Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/WmJngWZzmKvAdcCFlnXZaxyPpiY.roa
File: WmJngWZzmKvAdcCFlnXZaxyPpiY.roa (raw, json)
Hash identifier: uKArgllEdQakrvIrUr4Tsros7JNu1glQJvvnJhzoD8A=
Subject key identifier: 5A:62:67:81:66:73:98:AB:C0:75:C0:85:96:75:D9:6B:1C:8F:A6:26
Certificate issuer: /CN=179661a164d2d517ea7677fb229cafa19eba97f3
Certificate serial: 019425FC9905343ED5808E00011019217133
Authority key identifier: 17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/WmJngWZzmKvAdcCFlnXZaxyPpiY.roa
Signing time: Thu 02 Jan 2025 07:48:18 +0000
ROA not before: Thu 02 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206804
IP address blocks: 45.128.132.0/24 maxlen: 24
45.128.133.0/24 maxlen: 24
45.128.134.0/24 maxlen: 24
45.128.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:99:05:34:3e:d5:80:8e:00:01:10:19:21:71:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179661a164d2d517ea7677fb229cafa19eba97f3
Validity
Not Before: Jan 2 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a626781667398abc075c0859675d96b1c8fa626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:1b:4a:62:96:e9:a0:40:29:7a:73:ad:71:
a2:a4:5c:59:26:3f:e4:05:64:6a:f8:ce:fd:8c:d7:
fc:61:02:e7:09:69:d1:22:92:12:72:9a:3c:69:6d:
08:29:60:b4:f6:b6:da:06:94:0f:42:8a:cd:73:e1:
4b:bf:55:dc:f1:4b:06:7e:cc:92:54:20:28:30:09:
d9:e7:cf:55:89:6d:3b:ca:82:51:25:a0:ef:3f:33:
fa:fa:92:3e:1e:7e:14:34:1d:87:df:37:70:87:24:
6d:94:99:b5:d1:bf:cd:02:e0:1e:2f:0f:de:b0:ce:
2c:f5:50:a2:e8:1e:b7:1c:e7:a0:ab:da:27:79:c5:
ef:8f:b0:9c:46:a6:7a:da:e8:16:b2:e5:04:97:53:
d4:8e:a8:6e:5a:db:5b:a6:30:2f:15:8e:82:f7:52:
bd:48:5d:92:e5:a0:65:65:7c:8b:f7:ca:e1:50:47:
10:1e:9d:d1:5c:fd:a0:8b:d8:5f:bf:28:74:95:b4:
5d:5e:a4:f6:81:10:ca:cc:38:fc:f0:f8:10:ba:a9:
d2:4c:73:c8:1b:03:70:96:89:ea:c6:7e:6f:bf:43:
17:bf:df:72:c7:db:16:9f:6f:dd:4a:2d:c0:e0:c6:
5d:d3:a6:82:a4:57:55:43:a4:a3:47:85:6e:01:a5:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:67:81:66:73:98:AB:C0:75:C0:85:96:75:D9:6B:1C:8F:A6:26
X509v3 Authority Key Identifier:
keyid:17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/WmJngWZzmKvAdcCFlnXZaxyPpiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.132.0/22
Signature Algorithm: sha256WithRSAEncryption
45:a7:ff:7e:52:6c:f9:8d:7a:9d:aa:9c:b2:08:14:29:23:c4:
86:d3:bf:d0:d4:86:5b:4e:8a:aa:20:77:fa:7f:c8:4d:68:6f:
01:56:52:7a:e2:59:46:60:e7:fa:55:36:5c:71:78:56:9d:ce:
a4:ae:4d:0c:7d:fe:8b:e6:46:9d:a1:48:cf:9c:c4:de:54:d3:
d8:19:d3:ff:78:40:b6:e3:28:42:9a:af:67:1b:19:22:dd:3a:
dd:23:42:00:48:7b:f7:1a:16:06:9f:80:6d:66:2e:5c:1c:b3:
a5:9e:79:85:61:e4:e5:77:c2:c5:bf:a9:c6:db:c2:1b:18:47:
ca:d0:0d:39:5c:6b:31:16:b7:d7:b3:5f:66:9b:79:96:3b:6a:
1a:7f:bb:7d:14:cb:d3:5e:6a:78:52:06:9a:33:00:2e:c8:cf:
09:7a:95:62:a9:06:c1:2c:82:e3:fc:63:43:4e:3d:31:65:f7:
3d:64:f8:0c:1b:d4:12:e3:9d:e1:d9:f8:00:d6:bf:08:b7:30:
ac:c8:63:26:2c:fa:6d:5e:1a:e0:a0:5c:a0:3e:3c:d8:a7:85:
46:d5:92:50:a2:5c:b4:f1:6e:04:3e:6b:cf:d3:0c:fa:85:77:
c7:09:f4:36:75:4d:6d:5b:c5:9b:29:90:98:0b:fc:f4:e8:c0:
6c:4a:eb:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/JkFND7VgI4AARAZIXEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTY2MWExNjRkMmQ1MTdlYTc2NzdmYjIyOWNhZmExOWVi
YTk3ZjMwHhcNMjUwMTAyMDc0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTYyNjc4MTY2NzM5OGFiYzA3NWMwODU5Njc1ZDk2YjFjOGZhNjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc4bSmKW6aBAKXpzrXGipFxZJj/k
BWRq+M79jNf8YQLnCWnRIpIScpo8aW0IKWC09rbaBpQPQorNc+FLv1Xc8UsGfsyS
VCAoMAnZ589ViW07yoJRJaDvPzP6+pI+Hn4UNB2H3zdwhyRtlJm10b/NAuAeLw/e
sM4s9VCi6B63HOegq9onecXvj7CcRqZ62ugWsuUEl1PUjqhuWttbpjAvFY6C91K9
SF2S5aBlZXyL98rhUEcQHp3RXP2gi9hfvyh0lbRdXqT2gRDKzDj88PgQuqnSTHPI
GwNwlonqxn5vv0MXv99yx9sWn2/dSi3A4MZd06aCpFdVQ6SjR4VuAaUZGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFpiZ4Fmc5irwHXAhZZ12Wscj6YmMB8GA1UdIwQY
MBaAFBeWYaFk0tUX6nZ3+yKcr6GeupfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUt
ZTRmMmUwYjIzNTBmLzEvV21KbmdXWnptS3ZBZGNDRmxuWFpheHlQcGlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUtZTRmMmUwYjIzNTBm
LzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYCEMA0G
CSqGSIb3DQEBCwUAA4IBAQBFp/9+Umz5jXqdqpyyCBQpI8SG07/Q1IZbToqqIHf6
f8hNaG8BVlJ64llGYOf6VTZccXhWnc6krk0Mff6L5kadoUjPnMTeVNPYGdP/eEC2
4yhCmq9nGxki3TrdI0IASHv3GhYGn4BtZi5cHLOlnnmFYeTld8LFv6nG28IbGEfK
0A05XGsxFrfXs19mm3mWO2oaf7t9FMvTXmp4UgaaMwAuyM8JepViqQbBLILj/GND
Tj0xZfc9ZPgMG9QS453h2fgA1r8ItzCsyGMmLPptXhrgoFygPjzYp4VG1ZJQoly0
8W4EPmvP0wz6hXfHCfQ2dU1tW8WbKZCYC/z06MBsSus6
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:46 2025 by rpki-client