Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/ElWcrbTwhZb7R0idVXjP0jp7adc.roa
File: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (raw, json)
Hash identifier: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=
Subject key identifier: 12:55:9C:AD:B4:F0:85:96:FB:47:48:9D:55:78:CF:D2:3A:7B:69:D7
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 019427B67014EEC7584BFB9E547FEEDD473B
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/ElWcrbTwhZb7R0idVXjP0jp7adc.roa
Signing time: Thu 02 Jan 2025 15:50:55 +0000
ROA not before: Thu 02 Jan 2025 15:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43171
IP address blocks: 46.175.224.0/20 maxlen: 20
185.59.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:70:14:ee:c7:58:4b:fb:9e:54:7f:ee:dd:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Jan 2 15:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12559cadb4f08596fb47489d5578cfd23a7b69d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:7f:44:be:28:58:51:f0:72:b4:2f:a9:24:
81:62:1c:49:b6:61:68:64:b5:33:ff:c8:17:84:04:
1d:2c:e7:65:32:54:30:0d:a4:66:6e:2e:c2:9a:2f:
b3:b1:c6:06:5a:d7:a7:45:99:a5:3b:1b:86:41:37:
6d:98:91:a4:bd:20:89:54:70:ff:79:ce:c1:88:83:
ac:b0:b0:e5:ff:7c:b2:84:06:b9:5f:56:33:08:87:
2a:cc:86:3c:6a:cc:a2:5b:00:4f:c5:94:2c:ac:cb:
3f:d8:3d:0e:ae:56:74:ec:c4:1c:d0:b3:6a:3e:4c:
c9:21:e7:9f:92:23:a2:2b:52:f0:de:41:c3:19:2d:
c0:bc:c3:11:5e:9f:e2:27:b2:34:cb:5a:81:22:16:
ef:22:c3:34:ad:95:53:da:1c:9f:2e:7d:c7:e8:aa:
8e:6d:86:b3:b7:f8:3a:3d:a3:dc:a7:9c:7d:4c:41:
fc:a8:69:d2:cf:c7:2a:ce:2d:5f:98:b5:e3:b1:f0:
95:dc:98:7a:1d:14:aa:72:86:2c:81:40:27:c4:92:
24:bd:6d:6f:0c:80:3d:78:fe:53:53:c4:52:02:1c:
1a:25:32:0e:08:1d:7a:ae:31:e4:41:ca:ea:6f:c1:
6e:80:40:e3:59:ff:cd:ab:38:2f:6f:20:70:02:13:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:55:9C:AD:B4:F0:85:96:FB:47:48:9D:55:78:CF:D2:3A:7B:69:D7
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/ElWcrbTwhZb7R0idVXjP0jp7adc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.224.0/20
185.59.108.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:27:5c:b8:a3:c0:bd:2a:0b:bd:9a:b7:eb:5c:cf:88:92:87:
5b:cc:4f:90:23:f1:70:1c:3e:91:53:38:ff:ec:05:bc:f2:a0:
55:1c:31:41:64:24:fd:4a:c1:39:c4:47:f2:39:6a:97:b2:83:
18:d9:28:e3:9d:ea:07:cf:93:3d:67:35:8c:90:ad:87:2b:6f:
b5:db:d1:13:a8:26:4c:9b:74:98:ef:f9:c5:07:0a:9f:ea:1e:
5d:25:06:b6:b7:8e:cc:8f:4d:6c:c6:18:36:4f:54:44:85:bc:
19:02:f0:72:52:35:e1:df:ed:56:00:5e:5f:eb:4c:e4:5b:93:
3d:3e:db:d5:fa:03:5e:27:b0:14:d3:4d:a2:b2:ef:4d:b4:9c:
e2:05:9c:ae:e7:02:30:62:89:58:ec:57:8b:ae:63:c3:5f:4a:
cb:d4:67:80:94:d8:bb:0a:8d:68:d3:d4:6f:45:b8:69:a8:60:
30:14:f1:c6:86:ab:90:74:5c:39:a5:22:dc:21:dc:69:ac:32:
3c:5b:1e:0e:d2:91:b3:a5:2b:90:02:f7:22:02:f3:34:fb:ac:
6c:a1:d7:ad:73:b8:58:e4:48:8d:97:93:3f:90:1c:76:2d:46:
42:55:d4:ac:f8:04:3f:20:15:07:2d:c8:3b:30:c2:5f:2b:68:
b7:84:30:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntnAU7sdYS/ueVH/u3Uc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTc1YzA4MzUyNzE4MThiYmQzOGQ2ZGVkN2Y5NWFiYmM1
NTc0NGYwHhcNMjUwMTAyMTU1MDU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjU1OWNhZGI0ZjA4NTk2ZmI0NzQ4OWQ1NTc4Y2ZkMjNhN2I2OWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhV/RL4oWFHwcrQvqSSBYhxJtmFo
ZLUz/8gXhAQdLOdlMlQwDaRmbi7Cmi+zscYGWtenRZmlOxuGQTdtmJGkvSCJVHD/
ec7BiIOssLDl/3yyhAa5X1YzCIcqzIY8asyiWwBPxZQsrMs/2D0OrlZ07MQc0LNq
PkzJIeefkiOiK1Lw3kHDGS3AvMMRXp/iJ7I0y1qBIhbvIsM0rZVT2hyfLn3H6KqO
bYazt/g6PaPcp5x9TEH8qGnSz8cqzi1fmLXjsfCV3Jh6HRSqcoYsgUAnxJIkvW1v
DIA9eP5TU8RSAhwaJTIOCB16rjHkQcrqb8FugEDjWf/NqzgvbyBwAhP4pQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBJVnK208IWW+0dInVV4z9I6e2nXMB8GA1UdIwQY
MBaAFHEXXAg1JxgYu9ONbe1/lau8VXRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYt
MTk0MmUwODlmMGIwLzEvRWxXY3JiVHdoWmI3UjBpZFZYalAwanA3YWRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYtMTk0MmUwODlmMGIw
LzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELq/gAwQC
uTtsMA0GCSqGSIb3DQEBCwUAA4IBAQBfJ1y4o8C9Kgu9mrfrXM+IkodbzE+QI/Fw
HD6RUzj/7AW88qBVHDFBZCT9SsE5xEfyOWqXsoMY2SjjneoHz5M9ZzWMkK2HK2+1
29ETqCZMm3SY7/nFBwqf6h5dJQa2t47Mj01sxhg2T1REhbwZAvByUjXh3+1WAF5f
60zkW5M9PtvV+gNeJ7AU002isu9NtJziBZyu5wIwYolY7FeLrmPDX0rL1GeAlNi7
Co1o09RvRbhpqGAwFPHGhquQdFw5pSLcIdxprDI8Wx4O0pGzpSuQAvciAvM0+6xs
odetc7hY5EiNl5M/kBx2LUZCVdSs+AQ/IBUHLcg7MMJfK2i3hDAG
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:31:51 2025 by rpki-client