Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/W6ybVPAGTpEsw7meUuR6P0SBWi0.roa
File: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (raw, json)
Hash identifier: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=
Subject key identifier: 5B:AC:9B:54:F0:06:4E:91:2C:C3:B9:9E:52:E4:7A:3F:44:81:5A:2D
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 0194236A28A62674AF2B6847519DC14575E9
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/W6ybVPAGTpEsw7meUuR6P0SBWi0.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35295
IP address blocks: 77.222.45.0/24 maxlen: 24
80.93.48.0/21 maxlen: 24
2a02:408:8093::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:28:a6:26:74:af:2b:68:47:51:9d:c1:45:75:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bac9b54f0064e912cc3b99e52e47a3f44815a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:44:c4:32:f8:aa:de:a8:a1:a5:58:97:d0:
5b:94:97:ca:e4:40:47:59:6c:8a:80:be:f5:96:a6:
6d:13:d2:82:4e:fc:3b:27:f3:45:a3:99:9d:3e:22:
8f:fe:9b:9c:6b:26:81:0e:60:a4:0c:06:68:58:c3:
c0:7c:8e:95:fa:72:79:b7:3c:32:ea:b0:f1:8d:5b:
a0:7b:9a:dc:32:68:e5:51:bc:61:63:c6:0e:19:96:
2c:2a:66:3c:61:79:c7:69:6c:4e:68:a5:25:f4:a8:
b1:f0:68:38:e4:07:5b:d6:8b:d5:90:a4:ae:21:8c:
a6:fa:00:ab:b6:c0:5c:45:5c:04:0b:e5:6b:3a:18:
eb:92:4f:3a:7c:b7:e2:eb:64:7a:fa:bd:cf:c2:d6:
a2:76:3c:94:95:f6:26:e5:33:3e:ee:15:0c:5e:5c:
39:ba:d6:47:5c:81:a0:f5:08:02:8b:84:40:55:83:
b2:2e:4e:6a:33:ed:3e:1b:b1:8e:9c:2e:bb:d3:30:
1d:40:6d:e5:fa:29:a4:b3:05:45:be:e5:90:f9:3a:
f7:f2:9e:8a:26:7a:c1:b1:db:dc:ef:51:c0:ee:5d:
13:0b:d7:e7:24:32:1f:23:db:be:5f:89:7d:d2:c0:
52:8d:a9:1b:f6:58:c5:f2:65:33:46:a9:61:39:c9:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:9B:54:F0:06:4E:91:2C:C3:B9:9E:52:E4:7A:3F:44:81:5A:2D
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/W6ybVPAGTpEsw7meUuR6P0SBWi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.45.0/24
80.93.48.0/21
IPv6:
2a02:408:8093::/48
Signature Algorithm: sha256WithRSAEncryption
42:89:3c:30:86:ac:f5:ba:97:be:e8:ce:fc:38:89:ce:17:8f:
2a:fa:f0:4a:8c:5b:b7:2a:7d:51:38:c7:cb:e1:a8:0f:d2:52:
6c:5b:e0:10:90:57:c3:48:9c:92:9c:bd:b3:1d:58:50:98:82:
16:a4:57:7f:05:59:d0:3d:ce:c0:dd:bd:cf:43:59:7d:cc:8a:
80:0f:a7:36:22:7a:7f:5a:fa:1f:2d:ab:d5:80:6b:e6:7d:2c:
6a:f8:12:c2:db:7f:8f:52:a2:a9:c0:a7:51:18:6b:97:cb:19:
a1:e3:89:57:c0:f7:e2:15:e5:0b:26:d5:c8:a8:93:cf:5a:61:
d7:70:ee:db:48:a1:3b:62:76:43:22:d7:48:f7:0b:d7:ab:32:
8f:e0:3b:5d:78:83:3f:50:44:1e:27:6e:d2:4f:93:51:92:c1:
29:51:56:13:85:c2:0a:80:a5:d9:b6:7c:ef:79:1e:02:f6:76:
81:36:f9:b2:3d:ba:57:c1:86:01:e4:64:99:2d:11:e0:ac:80:
e8:3b:bb:79:ae:19:a9:77:39:95:8d:3a:23:5c:cb:ad:c3:19:
09:84:cf:30:2a:b7:06:eb:9c:05:88:5c:76:89:53:43:d2:ff:
1d:9c:48:f4:e8:b0:68:43:7d:07:ad:f2:76:27:a4:ee:65:16:
62:52:01:a8
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQjaiimJnSvK2hHUZ3BRXXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2
ZjFmZmYwHhcNMjUwMTAxMTk0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmFjOWI1NGYwMDY0ZTkxMmNjM2I5OWU1MmU0N2EzZjQ0ODE1YTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra5ExDL4qt6ooaVYl9BblJfK5EBH
WWyKgL71lqZtE9KCTvw7J/NFo5mdPiKP/pucayaBDmCkDAZoWMPAfI6V+nJ5tzwy
6rDxjVuge5rcMmjlUbxhY8YOGZYsKmY8YXnHaWxOaKUl9Kix8Gg45Adb1ovVkKSu
IYym+gCrtsBcRVwEC+VrOhjrkk86fLfi62R6+r3PwtaidjyUlfYm5TM+7hUMXlw5
utZHXIGg9QgCi4RAVYOyLk5qM+0+G7GOnC670zAdQG3l+imkswVFvuWQ+Tr38p6K
JnrBsdvc71HA7l0TC9fnJDIfI9u+X4l90sBSjakb9ljF8mUzRqlhOck7YwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFFusm1TwBk6RLMO5nlLkej9EgVotMB8GA1UdIwQY
MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt
NGY0ZTcxZTMyMDg0LzEvVzZ5YlZQQUdUcEVzdzdtZVV1UjZQMFNCV2kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0
LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQATd4tAwQD
UF0wMA8EAgACMAkDBwAqAgQIgJMwDQYJKoZIhvcNAQELBQADggEBAEKJPDCGrPW6
l77ozvw4ic4Xjyr68EqMW7cqfVE4x8vhqA/SUmxb4BCQV8NInJKcvbMdWFCYghak
V38FWdA9zsDdvc9DWX3MioAPpzYien9a+h8tq9WAa+Z9LGr4EsLbf49SoqnAp1EY
a5fLGaHjiVfA9+IV5Qsm1ciok89aYddw7ttIoTtidkMi10j3C9erMo/gO114gz9Q
RB4nbtJPk1GSwSlRVhOFwgqApdm2fO95HgL2doE2+bI9ulfBhgHkZJktEeCsgOg7
u3muGal3OZWNOiNcy63DGQmEzzAqtwbrnAWIXHaJU0PS/x2cSPTosGhDfQet8nYn
pO5lFmJSAag=
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:01 2025 by rpki-client