Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wdBWbdditqOi12Hb_oRJA6-qlaw.roa
File: wdBWbdditqOi12Hb_oRJA6-qlaw.roa (raw, json)
Hash identifier: leNT4Dmq3SgF7xVR5RE8fbFiYoBGVDdRtInhv6D60Vw=
Subject key identifier: C1:D0:56:6D:D7:62:B6:A3:A2:D7:61:DB:FE:84:49:03:AF:AA:95:AC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A932A5F47B6958A8C41611A71CC19736
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wdBWbdditqOi12Hb_oRJA6-qlaw.roa
Signing time: Wed 07 May 2025 05:23:10 +0000
ROA not before: Wed 07 May 2025 05:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272149
IP address blocks: 151.242.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:32:a5:f4:7b:69:58:a8:c4:16:11:a7:1c:c1:97:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 7 05:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1d0566dd762b6a3a2d761dbfe844903afaa95ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:4f:82:7d:aa:31:4b:f5:b9:6a:f3:3e:b5:
5d:7e:ef:ab:81:6a:85:59:94:e5:8d:0b:86:8f:8d:
da:59:35:cb:87:30:ae:12:5c:50:01:c7:bb:22:8a:
a6:53:fb:94:8e:60:a0:57:20:6e:b2:94:e9:32:59:
5f:17:8e:3b:6d:21:a8:fd:15:00:6e:cb:08:f4:93:
e3:6e:f4:2b:81:f0:bf:24:e7:9a:e5:84:3c:97:4d:
fc:e0:1d:e0:df:b8:d7:81:2b:5f:4f:53:b0:8e:0e:
e5:41:32:6b:a5:49:1e:e9:da:dc:69:f7:3d:45:1f:
84:c4:f2:73:d5:69:21:f5:63:ca:67:bf:11:07:34:
be:70:81:72:a7:da:d2:18:ec:80:c7:0e:c9:3f:1b:
4e:72:11:c7:b1:86:17:56:d1:58:f0:82:58:67:91:
d4:99:1e:54:3a:c2:27:68:e3:ac:da:bb:48:ef:50:
0e:a1:74:23:6f:5b:75:60:34:64:c3:a0:71:d8:7c:
7f:f2:f4:dd:dc:3e:73:93:91:93:3e:00:57:6d:03:
76:08:50:c9:0b:bf:e0:76:d1:53:13:61:68:55:02:
5f:4c:79:8d:ac:fd:2f:8a:16:35:a5:83:14:ac:bb:
7a:7f:8a:6c:97:80:41:3a:6f:29:df:bb:ae:06:ea:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D0:56:6D:D7:62:B6:A3:A2:D7:61:DB:FE:84:49:03:AF:AA:95:AC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wdBWbdditqOi12Hb_oRJA6-qlaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.124.0/24
Signature Algorithm: sha256WithRSAEncryption
85:cf:2c:08:cd:a6:88:31:52:f5:82:f5:58:cd:8c:a5:89:f4:
da:1b:59:3e:85:1f:ad:e8:f9:e3:e1:3e:93:1f:aa:a7:5b:79:
0b:22:d7:3e:ac:36:6f:8f:fa:ca:b5:66:30:86:41:da:fe:e4:
09:77:a7:1a:df:c3:ca:60:b3:96:b5:09:46:20:fb:4b:8c:4b:
4d:2d:14:38:94:7d:fc:5f:53:b3:ca:7c:99:01:6d:e5:7f:64:
31:12:53:b2:6c:38:fb:3a:47:27:9c:b8:32:8a:32:cb:a5:27:
15:9f:96:f1:ff:e1:4e:ec:86:6c:91:8a:2b:73:fc:16:7f:2d:
f5:61:46:16:28:12:9f:d8:99:0a:af:b6:78:8a:a2:78:27:03:
95:81:9f:c9:0b:7d:57:81:85:54:48:56:6a:f0:49:a3:bf:69:
1b:49:1f:7f:67:7c:46:e0:83:bd:4e:2f:98:ec:99:7d:5b:7b:
e3:28:64:4c:41:a0:04:4c:88:cf:d4:c3:b0:32:06:2c:4e:9f:
67:9d:ba:2f:02:fc:2c:66:38:81:81:e6:c7:75:0a:a0:71:83:
fb:0f:65:54:5e:c5:52:dd:a2:dd:92:f5:fc:76:69:d0:e5:17:
0a:51:82:23:2b:89:bf:23:be:fd:36:58:16:20:ca:3b:01:54:
bd:1c:0d:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZapMqX0e2lYqMQWEaccwZc2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTA3MDUyMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWQwNTY2ZGQ3NjJiNmEzYTJkNzYxZGJmZTg0NDkwM2FmYWE5NWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJNPgn2qMUv1uWrzPrVdfu+rgWqF
WZTljQuGj43aWTXLhzCuElxQAce7IoqmU/uUjmCgVyBuspTpMllfF447bSGo/RUA
bssI9JPjbvQrgfC/JOea5YQ8l0384B3g37jXgStfT1Owjg7lQTJrpUke6drcafc9
RR+ExPJz1Wkh9WPKZ78RBzS+cIFyp9rSGOyAxw7JPxtOchHHsYYXVtFY8IJYZ5HU
mR5UOsInaOOs2rtI71AOoXQjb1t1YDRkw6Bx2Hx/8vTd3D5zk5GTPgBXbQN2CFDJ
C7/gdtFTE2FoVQJfTHmNrP0vihY1pYMUrLt6f4psl4BBOm8p37uuBupdswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHQVm3XYrajotdh2/6ESQOvqpWsMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvd2RCV2JkZGl0cU9pMTJIYl9vUkpBNi1xbGF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/J8MA0G
CSqGSIb3DQEBCwUAA4IBAQCFzywIzaaIMVL1gvVYzYylifTaG1k+hR+t6Pnj4T6T
H6qnW3kLItc+rDZvj/rKtWYwhkHa/uQJd6ca38PKYLOWtQlGIPtLjEtNLRQ4lH38
X1OzynyZAW3lf2QxElOybDj7OkcnnLgyijLLpScVn5bx/+FO7IZskYorc/wWfy31
YUYWKBKf2JkKr7Z4iqJ4JwOVgZ/JC31XgYVUSFZq8Emjv2kbSR9/Z3xG4IO9Ti+Y
7Jl9W3vjKGRMQaAETIjP1MOwMgYsTp9nnbovAvwsZjiBgebHdQqgcYP7D2VUXsVS
3aLdkvX8dmnQ5RcKUYIjK4m/I779NlgWIMo7AVS9HA38
-----END CERTIFICATE-----
Generated at Thu May 15 23:49:07 2025 by rpki-client