Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/WrzesfgAIkReChvkvHbeme9Obyo.roa
File: WrzesfgAIkReChvkvHbeme9Obyo.roa (raw, json)
Hash identifier: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=
Subject key identifier: 5A:BC:DE:B1:F8:00:22:44:5E:0A:1B:E4:BC:76:DE:99:EF:4E:6F:2A
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 019423D6E27A6F4902FE95A744B79BCE4F73
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/WrzesfgAIkReChvkvHbeme9Obyo.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51264
IP address blocks: 91.228.218.0/24 maxlen: 24
176.117.68.0/23 maxlen: 23
193.108.170.0/24 maxlen: 24
194.0.206.0/24 maxlen: 24
194.143.146.0/24 maxlen: 24
195.14.123.0/24 maxlen: 24
195.93.173.0/24 maxlen: 24
2001:678:cfc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e2:7a:6f:49:02:fe:95:a7:44:b7:9b:ce:4f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5abcdeb1f80022445e0a1be4bc76de99ef4e6f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:cd:9c:cc:1d:cd:88:85:b9:6d:9c:15:3d:
2c:12:cc:0d:05:4a:32:e3:3f:1c:e7:b2:c7:ea:cf:
27:b4:db:04:e2:5e:a0:19:cd:ad:14:07:d7:fc:05:
34:ad:fb:72:13:81:f7:ba:71:32:d9:90:e5:01:29:
bd:56:a9:62:31:ae:5f:a8:3d:e8:29:8a:7f:10:53:
ba:0e:33:98:91:ff:f4:b6:e6:bb:28:ed:36:e2:d5:
8a:d8:a1:4b:7f:aa:7c:11:3d:8f:d7:3f:c3:f1:64:
dd:fc:47:12:c3:76:59:01:c9:47:89:67:2c:74:5b:
26:b0:ff:ad:c1:05:52:20:69:7e:e3:d5:c4:2c:07:
b2:fe:6f:30:2f:c6:77:9c:e5:76:4b:02:66:7d:00:
09:70:f5:10:c7:3b:e4:8f:29:62:69:0f:b5:05:b1:
4c:08:06:82:e4:c1:8c:ed:f0:d0:0f:c7:64:d4:cf:
de:5c:90:a2:5e:01:77:0b:65:80:a5:ba:d5:71:fa:
f4:04:47:e1:2b:25:f0:b8:b5:8f:6d:82:82:f0:e2:
cb:ef:86:17:35:b5:59:c9:c7:f9:b8:e5:32:21:32:
c8:65:fb:f3:58:c0:cd:e5:f0:71:ad:de:cd:79:94:
89:74:b7:02:d3:10:66:57:47:d0:83:57:c7:11:14:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:DE:B1:F8:00:22:44:5E:0A:1B:E4:BC:76:DE:99:EF:4E:6F:2A
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/WrzesfgAIkReChvkvHbeme9Obyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.218.0/24
176.117.68.0/23
193.108.170.0/24
194.0.206.0/24
194.143.146.0/24
195.14.123.0/24
195.93.173.0/24
IPv6:
2001:678:cfc::/48
Signature Algorithm: sha256WithRSAEncryption
90:18:64:d1:53:56:54:80:45:55:a9:48:cb:af:e5:d2:6d:99:
f1:fa:74:7a:5d:09:72:f3:78:c6:e5:b0:f3:2b:06:ca:c4:cc:
75:3c:45:47:d1:07:55:c5:d9:88:70:1c:0b:b6:eb:8f:5a:8e:
6a:bd:06:5f:80:4d:76:7e:14:e1:43:d0:3e:c5:a8:50:05:e0:
23:14:1d:0d:71:3a:4e:20:96:9c:10:4f:6a:27:b6:a3:71:6c:
b7:fd:7b:6c:bb:fe:c8:6b:ba:f7:04:3e:5e:65:28:b7:6c:59:
11:25:5c:3d:d7:70:27:e4:c9:3a:8b:a7:49:c2:fd:42:16:b8:
82:80:de:a3:bd:20:e2:d0:89:11:fe:c8:10:40:f6:ed:46:6b:
c2:7b:e2:59:4a:77:0c:40:5b:b3:e3:f8:8d:67:5a:be:bc:38:
1c:9a:51:b1:52:b3:55:89:ea:64:55:06:d3:8c:13:46:e4:d5:
13:c2:c0:cb:13:1f:45:6e:55:c2:62:71:47:3f:2c:32:2a:5e:
a4:80:ca:c2:b3:01:23:20:79:e2:2d:a6:4e:67:31:e4:aa:72:
b0:a4:1a:43:c1:c0:54:57:36:a3:64:ee:1f:88:e2:bd:e6:ba:
2b:b6:e2:2f:42:9c:1b:1e:3e:db:18:5f:e2:2e:b4:2a:f1:92:
f7:d2:34:f7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZQj1uJ6b0kC/pWnRLebzk9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0
MTVjYjMwHhcNMjUwMTAxMjE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWJjZGViMWY4MDAyMjQ0NWUwYTFiZTRiYzc2ZGU5OWVmNGU2ZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVTNnMwdzYiFuW2cFT0sEswNBUoy
4z8c57LH6s8ntNsE4l6gGc2tFAfX/AU0rftyE4H3unEy2ZDlASm9VqliMa5fqD3o
KYp/EFO6DjOYkf/0tua7KO024tWK2KFLf6p8ET2P1z/D8WTd/EcSw3ZZAclHiWcs
dFsmsP+twQVSIGl+49XELAey/m8wL8Z3nOV2SwJmfQAJcPUQxzvkjyliaQ+1BbFM
CAaC5MGM7fDQD8dk1M/eXJCiXgF3C2WApbrVcfr0BEfhKyXwuLWPbYKC8OLL74YX
NbVZycf5uOUyITLIZfvzWMDN5fBxrd7NeZSJdLcC0xBmV0fQg1fHERSdewIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFFq83rH4ACJEXgob5Lx23pnvTm8qMB8GA1UdIwQY
MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt
M2NmMmE0NjIyZmJjLzEvV3J6ZXNmZ0FJa1JlQ2h2a3ZIYmVtZTlPYnlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj
LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAwBAIAATAqAwQAW+TaAwQB
sHVEAwQAwWyqAwQAwgDOAwQAwo+SAwQAww57AwQAw12tMA8EAgACMAkDBwAgAQZ4
DPwwDQYJKoZIhvcNAQELBQADggEBAJAYZNFTVlSARVWpSMuv5dJtmfH6dHpdCXLz
eMblsPMrBsrEzHU8RUfRB1XF2YhwHAu2649ajmq9Bl+ATXZ+FOFD0D7FqFAF4CMU
HQ1xOk4glpwQT2ontqNxbLf9e2y7/shruvcEPl5lKLdsWRElXD3XcCfkyTqLp0nC
/UIWuIKA3qO9IOLQiRH+yBBA9u1Ga8J74llKdwxAW7Pj+I1nWr68OByaUbFSs1WJ
6mRVBtOME0bk1RPCwMsTH0VuVcJicUc/LDIqXqSAysKzASMgeeItpk5nMeSqcrCk
GkPBwFRXNqNk7h+I4r3muiu24i9CnBsePtsYX+IutCrxkvfSNPc=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:16 2025 by rpki-client