Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/WaCtt5UwOfSFSXfG87VM_1liKlY.roa
File: WaCtt5UwOfSFSXfG87VM_1liKlY.roa (raw, json)
Hash identifier: Xrq/MM8eS57x76XViCgsXlzExdGspNWHwUxtlx/0OhI=
Subject key identifier: 59:A0:AD:B7:95:30:39:F4:85:49:77:C6:F3:B5:4C:FF:59:62:2A:56
Certificate issuer: /CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Certificate serial: 0194ABDC42FC630E53FB9896438F64C70969
Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/WaCtt5UwOfSFSXfG87VM_1liKlY.roa
Signing time: Tue 28 Jan 2025 07:42:06 +0000
ROA not before: Tue 28 Jan 2025 07:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209583
IP address blocks: 5.134.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:dc:42:fc:63:0e:53:fb:98:96:43:8f:64:c7:09:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Validity
Not Before: Jan 28 07:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59a0adb7953039f4854977c6f3b54cff59622a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:7e:f7:9a:d4:14:3f:61:c1:2b:37:60:3b:
23:a3:1a:04:1f:77:77:28:fe:23:af:3d:c4:86:4f:
ea:40:7e:34:ef:dd:01:f8:3c:1e:f5:08:d4:51:ae:
91:68:2f:65:96:8f:8c:01:6b:0e:50:6a:c1:d5:27:
30:88:8d:03:89:cc:c8:48:ea:a5:09:2c:2f:b2:56:
43:a5:47:36:59:fc:e4:2f:66:3e:3a:3d:ee:2f:bb:
79:46:8b:3d:64:6f:7a:6b:cf:44:83:b2:f4:69:17:
67:1f:87:2f:11:99:ad:a8:99:6b:ab:ab:cf:23:37:
83:f4:b1:f4:0b:14:b7:05:46:5c:4a:54:09:91:dc:
42:c7:7c:d0:7a:37:66:fa:0a:81:3d:f1:9e:13:af:
2a:02:a9:74:4e:13:df:26:9d:69:c5:51:1b:f3:18:
40:12:e9:aa:de:0e:6b:d0:db:cf:cd:01:f9:08:3e:
09:0c:b0:a7:80:3b:cb:4e:a5:3e:3b:07:0e:1a:0a:
6c:04:16:06:05:c3:1d:b9:66:17:fc:bc:11:d2:5f:
05:d5:8c:4b:3b:f3:85:97:e3:10:b5:7b:ea:e0:68:
04:79:c2:32:30:ac:e6:69:f2:cd:07:60:2a:d1:4a:
b0:17:82:12:89:02:58:db:1a:cf:e9:24:ef:e1:c9:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A0:AD:B7:95:30:39:F4:85:49:77:C6:F3:B5:4C:FF:59:62:2A:56
X509v3 Authority Key Identifier:
keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/WaCtt5UwOfSFSXfG87VM_1liKlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.123.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ed:7b:e4:a0:a4:f6:3a:16:60:40:54:a2:d4:01:cc:a7:ed:
65:0c:27:b0:b0:75:85:66:71:01:8b:1a:a6:17:d1:fe:c1:64:
f1:2b:74:6a:94:97:30:50:72:ab:57:26:eb:06:3a:3f:92:8c:
88:c8:41:58:33:0d:5e:60:7d:82:67:a2:04:80:d1:6b:6d:cd:
25:e7:7e:67:d3:c7:54:3e:0a:b3:8f:18:c2:2e:4b:72:22:7a:
2f:6d:ef:1f:be:78:3d:30:4b:40:1f:55:3c:5b:5f:0b:e7:51:
8b:7e:3b:19:28:06:da:8a:09:b1:1b:58:9d:9f:8a:79:b3:16:
cb:eb:a1:cc:b6:df:f5:c1:50:4a:b9:cb:ee:7b:c8:6a:e8:6b:
a9:e1:f9:ca:dc:bb:f0:ac:31:f9:57:1f:18:22:f9:49:e5:1c:
64:1a:4c:f6:d7:fd:3b:68:f2:c4:f7:e0:6a:61:aa:68:e0:cc:
2b:80:17:3a:24:47:f7:38:4a:85:82:34:37:93:1b:e5:7b:1b:
05:40:3a:9f:20:e8:18:b0:05:03:dc:7b:6b:09:6b:46:ab:49:
29:cb:3c:0f:c2:3e:71:98:dc:a2:78:63:a6:9a:75:f7:72:60:
2e:92:d2:88:aa:81:f2:39:63:f5:0c:c8:35:fd:cf:54:61:b1:
d8:aa:5b:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSr3EL8Yw5T+5iWQ49kxwlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMjNiZTZkNTQ4MTQ1ODY3ODYzYjdiMmZhNDY0YmRmODUx
OGEwYzkwHhcNMjUwMTI4MDc0MjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWEwYWRiNzk1MzAzOWY0ODU0OTc3YzZmM2I1NGNmZjU5NjIyYTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaZ+95rUFD9hwSs3YDsjoxoEH3d3
KP4jrz3Ehk/qQH40790B+Dwe9QjUUa6RaC9llo+MAWsOUGrB1ScwiI0DiczISOql
CSwvslZDpUc2WfzkL2Y+Oj3uL7t5Ros9ZG96a89Eg7L0aRdnH4cvEZmtqJlrq6vP
IzeD9LH0CxS3BUZcSlQJkdxCx3zQejdm+gqBPfGeE68qAql0ThPfJp1pxVEb8xhA
Eumq3g5r0NvPzQH5CD4JDLCngDvLTqU+OwcOGgpsBBYGBcMduWYX/LwR0l8F1YxL
O/OFl+MQtXvq4GgEecIyMKzmafLNB2Aq0UqwF4ISiQJY2xrP6STv4cmdfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFmgrbeVMDn0hUl3xvO1TP9ZYipWMB8GA1UdIwQY
MBaAFBMjvm1UgUWGeGO3svpGS9+FGKDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgt
NWRlMzJiNjZkYjBhLzEvV2FDdHQ1VXdPZlNGU1hmRzg3Vk1fMWxpS2xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgtNWRlMzJiNjZkYjBh
LzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYZ7MA0G
CSqGSIb3DQEBCwUAA4IBAQAE7XvkoKT2OhZgQFSi1AHMp+1lDCewsHWFZnEBixqm
F9H+wWTxK3RqlJcwUHKrVybrBjo/koyIyEFYMw1eYH2CZ6IEgNFrbc0l535n08dU
PgqzjxjCLktyInovbe8fvng9MEtAH1U8W18L51GLfjsZKAbaigmxG1idn4p5sxbL
66HMtt/1wVBKucvue8hq6Gup4fnK3LvwrDH5Vx8YIvlJ5RxkGkz21/07aPLE9+Bq
Yapo4MwrgBc6JEf3OEqFgjQ3kxvlexsFQDqfIOgYsAUD3HtrCWtGq0kpyzwPwj5x
mNyieGOmmnX3cmAuktKIqoHyOWP1DMg1/c9UYbHYqluV
-----END CERTIFICATE-----
Generated at Sat May 10 13:27:00 2025 by rpki-client