Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/W1awuHaHMUM8Quc80WAi-XtdIzY.roa
File: W1awuHaHMUM8Quc80WAi-XtdIzY.roa (raw, json)
Hash identifier: +ggiQE1BpawHqA/zPCH8mung319bbE2FMHPQr3Jv5zk=
Subject key identifier: 5B:56:B0:B8:76:87:31:43:3C:42:E7:3C:D1:60:22:F9:7B:5D:23:36
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 019427B5BE34B859A9982B6A0BA785566EDD
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/W1awuHaHMUM8Quc80WAi-XtdIzY.roa
Signing time: Thu 02 Jan 2025 15:50:09 +0000
ROA not before: Thu 02 Jan 2025 15:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58350
IP address blocks: 195.150.48.0/20 maxlen: 20
195.150.76.0/23 maxlen: 23
2001:6df:fff0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:be:34:b8:59:a9:98:2b:6a:0b:a7:85:56:6e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b56b0b8768731433c42e73cd16022f97b5d2336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:7f:6e:99:c2:8d:74:76:6b:d5:13:95:67:
f3:e0:a7:65:af:cf:21:8b:39:60:2b:64:83:30:b3:
a0:f0:93:f5:f0:d2:50:bd:21:53:ff:52:10:8a:46:
0d:10:a9:68:8a:1b:24:40:11:ae:4b:b8:0c:00:88:
af:1a:ac:d8:42:dc:96:4e:77:dc:2b:c0:11:5e:e2:
ef:80:b8:d3:57:62:b1:b6:e0:bc:5a:d3:93:93:d2:
61:21:a0:a5:d2:01:e1:b5:ad:18:c7:5d:f6:c2:fc:
a8:82:34:02:ca:db:ea:81:5d:12:db:5a:c9:b3:7a:
bb:69:29:7c:45:ab:b4:6c:a1:58:cf:7e:b0:2f:24:
9b:ce:58:fa:01:b9:e7:14:88:0c:8d:bb:48:91:6d:
39:b2:a2:cc:76:f9:13:5e:b6:fd:4e:8e:d6:33:3f:
4b:c2:62:fa:70:59:38:ba:3f:09:b4:db:be:fd:ad:
e7:9c:bf:4c:97:7e:dc:f4:0a:a7:14:99:ae:7c:47:
b2:fa:6c:3c:d5:29:39:c7:20:25:d7:56:a4:8f:8d:
83:18:cb:e3:92:ab:eb:15:86:dd:50:96:77:3a:81:
bd:58:73:78:43:ee:21:ad:74:5b:71:2d:8a:07:d4:
be:2d:8c:3e:4e:61:25:5d:76:c1:05:e2:a8:98:56:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:56:B0:B8:76:87:31:43:3C:42:E7:3C:D1:60:22:F9:7B:5D:23:36
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/W1awuHaHMUM8Quc80WAi-XtdIzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.150.48.0/20
195.150.76.0/23
IPv6:
2001:6df:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
0e:b4:29:58:de:d8:5f:b2:62:c8:0c:59:ca:03:f4:18:e6:ff:
ba:6c:f5:44:73:ca:8e:72:b2:56:9f:03:db:04:60:fe:9c:24:
ab:8f:ba:7a:77:05:0d:f6:e4:93:e7:6a:f2:53:67:c9:b7:5a:
f7:0d:86:cf:f2:3f:09:01:a2:5a:a1:c9:1c:9f:70:fc:26:ec:
08:cc:c1:81:db:6e:20:95:1c:46:1d:6c:c5:3b:60:c0:11:ef:
1a:f1:93:18:f5:47:77:b1:46:d1:a8:41:6f:c8:66:dd:33:7b:
4d:74:5c:5d:2d:1c:af:4c:25:b8:c2:04:45:cf:07:35:35:2b:
b2:68:6c:97:85:29:fd:c4:b6:f3:27:49:7c:55:6e:7e:6d:64:
60:28:ee:32:93:1d:62:90:21:63:87:8e:aa:95:9e:5c:46:2b:
2b:6a:c1:c9:04:b1:97:0c:11:f4:cb:c6:01:f4:ed:8e:c3:22:
4f:49:9b:c2:89:83:23:15:f7:90:68:8f:66:71:8a:67:f8:b8:
97:4c:19:fa:ae:ee:c9:40:c7:2c:d8:2e:b6:8c:fd:92:66:6c:
0c:5f:a4:71:72:bc:76:d9:f5:61:db:44:e2:b5:c8:2c:b7:e1:
14:db:d4:77:5a:e5:44:f4:31:8b:b6:8d:f1:4e:1d:68:24:a7:
f1:a2:9e:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQntb40uFmpmCtqC6eFVm7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4
ODE4MDQwHhcNMjUwMTAyMTU1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjU2YjBiODc2ODczMTQzM2M0MmU3M2NkMTYwMjJmOTdiNWQyMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXd/bpnCjXR2a9UTlWfz4Kdlr88h
izlgK2SDMLOg8JP18NJQvSFT/1IQikYNEKloihskQBGuS7gMAIivGqzYQtyWTnfc
K8ARXuLvgLjTV2KxtuC8WtOTk9JhIaCl0gHhta0Yx132wvyogjQCytvqgV0S21rJ
s3q7aSl8Rau0bKFYz36wLySbzlj6AbnnFIgMjbtIkW05sqLMdvkTXrb9To7WMz9L
wmL6cFk4uj8JtNu+/a3nnL9Ml37c9AqnFJmufEey+mw81Sk5xyAl11akj42DGMvj
kqvrFYbdUJZ3OoG9WHN4Q+4hrXRbcS2KB9S+LYw+TmElXXbBBeKomFYUmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtWsLh2hzFDPELnPNFgIvl7XSM2MB8GA1UdIwQY
MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx
LTE2Y2Q4ZjRmYjRiOS8xL1cxYXd1SGFITVVNOFF1YzgwV0FpLVh0ZEl6WS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUxLTE2Y2Q4ZjRmYjRi
OS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBATDljAD
BAHDlkwwDwQCAAIwCQMHBCABBt//8DANBgkqhkiG9w0BAQsFAAOCAQEADrQpWN7Y
X7JiyAxZygP0GOb/umz1RHPKjnKyVp8D2wRg/pwkq4+6encFDfbkk+dq8lNnybda
9w2Gz/I/CQGiWqHJHJ9w/CbsCMzBgdtuIJUcRh1sxTtgwBHvGvGTGPVHd7FG0ahB
b8hm3TN7TXRcXS0cr0wluMIERc8HNTUrsmhsl4Up/cS28ydJfFVufm1kYCjuMpMd
YpAhY4eOqpWeXEYrK2rByQSxlwwR9MvGAfTtjsMiT0mbwomDIxX3kGiPZnGKZ/i4
l0wZ+q7uyUDHLNgutoz9kmZsDF+kcXK8dtn1YdtE4rXILLfhFNvUd1rlRPQxi7aN
8U4daCSn8aKeYQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:33 2025 by rpki-client