Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/WCta5h-gHZZ_q49m5T2AptEQh0A.roa
File: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (raw, json)
Hash identifier: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=
Subject key identifier: 58:2B:5A:E6:1F:A0:1D:96:7F:AB:8F:66:E5:3D:80:A6:D1:10:87:40
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 0194258E4BFC1B40FD792CAE2D55ECB4E45B
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/WCta5h-gHZZ_q49m5T2AptEQh0A.roa
Signing time: Thu 02 Jan 2025 05:47:50 +0000
ROA not before: Thu 02 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64437
IP address blocks: 5.104.141.0/24 maxlen: 24
5.104.142.0/24 maxlen: 24
5.104.143.0/24 maxlen: 24
37.143.35.0/24 maxlen: 24
37.143.38.0/24 maxlen: 24
37.143.39.0/24 maxlen: 24
37.156.228.0/24 maxlen: 24
37.156.252.0/22 maxlen: 24
89.38.160.0/24 maxlen: 24
176.126.232.0/24 maxlen: 24
176.126.233.0/24 maxlen: 24
176.126.234.0/24 maxlen: 24
185.107.36.0/24 maxlen: 24
185.107.38.0/24 maxlen: 24
185.107.100.0/24 maxlen: 24
185.107.101.0/24 maxlen: 24
185.107.102.0/24 maxlen: 24
185.107.103.0/24 maxlen: 24
212.92.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:4b:fc:1b:40:fd:79:2c:ae:2d:55:ec:b4:e4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jan 2 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=582b5ae61fa01d967fab8f66e53d80a6d1108740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:22:10:bb:36:b9:17:3a:79:49:6a:83:1f:f3:
d1:82:75:c9:4b:7c:f8:bb:23:5a:18:ef:cb:76:73:
c6:ee:e4:9b:49:57:73:b0:97:66:a5:70:79:07:d3:
90:5a:85:1c:83:79:e3:62:d0:55:6c:01:8f:ad:26:
81:38:84:4e:c8:4c:36:7b:e2:bb:c3:83:90:61:09:
95:03:e8:54:dd:8a:48:ae:d2:56:6d:5e:ac:4d:f2:
5b:21:44:a7:ee:5d:84:ec:4c:ea:c9:fb:3f:b1:c9:
e9:6b:eb:56:11:7c:70:0f:d7:55:76:54:98:52:cb:
70:9a:71:59:12:cd:3d:7c:f8:7b:50:79:18:a3:a4:
fe:84:01:12:87:58:d4:80:84:ea:09:bf:ae:b7:c8:
38:16:e0:3f:2c:5d:14:4d:21:55:4d:54:7d:2c:14:
00:ba:a2:84:28:63:e6:70:41:19:3a:dd:1b:80:df:
a1:f5:fc:61:bd:9a:f8:be:c2:33:16:e7:8b:e5:f4:
ab:49:03:c4:2a:b6:2a:de:92:09:30:e1:05:71:18:
6e:56:9b:5a:d2:3c:e4:0f:a6:0e:77:3f:cc:f8:f3:
9f:bf:9b:98:3d:2f:58:d7:7c:81:fc:b2:40:f1:69:
55:ef:b0:fe:fb:94:22:e7:82:11:ef:af:e2:1a:15:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2B:5A:E6:1F:A0:1D:96:7F:AB:8F:66:E5:3D:80:A6:D1:10:87:40
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/WCta5h-gHZZ_q49m5T2AptEQh0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.141.0-5.104.143.255
37.143.35.0/24
37.143.38.0/23
37.156.228.0/24
37.156.252.0/22
89.38.160.0/24
176.126.232.0-176.126.234.255
185.107.36.0/24
185.107.38.0/24
185.107.100.0/22
212.92.124.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:93:a9:39:4a:00:75:a5:24:83:38:94:62:ce:eb:1c:38:6e:
31:ab:d0:ca:cc:f7:db:cd:4e:b0:22:7f:17:e6:83:75:2b:7b:
ce:1f:79:73:57:d6:ee:f0:5b:bb:b2:90:92:8f:40:5e:8a:a1:
70:88:ac:09:8a:47:ef:6b:19:33:f0:80:5a:f8:b2:f4:b2:3e:
91:ca:21:0c:23:45:6c:4e:59:c6:89:f1:20:4f:cc:90:3d:03:
07:b3:5a:b7:46:71:ca:72:2d:45:07:8c:6f:f1:23:5e:b1:6f:
8d:f1:2e:8d:63:bc:88:58:58:72:e0:9d:e6:7a:64:e1:ce:3f:
0a:18:dc:69:6f:6c:ea:95:a4:d1:9b:47:01:8a:18:d0:8b:ad:
26:12:f0:85:f7:b8:1b:48:91:b1:09:e4:3d:65:82:2c:2a:6d:
f6:bd:86:07:6d:98:26:ca:da:d6:e4:a3:2e:89:16:ea:a6:3c:
ec:31:b9:bd:8a:f4:58:6d:56:b6:f9:c6:e9:48:2b:a1:d0:8f:
6c:44:44:e2:78:4f:28:68:3d:91:3d:3a:7e:e7:bf:ac:d0:23:
8c:a8:51:1d:eb:6b:ca:44:ab:64:f3:56:bb:a4:b5:87:4c:2b:
ee:c6:5f:34:b4:36:6e:85:22:4b:b8:54:42:e0:0a:34:d9:71:
68:ff:01:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:24:43 2025 by rpki-client