Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/wcV-PUcCwSD1_bZOyNtF92C9c9E.roa
File: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (raw, json)
Hash identifier: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=
Subject key identifier: C1:C5:7E:3D:47:02:C1:20:F5:FD:B6:4E:C8:DB:45:F7:60:BD:73:D1
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 0194221FC94FA74D1E8B1FDA53A1E866F8D1
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/wcV-PUcCwSD1_bZOyNtF92C9c9E.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205604
IP address blocks: 185.212.64.0/24 maxlen: 24
185.212.65.0/24 maxlen: 24
185.212.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c9:4f:a7:4d:1e:8b:1f:da:53:a1:e8:66:f8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c57e3d4702c120f5fdb64ec8db45f760bd73d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:fb:3f:5a:69:c9:05:a2:0f:a2:21:07:64:
14:fc:63:48:9a:f2:88:f4:5f:55:fc:83:ac:5c:e9:
14:81:b6:44:1b:4a:94:08:99:0f:61:d9:a2:eb:c5:
44:36:84:8e:d7:ca:a0:c0:ac:26:dc:85:2c:5d:8d:
fa:3d:2f:6e:87:fd:25:95:7a:ae:7c:28:0e:5c:6e:
a1:e4:e8:52:09:49:74:7c:40:86:9f:47:05:97:a4:
dc:3e:18:77:65:e0:bc:f6:8f:8c:42:d1:f1:8d:be:
21:58:f4:41:27:55:92:9e:1e:0c:15:18:db:d1:01:
25:a2:21:20:4d:c3:ea:5f:b4:39:ec:1c:c6:b9:60:
ca:42:25:dc:a0:7a:06:e5:98:f5:6e:83:2a:56:77:
80:f4:30:c8:7c:ab:89:71:fd:1e:8b:88:08:f8:ef:
30:57:a4:72:79:9b:8b:94:a1:69:42:0c:e6:e7:1f:
6e:6c:f3:cd:3d:5f:1b:e9:d4:a9:a3:66:69:2d:95:
84:db:60:4f:a3:45:18:bc:96:0b:13:78:70:39:7f:
db:5f:55:77:ff:dc:20:95:74:ab:0a:63:2c:6f:ea:
b4:56:df:03:80:c4:aa:8c:96:60:97:51:95:8c:05:
a9:aa:99:ab:5d:a6:59:45:c7:75:75:af:18:e7:24:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C5:7E:3D:47:02:C1:20:F5:FD:B6:4E:C8:DB:45:F7:60:BD:73:D1
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/wcV-PUcCwSD1_bZOyNtF92C9c9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.64.0-185.212.66.255
Signature Algorithm: sha256WithRSAEncryption
a1:de:b3:e0:f3:2d:b2:eb:bf:6a:ea:cd:96:b6:47:31:33:85:
23:67:79:53:c4:4a:cf:7e:32:d8:54:be:2c:28:dc:48:62:f5:
be:1f:31:1d:77:da:db:0f:8d:f6:0a:e4:1f:07:d2:86:da:5e:
14:db:69:09:9b:43:b7:f6:dc:79:ad:34:db:55:ad:84:ee:c4:
97:25:03:b3:82:cb:b0:ce:66:68:03:28:0d:4d:2d:1f:00:47:
44:88:1d:13:02:a0:a4:45:c9:e8:2d:5c:b4:20:26:73:a7:5a:
8a:a9:0e:da:0a:d4:f8:57:06:9b:1c:bc:74:8d:41:29:18:c6:
ee:83:12:fe:b9:f8:8e:08:e7:ea:d2:70:a4:8c:7a:32:2d:53:
f2:53:a8:de:7f:1d:8d:a3:67:99:ad:2d:1b:3d:6f:b1:3e:0a:
f4:44:ac:55:da:77:c7:3c:68:8c:f4:8b:f1:b0:b4:e7:c4:08:
12:a1:e9:5e:50:8a:48:2b:e1:5f:97:32:2e:d0:56:14:30:8e:
c2:3b:4a:30:cb:2d:6e:7f:79:10:bb:3c:ee:c9:53:eb:99:8f:
09:3d:79:09:36:a6:d6:cc:1b:da:12:fa:50:9c:9a:65:e3:dd:
fa:4e:32:c0:fb:25:26:df:28:bf:59:6a:16:cf:47:7b:b9:fc:
fb:de:02:07
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQiH8lPp00eix/aU6HoZvjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNTM4YWFlNGVjNGQwYTJmM2MwYTY1Zjg5ZjQ4NzQ2YjUx
NWU1N2IwHhcNMjUwMTAxMTM0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWM1N2UzZDQ3MDJjMTIwZjVmZGI2NGVjOGRiNDVmNzYwYmQ3M2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJn7P1ppyQWiD6IhB2QU/GNImvKI
9F9V/IOsXOkUgbZEG0qUCJkPYdmi68VENoSO18qgwKwm3IUsXY36PS9uh/0llXqu
fCgOXG6h5OhSCUl0fECGn0cFl6TcPhh3ZeC89o+MQtHxjb4hWPRBJ1WSnh4MFRjb
0QEloiEgTcPqX7Q57BzGuWDKQiXcoHoG5Zj1boMqVneA9DDIfKuJcf0ei4gI+O8w
V6RyeZuLlKFpQgzm5x9ubPPNPV8b6dSpo2ZpLZWE22BPo0UYvJYLE3hwOX/bX1V3
/9wglXSrCmMsb+q0Vt8DgMSqjJZgl1GVjAWpqpmrXaZZRcd1da8Y5yRZewIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMHFfj1HAsEg9f22TsjbRfdgvXPRMB8GA1UdIwQY
MBaAFP1Tiq5OxNCi88CmX4n0h0a1FeV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hNjlmZDctOGUxZi00MTc2LWE1ZGYt
NDI4MzdjY2EwMGMzLzEvd2NWLVBVY0N3U0QxX2JaT3lOdEY5MkM5YzlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hNjlmZDctOGUxZi00MTc2LWE1ZGYtNDI4MzdjY2EwMGMz
LzEvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAa51EAD
BAC51EIwDQYJKoZIhvcNAQELBQADggEBAKHes+DzLbLrv2rqzZa2RzEzhSNneVPE
Ss9+MthUviwo3Ehi9b4fMR132tsPjfYK5B8H0obaXhTbaQmbQ7f23HmtNNtVrYTu
xJclA7OCy7DOZmgDKA1NLR8AR0SIHRMCoKRFyegtXLQgJnOnWoqpDtoK1PhXBpsc
vHSNQSkYxu6DEv65+I4I5+rScKSMejItU/JTqN5/HY2jZ5mtLRs9b7E+CvRErFXa
d8c8aIz0i/GwtOfECBKh6V5Qikgr4V+XMi7QVhQwjsI7SjDLLW5/eRC7PO7JU+uZ
jwk9eQk2ptbMG9oS+lCcmmXj3fpOMsD7JSbfKL9ZahbPR3u5/PveAgc=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:08:39 2025 by rpki-client