Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/WkuL6FUDIfRDF14nPyGZlNz9TC8.roa
File: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (raw, json)
Hash identifier: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=
Subject key identifier: 5A:4B:8B:E8:55:03:21:F4:43:17:5E:27:3F:21:99:94:DC:FD:4C:2F
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019427B5BA53FDA775AF49AB8E7C7F015A60
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/WkuL6FUDIfRDF14nPyGZlNz9TC8.roa
Signing time: Thu 02 Jan 2025 15:50:08 +0000
ROA not before: Thu 02 Jan 2025 15:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216089
IP address blocks: 80.246.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ba:53:fd:a7:75:af:49:ab:8e:7c:7f:01:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a4b8be8550321f443175e273f219994dcfd4c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:94:cf:fa:e0:c0:ca:3d:ef:a0:44:f6:a0:
20:3e:94:97:0c:ce:b2:7d:57:db:0a:3b:54:6c:47:
19:d3:06:c6:32:ee:61:05:c1:11:b7:4d:e2:78:7f:
62:47:dd:61:c1:29:6d:3e:ee:cd:e1:a3:31:85:19:
c9:c9:4e:59:a1:22:4f:d9:9d:01:38:0a:0f:1a:e4:
77:88:8e:69:6e:f5:69:9e:56:9a:64:bb:70:21:45:
3a:91:37:48:b6:aa:fe:73:db:4d:3e:4f:9e:cc:d3:
71:75:47:b6:a5:65:5d:02:d9:28:f9:a4:4f:b0:6c:
d8:44:b4:c0:63:d6:72:fe:d2:0d:72:dc:8b:67:78:
36:a6:11:d0:fb:72:67:05:71:da:3d:4b:39:88:5e:
78:7a:07:64:46:1e:55:4e:15:6c:fb:fa:a2:36:06:
36:f4:74:32:3d:19:d7:a5:59:4b:11:48:5e:31:42:
1a:24:fe:ac:d3:54:9e:ab:04:88:2a:2d:97:90:dd:
86:57:83:8c:01:86:85:25:04:c1:1c:10:cf:ad:f4:
5f:4c:3e:2e:d8:d8:86:cd:dd:94:e9:0e:a2:fa:07:
10:2a:f0:0b:87:e0:5b:b9:27:ef:6c:ae:14:6b:fa:
7f:e0:b3:f7:e8:2c:49:fd:f6:4e:d9:2f:7b:e6:ab:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4B:8B:E8:55:03:21:F4:43:17:5E:27:3F:21:99:94:DC:FD:4C:2F
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/WkuL6FUDIfRDF14nPyGZlNz9TC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.227.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5e:29:97:40:3f:16:7f:05:73:d9:1d:21:35:f1:37:a8:4e:
ff:c3:a0:f0:82:50:86:90:81:67:7d:cf:0d:1b:2c:33:64:ab:
54:23:42:ff:ec:23:69:72:32:6d:d5:d9:02:de:c9:dc:8c:3c:
47:bd:9c:34:13:5d:34:f7:2d:40:15:02:5c:43:cf:0a:8f:63:
08:38:4d:d0:89:3b:9c:27:cc:45:a2:9c:a7:b6:44:4e:1a:18:
f0:26:9a:21:c8:fc:05:37:9f:d1:2c:e7:7f:fc:08:04:b1:f0:
45:10:bf:cd:da:53:34:9c:ba:d3:17:91:f0:cc:42:72:a9:ad:
a5:78:5a:ce:88:9b:85:53:5b:b8:c2:40:c0:55:b6:8b:33:34:
bc:48:1b:62:57:50:95:14:f3:07:67:28:83:2c:bb:6a:15:cd:
25:cb:f2:b1:62:5e:62:2d:c9:13:0b:7b:e5:a2:10:e9:92:07:
c4:c2:0f:c7:71:2c:1e:cb:30:15:55:52:2f:4f:8e:f3:f0:c4:
89:1f:d2:92:5c:2e:1f:70:fb:cb:28:c3:2c:26:d0:a9:f6:a7:
10:c7:f3:a8:70:ac:47:ea:b8:75:a0:b3:c3:65:3a:62:81:88:
5f:38:8c:ca:ae:b2:59:b8:16:90:89:96:1a:ad:fb:93:db:b8:
00:d7:f6:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntbpT/ad1r0mrjnx/AVpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjUwMTAyMTU1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTRiOGJlODU1MDMyMWY0NDMxNzVlMjczZjIxOTk5NGRjZmQ0YzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G2Uz/rgwMo976BE9qAgPpSXDM6y
fVfbCjtUbEcZ0wbGMu5hBcERt03ieH9iR91hwSltPu7N4aMxhRnJyU5ZoSJP2Z0B
OAoPGuR3iI5pbvVpnlaaZLtwIUU6kTdItqr+c9tNPk+ezNNxdUe2pWVdAtko+aRP
sGzYRLTAY9Zy/tINctyLZ3g2phHQ+3JnBXHaPUs5iF54egdkRh5VThVs+/qiNgY2
9HQyPRnXpVlLEUheMUIaJP6s01SeqwSIKi2XkN2GV4OMAYaFJQTBHBDPrfRfTD4u
2NiGzd2U6Q6i+gcQKvALh+BbuSfvbK4Ua/p/4LP36CxJ/fZO2S975qvVmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFpLi+hVAyH0QxdeJz8hmZTc/UwvMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvV2t1TDZGVURJZlJERjE0blB5R1psTno5VEM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPbjMA0G
CSqGSIb3DQEBCwUAA4IBAQBBXimXQD8WfwVz2R0hNfE3qE7/w6DwglCGkIFnfc8N
GywzZKtUI0L/7CNpcjJt1dkC3sncjDxHvZw0E1009y1AFQJcQ88Kj2MIOE3QiTuc
J8xFopyntkROGhjwJpohyPwFN5/RLOd//AgEsfBFEL/N2lM0nLrTF5HwzEJyqa2l
eFrOiJuFU1u4wkDAVbaLMzS8SBtiV1CVFPMHZyiDLLtqFc0ly/KxYl5iLckTC3vl
ohDpkgfEwg/HcSweyzAVVVIvT47z8MSJH9KSXC4fcPvLKMMsJtCp9qcQx/OocKxH
6rh1oLPDZTpigYhfOIzKrrJZuBaQiZYarfuT27gA1/ZN
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:27:59 2025 by rpki-client