Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/WBCctmrLBY9TZchWHVefCJRpgwo.roa
File: WBCctmrLBY9TZchWHVefCJRpgwo.roa (raw, json)
Hash identifier: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=
Subject key identifier: 58:10:9C:B6:6A:CB:05:8F:53:65:C8:56:1D:57:9F:08:94:69:83:0A
Certificate issuer: /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial: 019425218B4DD7A260F5AD6064F1B9820C72
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/WBCctmrLBY9TZchWHVefCJRpgwo.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44482
IP address blocks: 91.199.138.0/24 maxlen: 24
91.225.92.0/22 maxlen: 22
194.28.52.0/22 maxlen: 22
195.238.116.0/24 maxlen: 24
195.238.117.0/24 maxlen: 24
195.238.118.0/24 maxlen: 24
195.238.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8b:4d:d7:a2:60:f5:ad:60:64:f1:b9:82:0c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58109cb66acb058f5365c8561d579f089469830a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c9:17:c7:3c:ba:04:1f:2b:4a:f6:d4:d9:41:
e3:e4:a1:6e:6c:80:fe:f3:d7:d2:7b:e5:f1:97:78:
51:0b:e7:17:24:fa:36:8d:df:30:88:11:89:a4:fd:
32:2b:c4:ff:09:01:3d:13:45:bb:c3:e7:58:6a:66:
e1:fb:03:8d:48:c6:0e:cf:db:45:89:e1:ba:0f:e6:
bc:56:e1:4d:3f:20:57:fe:e5:b3:ed:ac:e8:b1:1f:
88:bd:c9:a2:fa:9f:00:7b:66:7f:f7:40:e9:50:e3:
16:af:29:c7:61:6d:87:bd:94:79:b2:ee:fe:cd:bf:
ca:05:3d:c9:15:1f:a1:cb:15:26:bb:de:8b:90:4b:
61:de:70:bc:18:27:f3:27:1a:c3:7a:62:0f:10:29:
4f:52:6b:21:3b:79:bd:fe:d7:f2:ce:f7:1b:d7:09:
31:64:21:81:5a:af:38:f0:21:76:e0:4f:1d:5d:46:
d8:5e:2c:1c:5f:16:b7:e2:03:d8:25:fb:ba:a2:47:
3d:9d:a9:ca:23:7b:f5:1d:fa:e4:bf:e5:a3:b7:18:
2e:6f:0d:a8:4e:53:b2:2e:cb:fa:15:85:ee:c1:3e:
20:a8:19:3b:cd:f9:a6:af:ea:aa:8c:a6:28:80:45:
9c:96:96:6c:47:15:7a:58:a2:99:14:3e:da:4c:8a:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:10:9C:B6:6A:CB:05:8F:53:65:C8:56:1D:57:9F:08:94:69:83:0A
X509v3 Authority Key Identifier:
keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/WBCctmrLBY9TZchWHVefCJRpgwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.138.0/24
91.225.92.0/22
194.28.52.0/22
195.238.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:e3:83:cb:d5:c3:9c:9b:6d:11:18:da:0a:29:be:0e:31:fb:
9c:d7:2c:8b:dd:c1:66:5c:a4:24:ab:a0:f5:ee:ce:ed:c4:f4:
1c:2e:ac:33:05:46:89:fd:97:7b:e3:39:3f:5e:c5:cb:eb:a9:
81:0e:9a:e9:10:c8:2f:11:63:63:77:40:a2:79:86:84:55:58:
10:74:ce:ad:6a:2a:ff:c3:67:09:d0:04:ad:72:66:33:8c:c7:
f1:3f:50:48:aa:7e:21:bf:03:b4:ca:94:2c:a4:c9:44:3b:1e:
5d:18:b7:a6:e1:96:ab:20:e2:e0:4b:f1:d6:b2:c7:65:7f:24:
11:3f:ae:d3:04:b1:aa:14:ce:be:41:99:58:3e:00:c3:fa:d1:
76:ca:1f:bb:e6:ee:be:36:e6:d7:31:e6:59:e7:7f:63:c7:e7:
19:cc:49:5f:6e:5b:1e:cf:49:ab:6e:00:ac:be:c3:c1:f5:dc:
9f:bd:d7:84:7d:71:e0:40:a5:8c:14:94:6e:46:f8:37:91:0d:
78:9a:9b:91:2e:b2:05:a1:5f:e8:2c:1e:3a:2b:6e:13:09:5c:
1a:30:d6:a3:1b:ce:05:a9:08:f7:de:33:25:d0:6c:b3:99:4b:
f4:c3:b1:b7:68:0f:4c:86:ca:c7:96:4c:4c:c7:fa:82:eb:84:
8b:6a:31:a9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQlIYtN16Jg9a1gZPG5ggxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMTE3YTNlMGQwZDA1ZDRiMGFiODIzMDgwZTdiZjZjZmQ0
YjM3NzYwHhcNMjUwMTAyMDM0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODEwOWNiNjZhY2IwNThmNTM2NWM4NTYxZDU3OWYwODk0Njk4MzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMkXxzy6BB8rSvbU2UHj5KFubID+
89fSe+Xxl3hRC+cXJPo2jd8wiBGJpP0yK8T/CQE9E0W7w+dYambh+wONSMYOz9tF
ieG6D+a8VuFNPyBX/uWz7azosR+Ivcmi+p8Ae2Z/90DpUOMWrynHYW2HvZR5su7+
zb/KBT3JFR+hyxUmu96LkEth3nC8GCfzJxrDemIPEClPUmshO3m9/tfyzvcb1wkx
ZCGBWq848CF24E8dXUbYXiwcXxa34gPYJfu6okc9nanKI3v1Hfrkv+Wjtxgubw2o
TlOyLsv6FYXuwT4gqBk7zfmmr+qqjKYogEWclpZsRxV6WKKZFD7aTIrNpQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFgQnLZqywWPU2XIVh1XnwiUaYMKMB8GA1UdIwQY
MBaAFA4Rej4NDQXUsKuCMIDnv2z9Szd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2It
ZDg0NzVmMTg0NjRlLzEvV0JDY3RtckxCWTlUWmNoV0hWZWZDSlJwZ3dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2ItZDg0NzVmMTg0NjRl
LzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8eKAwQC
W+FcAwQCwhw0AwQCw+50MA0GCSqGSIb3DQEBCwUAA4IBAQBL44PL1cOcm20RGNoK
Kb4OMfuc1yyL3cFmXKQkq6D17s7txPQcLqwzBUaJ/Zd74zk/XsXL66mBDprpEMgv
EWNjd0CieYaEVVgQdM6tair/w2cJ0AStcmYzjMfxP1BIqn4hvwO0ypQspMlEOx5d
GLem4ZarIOLgS/HWssdlfyQRP67TBLGqFM6+QZlYPgDD+tF2yh+75u6+NubXMeZZ
539jx+cZzElfblsez0mrbgCsvsPB9dyfvdeEfXHgQKWMFJRuRvg3kQ14mpuRLrIF
oV/oLB46K24TCVwaMNajG84FqQj33jMl0GyzmUv0w7G3aA9MhsrHlkxMx/qC64SL
ajGp
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:51 2025 by rpki-client