Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WvwAkqro0rlnhI25dIvqbTUoUBc.roa
File: WvwAkqro0rlnhI25dIvqbTUoUBc.roa (raw, json)
Hash identifier: hJJKmfLf2eeuNphadKbD8bwbk6wxqQmU1aOgFam1zsk=
Subject key identifier: 5A:FC:00:92:AA:E8:D2:B9:67:84:8D:B9:74:8B:EA:6D:35:28:50:17
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C78889EC03924E50A798902BB7207
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WvwAkqro0rlnhI25dIvqbTUoUBc.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216201
IP address blocks: 2a12:bec0:530::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:78:88:9e:c0:39:24:e5:0a:79:89:02:bb:72:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5afc0092aae8d2b967848db9748bea6d35285017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:fe:6c:63:bf:89:34:ea:31:0c:9a:04:d4:
06:c4:d4:a3:81:1b:95:41:ef:e2:1b:eb:41:77:1d:
10:ea:30:c5:f5:ee:00:91:05:e2:d1:ea:a3:0a:1b:
a9:d9:5e:b6:10:c3:00:9c:c7:43:00:ff:12:0c:b0:
57:9d:bb:42:38:1b:44:75:14:3c:e7:54:e0:cd:f1:
a9:7b:f0:f0:11:e8:1e:36:b1:b3:2a:f5:5e:c0:60:
9d:12:8d:d8:8d:8c:ef:a1:6a:a2:ac:cc:02:21:32:
70:d5:22:ee:2a:75:64:45:36:9c:48:2c:3a:55:26:
a7:7d:e1:f6:0f:66:84:37:d7:34:b6:15:fc:48:f9:
14:d2:d0:6e:dc:db:2c:28:61:e9:c8:be:dc:10:35:
fd:11:dc:ce:77:28:bf:51:24:ef:62:1f:db:1c:66:
92:d7:e9:a0:b0:60:1c:eb:f9:9b:a8:88:b0:5c:7e:
b3:1a:04:86:c8:d3:11:09:a1:2d:6e:88:9a:48:07:
d9:c1:b4:d7:df:04:77:ae:56:e5:51:bf:ff:90:91:
bb:58:e3:45:8e:75:4e:7d:2d:45:b1:d7:e7:57:95:
65:b4:22:42:e7:ab:34:b5:53:58:25:56:18:d8:49:
d0:ec:d0:a2:a8:a3:57:86:bf:1e:91:a3:91:1a:13:
38:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FC:00:92:AA:E8:D2:B9:67:84:8D:B9:74:8B:EA:6D:35:28:50:17
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WvwAkqro0rlnhI25dIvqbTUoUBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:530::/44
Signature Algorithm: sha256WithRSAEncryption
5c:e3:c7:77:b0:20:13:3b:c1:e6:da:74:8d:2e:55:07:01:de:
74:c6:56:9b:b2:52:80:4e:26:bd:2a:cf:e9:b9:a9:ad:4e:f1:
11:76:cd:82:e0:b4:cc:6a:a2:68:78:0b:2c:fe:d8:aa:a9:db:
57:5c:5d:db:86:3e:ab:d4:93:6e:a8:9e:61:80:69:32:22:d7:
aa:d7:a9:67:dd:15:d9:b4:5d:70:b4:6b:59:ed:95:b6:8c:48:
e0:71:d6:68:92:de:3a:14:30:17:54:a7:92:38:0e:5e:e5:dc:
de:0a:6d:06:45:de:37:60:7b:88:1f:b1:95:75:a0:09:7a:7e:
c1:6e:09:7a:35:c2:14:93:45:d0:af:09:d2:4a:8b:ec:ab:cb:
81:5f:be:be:f0:78:c8:00:c4:b1:3f:ce:eb:4d:55:e0:56:f0:
ca:e6:56:5b:71:e1:e8:48:62:00:a4:6d:0f:e2:c9:65:57:50:
40:a0:57:f3:bc:9f:6a:60:06:c9:a2:39:8f:13:4e:92:41:91:
e6:2c:55:2d:0c:d5:e2:2e:82:a5:0d:98:7d:4d:52:9e:e8:f3:
78:82:e1:d2:ec:6d:a4:f0:a0:4d:75:6d:ff:39:57:42:ff:7f:
ff:00:7b:a8:ca:0f:2a:3b:5a:1b:65:8f:00:94:30:0e:4e:b5:
1f:dc:9a:ae
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjHiInsA5JOUKeYkCu3IHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMTAxMDE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWZjMDA5MmFhZThkMmI5Njc4NDhkYjk3NDhiZWE2ZDM1Mjg1MDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVv+bGO/iTTqMQyaBNQGxNSjgRuV
Qe/iG+tBdx0Q6jDF9e4AkQXi0eqjChup2V62EMMAnMdDAP8SDLBXnbtCOBtEdRQ8
51TgzfGpe/DwEegeNrGzKvVewGCdEo3YjYzvoWqirMwCITJw1SLuKnVkRTacSCw6
VSanfeH2D2aEN9c0thX8SPkU0tBu3NssKGHpyL7cEDX9EdzOdyi/USTvYh/bHGaS
1+mgsGAc6/mbqIiwXH6zGgSGyNMRCaEtboiaSAfZwbTX3wR3rlblUb//kJG7WONF
jnVOfS1FsdfnV5VltCJC56s0tVNYJVYY2EnQ7NCiqKNXhr8ekaORGhM48QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFr8AJKq6NK5Z4SNuXSL6m01KFAXMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvV3Z3QWtxcm8wcmxuaEkyNWRJdnFiVFVvVUJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAUw
MA0GCSqGSIb3DQEBCwUAA4IBAQBc48d3sCATO8Hm2nSNLlUHAd50xlabslKATia9
Ks/puamtTvERds2C4LTMaqJoeAss/tiqqdtXXF3bhj6r1JNuqJ5hgGkyIteq16ln
3RXZtF1wtGtZ7ZW2jEjgcdZokt46FDAXVKeSOA5e5dzeCm0GRd43YHuIH7GVdaAJ
en7Bbgl6NcIUk0XQrwnSSovsq8uBX76+8HjIAMSxP87rTVXgVvDK5lZbceHoSGIA
pG0P4sllV1BAoFfzvJ9qYAbJojmPE06SQZHmLFUtDNXiLoKlDZh9TVKe6PN4guHS
7G2k8KBNdW3/OVdC/3//AHuoyg8qO1obZY8AlDAOTrUf3Jqu
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:56 2025 by rpki-client