Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wgJNVDO4MJ18Dd0tMSlMZahVwro.roa
File: wgJNVDO4MJ18Dd0tMSlMZahVwro.roa (raw, json)
Hash identifier: weC2O5EGAepU9a5OpxxKbr74KY3UmR/bdZmWNEgvz8o=
Subject key identifier: C2:02:4D:54:33:B8:30:9D:7C:0D:DD:2D:31:29:4C:65:A8:55:C2:BA
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01982DD8E485121F5B865B36E2FEA98875A7
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wgJNVDO4MJ18Dd0tMSlMZahVwro.roa
Signing time: Mon 21 Jul 2025 16:37:25 +0000
ROA not before: Mon 21 Jul 2025 16:37:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198510
IP address blocks: 194.231.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:d8:e4:85:12:1f:5b:86:5b:36:e2:fe:a9:88:75:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 21 16:37:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2024d5433b8309d7c0ddd2d31294c65a855c2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:b1:3e:58:b2:c8:6a:d1:37:40:48:1b:ea:
4e:d5:a3:40:45:b4:75:af:d0:53:2a:47:0d:af:4b:
6a:8d:24:41:2c:61:5a:07:e6:2e:88:e0:53:85:f9:
24:ac:54:d4:b4:33:2c:7e:c8:79:6d:5b:b5:90:0c:
ec:8f:f8:33:e7:e2:15:e1:fc:ae:b3:e6:2f:a9:79:
31:93:b9:00:89:6c:7f:ec:87:7d:00:5c:08:36:6b:
6d:99:a0:cd:17:de:11:8c:91:ca:b9:4b:1f:8a:c5:
32:44:0c:6b:f0:6e:77:96:8b:75:8a:02:e8:46:da:
f0:99:34:40:ac:27:05:65:ed:68:cd:61:55:49:f9:
d8:7a:a5:ec:a1:f8:c4:db:67:41:63:72:e0:a3:d2:
24:0c:c2:58:b2:4e:64:4c:97:de:82:40:27:c7:d7:
6b:34:9b:ba:69:83:bc:8a:cf:40:a9:8d:47:d4:0f:
c2:de:72:09:c3:af:ad:72:d6:79:ca:91:6d:7a:78:
31:a1:d7:47:09:70:c4:76:59:b8:fd:5c:15:ae:98:
89:82:d3:ce:b8:08:15:18:44:28:b8:96:e3:73:fc:
92:a0:40:17:4e:16:6a:c1:e2:6c:e7:1b:66:28:e9:
29:b4:36:97:24:56:d0:a5:fe:50:24:13:2b:fd:f3:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:02:4D:54:33:B8:30:9D:7C:0D:DD:2D:31:29:4C:65:A8:55:C2:BA
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wgJNVDO4MJ18Dd0tMSlMZahVwro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.158.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:1f:3f:05:45:f7:37:bb:73:88:d4:83:71:8e:54:fa:cc:90:
e4:1f:c8:96:ac:ed:32:42:3e:b1:be:66:2d:18:41:69:c0:11:
9e:3c:40:a0:d4:7f:60:90:4c:1b:6d:8c:91:22:5b:93:54:a5:
82:ab:ae:44:b9:8f:23:c7:29:7f:dd:1b:8f:a8:3a:e3:4a:ac:
38:c3:fe:6d:d2:f7:30:1d:ac:c5:e7:24:e6:56:c8:76:4d:67:
50:7e:9b:f3:c6:20:68:04:ec:58:dd:af:56:fb:7b:f5:91:fd:
53:05:07:68:b7:fc:6f:5c:c5:5f:95:1f:87:76:d4:1c:51:6c:
be:5a:17:86:85:9b:37:83:2e:dc:bc:08:e7:30:9e:94:5f:05:
37:a5:e2:67:da:d4:6e:a3:94:29:0d:c7:88:b1:d3:03:9c:07:
45:76:8e:67:78:87:74:06:bb:ec:57:b7:95:c0:18:02:4c:96:
52:a7:19:d3:ee:cb:cd:2d:a3:4c:80:9d:92:f6:89:90:91:48:
81:b7:57:4e:50:82:a4:8a:76:39:7f:37:65:21:c2:46:5d:b7:
61:4f:02:6f:f9:61:26:0f:7c:da:68:95:d2:d6:76:63:6e:8e:
4d:5b:a1:43:82:e0:43:82:44:1b:bc:ba:ea:c6:f3:2c:1e:8f:
09:b2:05:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 12:05:09 2025 by rpki-client