Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WhoZCTmWlbW8c_CzUwK0ch0ThMQ.roa
File: WhoZCTmWlbW8c_CzUwK0ch0ThMQ.roa (raw, json)
Hash identifier: flfApSnsc3eU5fr7sxlzxwOMGKtvaVT9oXd0xUZsXLw=
Subject key identifier: 5A:1A:19:09:39:96:95:B5:BC:73:F0:B3:53:02:B4:72:1D:13:84:C4
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0196F2A8D25E8508E5B41C26F61CDEC9D48F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WhoZCTmWlbW8c_CzUwK0ch0ThMQ.roa
Signing time: Wed 21 May 2025 11:44:32 +0000
ROA not before: Wed 21 May 2025 11:44:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63018
IP address blocks: 45.128.59.0/24 maxlen: 24
171.22.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:a8:d2:5e:85:08:e5:b4:1c:26:f6:1c:de:c9:d4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 21 11:44:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a1a1909399695b5bc73f0b35302b4721d1384c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:de:ed:1f:a1:07:07:00:03:07:55:c1:87:
03:7c:bc:34:1e:29:c2:d8:4b:bc:c5:8f:2f:2a:6b:
b1:25:95:5f:fa:b4:d5:51:e1:1f:0c:43:e5:3f:c7:
7d:60:b9:52:e4:00:b5:05:ce:b8:40:0f:10:47:5e:
14:d1:97:38:f6:64:ff:d3:43:9e:33:0f:95:76:4c:
b8:a2:d4:97:21:63:39:80:f3:75:55:6d:66:1e:34:
f4:0f:f8:b1:66:e3:53:08:22:81:b6:e4:20:5f:a9:
52:58:27:5f:f1:2b:3e:eb:5c:74:5e:27:31:eb:d1:
f3:7f:33:ea:96:36:6b:01:b7:4e:1a:c9:37:3b:e8:
59:bc:fe:1f:cc:82:db:a7:96:32:fc:67:3c:e5:76:
31:e2:a2:68:a9:9b:3d:6f:6e:8f:b5:26:02:e2:55:
86:95:88:9b:33:89:78:fd:8d:31:5e:3d:cf:8f:c1:
0d:66:a8:5a:b1:0a:dd:a4:3d:db:f4:5a:3f:40:36:
25:68:a4:da:12:95:ca:95:d4:51:dc:b3:8f:0c:9a:
4e:62:87:c6:e3:bd:6e:f8:d6:4c:ca:f8:78:85:3f:
81:36:b1:4d:ea:d4:e0:fd:f5:29:c9:fa:c7:d2:53:
08:5f:d2:ef:46:f5:5d:63:a7:e5:25:5c:b6:43:69:
68:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1A:19:09:39:96:95:B5:BC:73:F0:B3:53:02:B4:72:1D:13:84:C4
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WhoZCTmWlbW8c_CzUwK0ch0ThMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.59.0/24
171.22.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:14:44:37:46:68:7b:58:a7:c1:24:5b:01:c0:d0:d0:73:17:
8f:f8:d6:83:33:3f:bc:cf:fe:b6:14:20:21:17:d9:a9:d7:8a:
e6:b4:2b:e1:2c:fc:ff:ff:59:ef:e7:78:c5:c3:0e:aa:39:86:
8f:19:cb:7d:db:93:2d:0a:a6:49:cd:1c:b0:b7:44:2e:56:c7:
8f:2b:57:d3:e4:ce:4c:23:2f:61:51:9a:12:80:ce:8f:96:1f:
f7:9f:0f:53:ae:de:aa:88:55:19:6e:53:82:74:e2:5c:d1:d1:
4b:a5:a4:36:37:de:1a:48:9f:34:7f:14:d7:43:c2:d5:99:73:
49:2b:60:0b:d6:37:3c:ec:6f:83:d0:2c:3c:fe:68:2e:ce:e9:
79:31:5d:81:65:2b:39:63:66:e9:5d:21:b1:67:36:d1:63:6f:
b3:4b:cf:67:73:30:97:d1:c0:34:22:40:e3:e7:33:d4:0b:c5:
64:7d:58:93:7e:fd:3c:12:98:e9:76:af:18:fb:9d:b1:df:fb:
f6:b5:98:dd:8a:1a:09:7c:f4:d9:51:f4:97:db:9c:79:9e:bf:
c1:65:bd:e6:d6:d3:ff:37:4d:a0:81:ab:3e:f3:f5:fc:33:44:
62:c4:a6:ac:f1:cb:71:b6:d5:c9:b5:13:ed:92:48:8f:96:f4:
83:50:02:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZbyqNJehQjltBwm9hzeydSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwNTIxMTE0NDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTFhMTkwOTM5OTY5NWI1YmM3M2YwYjM1MzAyYjQ3MjFkMTM4NGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWPe7R+hBwcAAwdVwYcDfLw0HinC
2Eu8xY8vKmuxJZVf+rTVUeEfDEPlP8d9YLlS5AC1Bc64QA8QR14U0Zc49mT/00Oe
Mw+Vdky4otSXIWM5gPN1VW1mHjT0D/ixZuNTCCKBtuQgX6lSWCdf8Ss+61x0Xicx
69HzfzPqljZrAbdOGsk3O+hZvP4fzILbp5Yy/Gc85XYx4qJoqZs9b26PtSYC4lWG
lYibM4l4/Y0xXj3Pj8ENZqhasQrdpD3b9Fo/QDYlaKTaEpXKldRR3LOPDJpOYofG
471u+NZMyvh4hT+BNrFN6tTg/fUpyfrH0lMIX9LvRvVdY6flJVy2Q2lojwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFoaGQk5lpW1vHPws1MCtHIdE4TEMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvV2hvWkNUbVdsYlc4Y19DelV3SzBjaDBUaE1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYA7AwQA
qxZsMA0GCSqGSIb3DQEBCwUAA4IBAQBrFEQ3Rmh7WKfBJFsBwNDQcxeP+NaDMz+8
z/62FCAhF9mp14rmtCvhLPz//1nv53jFww6qOYaPGct925MtCqZJzRywt0QuVseP
K1fT5M5MIy9hUZoSgM6Plh/3nw9Trt6qiFUZblOCdOJc0dFLpaQ2N94aSJ80fxTX
Q8LVmXNJK2AL1jc87G+D0Cw8/mguzul5MV2BZSs5Y2bpXSGxZzbRY2+zS89nczCX
0cA0IkDj5zPUC8VkfViTfv08Epjpdq8Y+52x3/v2tZjdihoJfPTZUfSX25x5nr/B
Zb3m1tP/N02ggas+8/X8M0RixKas8ctxttXJtRPtkkiPlvSDUALe
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:00:34 2025 by rpki-client