Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa
File: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (raw, json)
Hash identifier: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=
Subject key identifier: 5A:2E:B4:47:18:D6:22:50:CF:6F:7F:EC:CD:59:8D:F8:69:74:AA:81
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 0194258E964B70D238458D00B7BA9754E575
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa
Signing time: Thu 02 Jan 2025 05:48:09 +0000
ROA not before: Thu 02 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 185.205.132.0/22 maxlen: 22
185.205.132.0/24 maxlen: 24
185.205.133.0/24 maxlen: 24
185.205.134.0/24 maxlen: 24
185.205.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:96:4b:70:d2:38:45:8d:00:b7:ba:97:54:e5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Jan 2 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a2eb44718d62250cf6f7feccd598df86974aa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0f:3b:16:3d:5a:4d:bb:09:6a:a7:5e:08:e8:
1e:6c:9d:d5:de:75:af:6e:ac:d6:06:84:c6:55:37:
3c:2e:82:a4:ab:68:f3:66:57:f1:f2:48:d2:8d:e9:
88:b8:7d:be:c2:7f:c8:68:f3:0a:d9:71:30:9a:e1:
9f:10:e4:74:dc:c5:3f:c4:02:65:f8:37:e9:b5:cc:
f2:49:d8:f9:20:77:58:02:74:e5:06:10:f3:85:d2:
62:c6:53:ff:c0:0b:94:6b:1e:19:24:67:d5:0e:98:
1a:6a:00:13:a0:a5:d3:54:df:a0:85:15:c1:3d:2d:
a3:2c:fa:f1:0e:38:bc:4f:fd:2e:5c:dc:9e:4d:fb:
fd:35:8c:cc:e1:c0:d0:05:0b:ca:87:e0:67:f9:b5:
b9:e0:08:95:06:76:2e:05:e3:7e:4d:69:7d:d2:6b:
ca:04:fe:81:5b:be:bc:e0:1e:4e:54:b0:51:45:ad:
58:8d:cb:d3:82:30:15:4e:12:52:43:a3:71:73:77:
47:3b:32:d2:ae:0e:9e:a7:af:60:33:11:cc:89:06:
01:0d:1d:c8:1a:94:c0:5c:e4:12:a4:4d:ea:65:54:
11:72:b8:83:c9:95:48:69:77:20:32:5c:bc:dd:9d:
84:6b:cc:4e:13:29:8f:e8:b0:81:47:16:17:93:24:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:B4:47:18:D6:22:50:CF:6F:7F:EC:CD:59:8D:F8:69:74:AA:81
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:02:f8:d2:a6:95:19:1c:1c:cc:0e:63:df:04:7c:25:7d:14:
94:ea:8d:75:16:2e:3b:27:45:52:2a:90:33:a0:79:42:b6:b7:
cc:09:18:e6:f5:26:4e:7f:53:26:a5:16:2d:7b:c9:80:79:15:
40:54:f2:73:21:02:bd:cc:47:f0:ff:05:57:66:05:6d:48:4e:
6a:0e:1a:ec:d2:5b:45:22:7e:c3:5b:ab:32:18:ff:82:ec:de:
bb:d0:dc:1d:d0:ea:cc:82:21:0c:9c:7a:e5:cf:3c:71:33:57:
a1:c7:a4:7d:4e:80:7c:ee:72:07:e8:e8:75:98:40:49:31:f2:
fb:74:7a:a5:4c:39:71:bd:2b:9a:cf:1e:dc:fb:08:b7:6c:cf:
14:94:bd:0d:f8:89:ca:17:8f:fb:96:fd:c4:37:c7:26:91:ce:
3b:58:69:1f:38:64:d7:36:2f:22:17:14:aa:50:45:28:c6:35:
31:07:70:bf:0b:d7:c0:d5:43:dd:c9:1a:4a:2c:4c:39:eb:c8:
2f:3e:c5:6e:f1:19:f6:d2:0a:53:6e:9b:0e:12:20:ef:82:1c:
87:6b:b9:65:5b:2e:1b:4e:27:11:79:c6:83:ab:3a:38:06:09:
ed:a4:6d:3e:bc:d9:06:c1:8d:9f:9a:e1:1c:38:8a:91:49:19:
50:85:29:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:21 2025 by rpki-client