Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/WlXWy3G8gsSAY98ihrUQRIwx-wk.roa
File: WlXWy3G8gsSAY98ihrUQRIwx-wk.roa (raw, json)
Hash identifier: tolEd43SxzC2ORFt5HBUIBkKLYFZtqOHntP2syaLYOs=
Subject key identifier: 5A:55:D6:CB:71:BC:82:C4:80:63:DF:22:86:B5:10:44:8C:31:FB:09
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64AE730B3CC45ACB20BE97D46F70990
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/WlXWy3G8gsSAY98ihrUQRIwx-wk.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203909
IP address blocks: 5.1.77.0/24 maxlen: 32
2a00:f826:7::/48 maxlen: 48
2a00:f826:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e7:30:b3:cc:45:ac:b2:0b:e9:7d:46:f7:09:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a55d6cb71bc82c48063df2286b510448c31fb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:72:4b:c4:41:2f:b3:25:ad:81:54:fc:dc:
ec:55:f2:09:35:4f:9a:7f:87:83:90:7e:23:62:64:
a9:95:3a:d9:fc:19:dc:8d:63:d7:c9:bd:07:a9:ea:
e3:f5:7b:d1:43:68:4e:1f:53:29:a2:03:34:68:b8:
bd:fb:a8:09:2e:81:e6:08:d6:a2:62:68:79:11:55:
66:1f:d8:96:51:29:d8:f3:d3:29:68:01:f1:42:83:
a9:f4:9d:e2:0e:65:5d:2b:c5:7d:8f:72:e9:c7:76:
fd:c7:54:2f:a5:05:dd:4d:f5:f8:41:15:a6:00:2c:
1a:d2:7a:9d:e1:ca:49:e7:3c:c3:22:25:f1:ce:28:
02:cb:fa:69:1e:d9:d1:86:27:a4:d2:8a:57:af:80:
3c:40:34:66:0f:38:2f:a0:fc:1c:80:23:86:11:92:
19:0c:2f:9b:bf:b8:98:b1:e7:a6:c5:f8:fd:16:31:
e9:d8:ac:54:d2:ea:cf:bb:e3:c7:1f:97:dd:25:02:
bb:7f:c3:65:08:96:66:d5:ac:86:c5:f2:25:43:74:
8b:1f:a9:c4:89:c4:a4:7c:d3:16:72:2d:43:b7:a7:
b8:47:7c:91:92:5c:d2:7e:49:c3:4e:97:19:5f:2b:
b9:e8:de:a5:c1:9a:44:5e:32:87:06:c9:66:dd:4f:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:55:D6:CB:71:BC:82:C4:80:63:DF:22:86:B5:10:44:8C:31:FB:09
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/WlXWy3G8gsSAY98ihrUQRIwx-wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.77.0/24
IPv6:
2a00:f826:4::/48
2a00:f826:7::/48
Signature Algorithm: sha256WithRSAEncryption
09:4a:fd:c3:91:7e:32:01:11:24:67:35:67:cc:ab:04:c8:49:
a2:7e:fb:d8:e3:58:dd:d6:0e:46:95:1c:61:f6:5d:d4:22:e2:
95:3a:5f:59:a4:07:f0:65:1d:5f:c0:2b:e8:cd:9f:d5:41:05:
06:fc:e2:b3:5d:11:8f:3c:bd:6a:f5:47:b4:a4:df:77:a7:69:
25:ef:ef:33:08:f0:24:be:d0:c4:86:b2:7b:41:e6:f5:15:bc:
a3:a8:f0:0c:3d:ae:13:29:c9:7f:6b:d9:47:4d:de:6b:f4:9f:
09:1b:ee:6d:6c:6c:46:61:b1:54:cc:94:49:f5:80:75:b7:0d:
70:df:1a:dc:58:39:10:db:c3:1b:5f:a0:85:d7:51:96:bd:93:
95:3c:61:c0:c8:0c:ac:92:1b:5a:98:cc:a7:aa:f2:c6:f9:8c:
f3:61:63:26:e4:da:f7:1a:32:3e:1f:f5:41:4c:2e:07:44:75:
09:72:72:9b:da:19:d5:d7:8c:40:55:ca:4a:be:9a:f3:f1:19:
83:14:3d:ef:34:ef:a4:4c:19:5a:f0:0d:b3:cd:ce:ca:a8:c4:
ed:5b:78:d0:7a:45:c9:e8:09:00:cd:8d:c3:34:a0:12:35:cd:
51:9b:5c:32:73:89:6b:a3:c2:4e:d4:7f:45:d6:d7:84:4b:88:
7b:88:8f:cb
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzGSucws8xFrLIL6X1G9wmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjQwMTAxMTgzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTU1ZDZjYjcxYmM4MmM0ODA2M2RmMjI4NmI1MTA0NDhjMzFmYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxByS8RBL7MlrYFU/NzsVfIJNU+a
f4eDkH4jYmSplTrZ/BncjWPXyb0Hqerj9XvRQ2hOH1MpogM0aLi9+6gJLoHmCNai
Ymh5EVVmH9iWUSnY89MpaAHxQoOp9J3iDmVdK8V9j3Lpx3b9x1QvpQXdTfX4QRWm
ACwa0nqd4cpJ5zzDIiXxzigCy/ppHtnRhiek0opXr4A8QDRmDzgvoPwcgCOGEZIZ
DC+bv7iYseemxfj9FjHp2KxU0urPu+PHH5fdJQK7f8NlCJZm1ayGxfIlQ3SLH6nE
icSkfNMWci1Dt6e4R3yRklzSfknDTpcZXyu56N6lwZpEXjKHBslm3U9riwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFpV1stxvILEgGPfIoa1EESMMfsJMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvV2xYV3kzRzhnc1NBWTk4aWhyVVFSSXd4LXdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQABQFNMBgE
AgACMBIDBwAqAPgmAAQDBwAqAPgmAAcwDQYJKoZIhvcNAQELBQADggEBAAlK/cOR
fjIBESRnNWfMqwTISaJ++9jjWN3WDkaVHGH2XdQi4pU6X1mkB/BlHV/AK+jNn9VB
BQb84rNdEY88vWr1R7Sk33enaSXv7zMI8CS+0MSGsntB5vUVvKOo8Aw9rhMpyX9r
2UdN3mv0nwkb7m1sbEZhsVTMlEn1gHW3DXDfGtxYORDbwxtfoIXXUZa9k5U8YcDI
DKySG1qYzKeq8sb5jPNhYybk2vcaMj4f9UFMLgdEdQlycpvaGdXXjEBVykq+mvPx
GYMUPe8076RMGVrwDbPNzsqoxO1beNB6RcnoCQDNjcM0oBI1zVGbXDJziWujwk7U
f0XW14RLiHuIj8s=
-----END CERTIFICATE-----
Generated at Tue May 7 19:37:05 2024 by rpki-client on console-fra.rpki-client.org