Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/wBcVnV6GV1PLpN1_UQhROd-ziWs.roa
File: wBcVnV6GV1PLpN1_UQhROd-ziWs.roa (raw, json)
Hash identifier: 8tEjzzagR6kqOzcrllrUMEcovJGqHcmFHZF+QG9fdx0=
Subject key identifier: C0:17:15:9D:5E:86:57:53:CB:A4:DD:7F:51:08:51:39:DF:B3:89:6B
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 0196005B5E4756A5763A443E5794EEBDCBE4
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/wBcVnV6GV1PLpN1_UQhROd-ziWs.roa
Signing time: Fri 04 Apr 2025 10:31:49 +0000
ROA not before: Fri 04 Apr 2025 10:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201942
IP address blocks: 46.226.144.0/21 maxlen: 21
185.58.196.0/22 maxlen: 22
185.119.112.0/22 maxlen: 24
185.232.41.0/24 maxlen: 24
193.46.216.0/24 maxlen: 24
193.163.117.0/24 maxlen: 24
194.26.143.0/24 maxlen: 24
195.182.205.0/24 maxlen: 24
195.184.72.0/24 maxlen: 24
212.23.223.0/24 maxlen: 24
2a02:6520::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:5b:5e:47:56:a5:76:3a:44:3e:57:94:ee:bd:cb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Apr 4 10:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c017159d5e865753cba4dd7f51085139dfb3896b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:3b:74:e0:2e:b0:67:bb:94:97:73:91:ca:
0d:98:e2:8e:a5:ba:e7:d7:ad:2d:ab:79:7d:3d:f3:
23:6b:01:08:1f:3e:e7:c5:34:86:45:e8:c0:b1:58:
5f:c8:78:18:da:ab:ce:c9:02:2e:76:e7:5c:fb:77:
a6:d1:e3:38:79:73:f2:22:fa:14:e9:4a:69:2c:bb:
8c:d9:d8:d8:fd:3e:d4:99:bd:30:67:25:b4:0e:ab:
ee:a4:ea:e8:9a:8c:c8:20:63:62:cc:26:5c:2f:85:
57:0a:1a:a0:8a:27:0b:de:87:9c:41:0b:9e:c4:cc:
90:d3:59:37:50:c2:d7:54:a3:5a:fc:46:88:0e:da:
dc:14:9d:2b:2e:39:23:01:b9:11:7e:53:34:0f:9f:
d3:26:42:8f:8c:5d:2d:11:93:a9:4b:82:a3:63:75:
e2:8a:77:a3:2a:f1:c3:76:48:2d:1a:f0:f8:83:b2:
ae:d8:dc:fa:51:83:a0:19:7f:34:4f:9e:06:d6:d1:
e7:fd:3d:a9:fb:a0:b6:89:ca:d6:2d:5a:c6:8d:72:
e6:89:f4:a6:24:8e:de:e0:55:94:62:0d:e5:b3:b0:
8e:49:48:e6:45:39:68:cd:8f:ac:7f:0c:19:51:a9:
0e:9f:11:1d:bd:08:75:40:f3:11:77:4f:d9:ff:53:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:15:9D:5E:86:57:53:CB:A4:DD:7F:51:08:51:39:DF:B3:89:6B
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/wBcVnV6GV1PLpN1_UQhROd-ziWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.144.0/21
185.58.196.0/22
185.119.112.0/22
185.232.41.0/24
193.46.216.0/24
193.163.117.0/24
194.26.143.0/24
195.182.205.0/24
195.184.72.0/24
212.23.223.0/24
IPv6:
2a02:6520::/32
Signature Algorithm: sha256WithRSAEncryption
0f:e4:03:ba:d6:cd:d0:7f:a0:d0:65:95:39:c6:30:8b:f7:e2:
26:b0:77:26:db:5a:b2:1c:8f:8f:e8:10:df:7f:4c:ee:f1:55:
89:bb:1e:29:d7:fe:d7:3f:a1:04:0b:e9:42:42:51:79:85:f0:
5d:c6:95:a7:e5:30:18:20:3c:9a:4c:44:51:dd:08:0c:fb:9e:
25:68:5e:78:fd:b2:cf:04:af:a4:18:72:4c:e8:05:6b:78:96:
a0:56:95:22:20:2b:96:71:36:aa:7b:d2:fd:0f:6f:b4:f9:ee:
63:76:24:4b:92:21:33:d4:df:83:04:d4:9a:3f:b6:d9:10:44:
fd:b7:d5:2a:ed:0b:30:1d:92:79:35:0c:d3:d8:9e:6f:3f:6d:
b4:a9:58:17:83:d4:c3:bd:13:f8:b2:a0:a4:81:2d:f2:4d:b8:
e0:6b:58:8e:ab:07:2e:a3:15:dd:df:78:3e:76:82:2d:21:5c:
2e:e6:59:5c:c7:fe:67:e9:91:15:95:c7:55:b7:a4:53:38:49:
74:cd:d4:cb:77:dd:c1:3e:81:ca:59:5b:fb:e7:30:0f:7b:7d:
71:18:35:78:9b:f4:22:36:2d:ae:d3:4b:21:81:a0:4b:bb:8d:
c1:2e:62:ad:26:ea:b5:84:d7:4a:28:4f:de:cc:d3:82:94:77:
22:ff:14:d9
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAZYAW15HVqV2OkQ+V5TuvcvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi
YzU5MDEwHhcNMjUwNDA0MTAzMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDE3MTU5ZDVlODY1NzUzY2JhNGRkN2Y1MTA4NTEzOWRmYjM4OTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSc7dOAusGe7lJdzkcoNmOKOpbrn
160tq3l9PfMjawEIHz7nxTSGRejAsVhfyHgY2qvOyQIududc+3em0eM4eXPyIvoU
6UppLLuM2djY/T7Umb0wZyW0DqvupOromozIIGNizCZcL4VXChqgiicL3oecQQue
xMyQ01k3UMLXVKNa/EaIDtrcFJ0rLjkjAbkRflM0D5/TJkKPjF0tEZOpS4KjY3Xi
inejKvHDdkgtGvD4g7Ku2Nz6UYOgGX80T54G1tHn/T2p+6C2icrWLVrGjXLmifSm
JI7e4FWUYg3ls7COSUjmRTlozY+sfwwZUakOnxEdvQh1QPMRd0/Z/1MJ4QIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFMAXFZ1ehldTy6Tdf1EIUTnfs4lrMB8GA1UdIwQY
MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEvd0JjVm5WNkdWMVBMcE4xX1VRaFJPZC16aVdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDLuKQAwQC
uTrEAwQCuXdwAwQAuegpAwQAwS7YAwQAwaN1AwQAwhqPAwQAw7bNAwQAw7hIAwQA
1BffMA0EAgACMAcDBQAqAmUgMA0GCSqGSIb3DQEBCwUAA4IBAQAP5AO61s3Qf6DQ
ZZU5xjCL9+ImsHcm21qyHI+P6BDff0zu8VWJux4p1/7XP6EEC+lCQlF5hfBdxpWn
5TAYIDyaTERR3QgM+54laF54/bLPBK+kGHJM6AVreJagVpUiICuWcTaqe9L9D2+0
+e5jdiRLkiEz1N+DBNSaP7bZEET9t9Uq7QswHZJ5NQzT2J5vP220qVgXg9TDvRP4
sqCkgS3yTbjga1iOqwcuoxXd33g+doItIVwu5llcx/5n6ZEVlcdVt6RTOEl0zdTL
d93BPoHKWVv75zAPe31xGDV4m/QiNi2u00shgaBLu43BLmKtJuq1hNdKKE/ezNOC
lHci/xTZ
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:33:04 2025 by rpki-client