7AM9uVxy9XUro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.159.208.0-90.159.239.255
Signature Algorithm: sha256WithRSAEncryption
30:0f:ca:95:46:ef:92:52:c1:d9:7b:f4:44:97:ac:85:b8:d0:
36:78:be:e1:65:b5:b3:6b:fa:af:02:04:7c:41:ee:1b:55:75:
0c:48:61:48:c4:fc:4f:1c:c4:2f:1b:4a:de:52:f3:70:02:61:
71:fb:30:c0:e3:66:37:2a:f9:00:a1:d0:16:f8:48:04:0c:4b:
e1:8c:18:d2:73:8c:d0:cb:91:1f:88:cb:e1:69:a5:f3:0e:e1:
a3:39:a9:11:37:9a:6e:25:6e:02:3a:7e:0a:b4:92:4c:bf:51:
e1:18:2c:05:11:30:83:e3:60:cf:3d:9f:26:ce:0e:03:c7:0f:
b5:bf:d0:26:9c:dc:01:b0:c3:bb:c0:aa:11:b8:4f:75:a0:99:
b6:68:2c:de:b1:68:1b:f7:1a:19:3a:9f:9e:43:37:8e:99:e0:
30:7a:3a:93:be:e4:02:76:c7:16:9f:e5:6c:dd:6a:7a:de:af:
9e:4c:10:17:00:57:dc:32:7a:02:95:ce:8d:8f:2b:75:49:10:
30:b6:f9:a6:d2:21:73:ae:fd:eb:39:2f:10:fa:59:0f:08:a5:
b9:5a:fc:a4:7f:38:29:6b:c3:a0:43:80:28:57:a8:96:a5:ae:
f8:89:7a:7b:68:88:7a:54:87:9a:2f:d2:4f:90:aa:ec:67:a1:
cb:7f:d1:e8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQljkGl6ZD8U6/ZQjElk62EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx
ZjlkZDMwHhcNMjUwMTAyMDU0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODE3YWI5NDJhMzJiZjM1YTc0YjFlYzAzM2RiOTVjNzJmNTc1MmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ7yj3BZ2stp9eNcS2oB74/93kpV
+Roq88eN+gREdE5Wa5KvxaAXaYxXr4spiYF7rvmTNLAdDzieEdu+h/EXj7xlH5h6
wjYMmfTi1cvpMAhYrOeVd2HWGICTS6iaTG8wDjE/7EbqAqpYJfwkB72u8UTn99uY
4fZ49oAbdwJRtyFrF5qjAr8ZEsqGCxJ1+gJYadRIkLV25Ww22w+I+j8Qi4kUCO6w
ZU+PnWw6/xyewKNoLXgjwjYq6UT2T2+ytC66/3rQDS19t4xr1kMhXs+GYq/KAKXf
4sb6rHjN2y3DJIWQHoaeNWBtybz94C3h/8pisYJmkxl9SnWREkiyu7ExjwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFgXq5QqMr81p0sewDPblccvV1K6MB8GA1UdIwQY
MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt
MzJhYTY3MzFjMjkxLzEvV0JlcmxDb3l2elduU3g3QU05dVZ4eTlYVXJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx
LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARan9AD
BARan+AwDQYJKoZIhvcNAQELBQADggEBADAPypVG75JSwdl79ESXrIW40DZ4vuFl
tbNr+q8CBHxB7htVdQxIYUjE/E8cxC8bSt5S83ACYXH7MMDjZjcq+QCh0Bb4SAQM
S+GMGNJzjNDLkR+Iy+FppfMO4aM5qRE3mm4lbgI6fgq0kky/UeEYLAURMIPjYM89
nybODgPHD7W/0Cac3AGww7vAqhG4T3WgmbZoLN6xaBv3Ghk6n55DN46Z4DB6OpO+
5AJ2xxaf5Wzdanrer55MEBcAV9wyegKVzo2PK3VJEDC2+abSIXOu/es5LxD6WQ8I
pbla/KR/OClrw6BDgChXqJalrviJentoiHpUh5ov0k+Qquxnoct/0eg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:09:22 2025 by rpki-client