Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/wN12RJcK-_CRebSzXn9J25Yr5VM.roa
File: wN12RJcK-_CRebSzXn9J25Yr5VM.roa (raw, json)
Hash identifier: U3IOSsKfeLNTBtDNIBErlYBjoE5txf9cmKxG7Wkj8ug=
Subject key identifier: C0:DD:76:44:97:0A:FB:F0:91:79:B4:B3:5E:7F:49:DB:96:2B:E5:53
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 019424B3BD0177F1AEF2D16AA97B79BBD0D9
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/wN12RJcK-_CRebSzXn9J25Yr5VM.roa
Signing time: Thu 02 Jan 2025 01:49:06 +0000
ROA not before: Thu 02 Jan 2025 01:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212042
IP address blocks: 178.236.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 13:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:bd:01:77:f1:ae:f2:d1:6a:a9:7b:79:bb:d0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0dd7644970afbf09179b4b35e7f49db962be553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:3f:28:7c:7a:fe:48:18:36:51:f2:a9:96:
4a:99:87:b3:d5:ad:66:f8:0f:c3:97:a4:e0:16:39:
86:5b:6a:48:06:f4:44:38:9c:7d:3e:75:44:c9:77:
9a:52:73:13:4f:28:6e:21:a4:e1:bd:63:82:9b:f0:
42:e7:b7:f1:a8:1d:3d:d5:64:9a:63:6d:a8:36:b1:
13:39:17:74:5c:4d:3d:3c:f9:ac:33:52:fe:13:8a:
b8:58:ca:76:2e:30:43:40:7c:fd:16:ea:b6:2b:33:
0b:e5:05:f0:9c:00:3f:95:76:d1:30:0e:b2:78:65:
41:0e:5b:2e:de:f0:74:f6:41:3a:d6:fa:8d:fb:a5:
d1:f5:d9:1d:de:77:51:53:78:63:b1:7c:1e:8e:01:
5c:35:c4:f1:0c:b2:b8:0b:85:bf:c4:c6:23:d6:65:
3a:eb:05:c9:7f:cb:c0:60:d8:1b:ec:88:cd:e4:d6:
fa:6f:8a:be:ca:18:ef:66:44:60:34:7e:bb:b5:31:
d9:0a:6d:16:68:15:50:8e:15:9f:bf:4f:6f:69:87:
ec:a5:35:2f:90:19:44:a2:b8:b4:d5:ca:33:d7:e2:
b9:fe:60:5d:a3:2c:28:0d:13:b9:05:da:56:5b:35:
92:c6:5f:fb:8f:46:0c:ae:16:2c:d4:6c:b4:24:87:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DD:76:44:97:0A:FB:F0:91:79:B4:B3:5E:7F:49:DB:96:2B:E5:53
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/wN12RJcK-_CRebSzXn9J25Yr5VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.236.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:01:d4:34:f6:f9:df:81:15:32:de:ab:55:cb:c5:58:3b:cb:
40:6f:fe:1e:31:4f:d5:7d:57:b3:b9:7f:c6:27:aa:9a:e7:34:
6a:b7:ad:a1:86:32:f3:c4:81:20:67:23:12:6f:14:8f:8a:25:
0f:cf:fc:34:e6:a1:1b:b7:ca:7b:ac:13:c1:2c:43:5c:12:5d:
9c:b0:7c:6c:33:c9:0a:8c:f0:39:b6:41:a2:48:62:67:23:62:
17:2e:7a:35:d7:c0:d3:35:d5:36:ac:4b:41:56:41:67:fe:4c:
c4:74:4e:8e:b2:09:c0:c7:b0:b7:64:44:05:48:af:0c:39:e9:
02:c2:83:ac:b2:a0:fa:16:87:9f:e4:33:48:e6:b7:91:06:52:
50:f6:ea:f5:aa:55:51:60:65:f2:ff:86:dd:48:64:69:2a:b6:
a3:54:b9:99:c6:0d:d2:c7:91:39:f1:0d:0a:4c:1d:5f:3e:d2:
89:83:ce:a9:80:5b:be:74:3c:9b:66:3c:a2:3b:8e:fe:13:02:
d1:83:30:b8:00:20:81:85:ce:fe:ac:f6:0f:54:bd:f4:ee:ad:
0c:a1:6e:5e:d6:12:a8:df:67:83:7c:eb:c8:9b:41:b2:f8:2d:
43:93:e5:42:5f:9e:df:34:cb:65:61:8f:72:ef:30:c7:5d:31:
15:89:d1:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks70Bd/Gu8tFqqXt5u9DZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjUwMTAyMDE0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGRkNzY0NDk3MGFmYmYwOTE3OWI0YjM1ZTdmNDlkYjk2MmJlNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRM/KHx6/kgYNlHyqZZKmYez1a1m
+A/Dl6TgFjmGW2pIBvREOJx9PnVEyXeaUnMTTyhuIaThvWOCm/BC57fxqB091WSa
Y22oNrETORd0XE09PPmsM1L+E4q4WMp2LjBDQHz9Fuq2KzML5QXwnAA/lXbRMA6y
eGVBDlsu3vB09kE61vqN+6XR9dkd3ndRU3hjsXwejgFcNcTxDLK4C4W/xMYj1mU6
6wXJf8vAYNgb7IjN5Nb6b4q+yhjvZkRgNH67tTHZCm0WaBVQjhWfv09vaYfspTUv
kBlEori01coz1+K5/mBdoywoDRO5BdpWWzWSxl/7j0YMrhYs1Gy0JIcZYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMDddkSXCvvwkXm0s15/SduWK+VTMB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvd04xMlJKY0stX0NSZWJTelhuOUoyNVlyNVZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuzsMA0G
CSqGSIb3DQEBCwUAA4IBAQBsAdQ09vnfgRUy3qtVy8VYO8tAb/4eMU/VfVezuX/G
J6qa5zRqt62hhjLzxIEgZyMSbxSPiiUPz/w05qEbt8p7rBPBLENcEl2csHxsM8kK
jPA5tkGiSGJnI2IXLno118DTNdU2rEtBVkFn/kzEdE6OsgnAx7C3ZEQFSK8MOekC
woOssqD6Foef5DNI5reRBlJQ9ur1qlVRYGXy/4bdSGRpKrajVLmZxg3Sx5E58Q0K
TB1fPtKJg86pgFu+dDybZjyiO47+EwLRgzC4ACCBhc7+rPYPVL307q0MoW5e1hKo
32eDfOvIm0Gy+C1Dk+VCX57fNMtlYY9y7zDHXTEVidGx
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:04:44 2025 by rpki-client