Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/wV_UPXPoWr2rMigTEJujKEPHkRU.roa
File: wV_UPXPoWr2rMigTEJujKEPHkRU.roa (raw, json)
Hash identifier: sWrQ1dC0i8v5NdCh/KJb/CYIzz2swLex9WzWGoX8cPc=
Subject key identifier: C1:5F:D4:3D:73:E8:5A:BD:AB:32:28:13:10:9B:A3:28:43:C7:91:15
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 019427475DD958D135475BBCEB2743C4757A
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/wV_UPXPoWr2rMigTEJujKEPHkRU.roa
Signing time: Thu 02 Jan 2025 13:49:36 +0000
ROA not before: Thu 02 Jan 2025 13:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133398
IP address blocks: 2a10:1fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:5d:d9:58:d1:35:47:5b:bc:eb:27:43:c4:75:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Jan 2 13:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c15fd43d73e85abdab322813109ba32843c79115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:b9:0d:57:8f:28:4b:64:f4:50:fc:8b:99:
37:c0:1c:4c:10:42:8d:fb:1b:ac:94:2d:18:9b:db:
83:cc:90:f6:5e:10:8a:e5:20:02:df:9a:fc:6f:92:
d6:9d:9c:ed:5c:d1:f4:1a:19:f1:5f:89:a6:e9:2f:
4b:09:08:0f:50:b3:cf:71:c1:96:00:84:99:48:e0:
55:f4:e2:5e:26:49:1f:03:14:bc:53:7d:cd:38:f8:
18:35:c7:17:0e:7e:a8:1e:7b:0a:83:74:7d:62:c8:
ba:ae:fd:1d:6f:d9:0b:5b:9c:ff:ce:55:a1:c9:fa:
3e:8c:28:30:9f:1b:16:3e:0a:46:0d:6a:05:13:11:
45:cf:f0:2f:d2:e8:46:0c:47:3e:53:11:47:f3:ed:
2a:03:81:bc:bf:5d:0a:52:67:cc:a4:09:0b:61:5a:
5c:3e:47:b5:9f:b9:2c:7f:f6:3b:7d:9f:8a:fe:d5:
d4:56:82:d0:d0:5d:9f:f4:42:76:c0:fc:89:5a:40:
7c:6e:69:53:93:be:b2:dc:4d:ce:51:1f:15:8f:aa:
51:0a:5a:a0:db:12:ec:0f:81:47:0d:c6:7c:52:c4:
6e:32:4c:0b:8b:b5:2e:e7:c9:9e:73:6a:b6:fa:4f:
59:3f:12:f2:5a:dc:fe:05:1d:f5:18:3f:1c:94:e1:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5F:D4:3D:73:E8:5A:BD:AB:32:28:13:10:9B:A3:28:43:C7:91:15
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/wV_UPXPoWr2rMigTEJujKEPHkRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:1fc0::/48
Signature Algorithm: sha256WithRSAEncryption
3a:d7:86:b9:a4:27:53:14:c8:35:30:b1:3f:8d:8f:e8:3f:f2:
e5:36:93:9e:1d:ce:fd:10:08:b2:3d:2e:4c:aa:c5:5c:c0:73:
d6:ae:f8:ee:da:6d:69:22:e3:2f:42:83:9f:0c:ef:9b:6c:c8:
ad:06:f4:d5:36:a1:c8:d0:81:c8:53:67:1d:3b:41:c0:d2:3f:
4a:40:3b:e6:05:c7:7e:e1:9b:39:5a:24:c9:a4:dd:21:a0:ef:
09:85:8c:4f:fa:bb:96:ed:cb:65:26:27:79:18:5f:a4:d6:02:
ba:6c:af:55:b7:bf:3a:74:d2:d8:18:f1:0d:cc:55:f7:df:bd:
0b:ce:df:c7:7d:f3:38:dd:7e:80:0b:ad:ad:e2:73:57:3d:71:
b1:fd:4b:66:7d:7b:35:07:37:44:a6:79:ed:74:c9:cc:20:3d:
55:16:29:05:cc:b2:82:28:a3:8e:f5:ba:01:dc:05:76:3f:d2:
9e:8b:39:1b:43:07:76:8c:e6:f0:dd:f0:ec:76:fe:24:a8:55:
77:81:ac:ed:44:13:bc:c1:2b:78:91:49:ef:a1:19:c5:ad:d0:
de:ce:00:d9:f7:03:5c:b2:9c:5e:f0:b1:c1:4e:31:bd:eb:06:
7e:01:32:a3:9e:7c:e6:a3:29:87:03:5e:ec:84:8e:53:37:f7:
16:ae:2a:a6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQnR13ZWNE1R1u86ydDxHV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk
M2RjMTYwHhcNMjUwMTAyMTM0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTVmZDQzZDczZTg1YWJkYWIzMjI4MTMxMDliYTMyODQzYzc5MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y+5DVePKEtk9FD8i5k3wBxMEEKN
+xuslC0Ym9uDzJD2XhCK5SAC35r8b5LWnZztXNH0GhnxX4mm6S9LCQgPULPPccGW
AISZSOBV9OJeJkkfAxS8U33NOPgYNccXDn6oHnsKg3R9Ysi6rv0db9kLW5z/zlWh
yfo+jCgwnxsWPgpGDWoFExFFz/Av0uhGDEc+UxFH8+0qA4G8v10KUmfMpAkLYVpc
Pke1n7ksf/Y7fZ+K/tXUVoLQ0F2f9EJ2wPyJWkB8bmlTk76y3E3OUR8Vj6pRClqg
2xLsD4FHDcZ8UsRuMkwLi7Uu58mec2q2+k9ZPxLyWtz+BR31GD8clOFmIwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMFf1D1z6Fq9qzIoExCboyhDx5EVMB8GA1UdIwQY
MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt
OGFjNGEyMTkzOGI0LzEvd1ZfVVBYUG9XcjJyTWlnVEVKdWpLRVBIa1JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0
LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAfwAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQA614a5pCdTFMg1MLE/jY/oP/LlNpOeHc79EAiy
PS5MqsVcwHPWrvju2m1pIuMvQoOfDO+bbMitBvTVNqHI0IHIU2cdO0HA0j9KQDvm
Bcd+4Zs5WiTJpN0hoO8JhYxP+ruW7ctlJid5GF+k1gK6bK9Vt786dNLYGPENzFX3
370Lzt/HffM43X6AC62t4nNXPXGx/UtmfXs1BzdEpnntdMnMID1VFikFzLKCKKOO
9boB3AV2P9KeizkbQwd2jObw3fDsdv4kqFV3gaztRBO8wSt4kUnvoRnFrdDezgDZ
9wNcspxe8LHBTjG96wZ+ATKjnnzmoymHA17shI5TN/cWriqm
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:44:13 2025 by rpki-client