Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/1wC6QLmrFyKOInRDcmow-XqW0-M.roa
File: 1wC6QLmrFyKOInRDcmow-XqW0-M.roa (raw, json)
Hash identifier: Ps6eQ5zeLE+JiNNmSXdT1CgRZlmqpZpw99jqTkN18/0=
Subject key identifier: D7:00:BA:40:B9:AB:17:22:8E:22:74:43:72:6A:30:F9:7A:96:D3:E3
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 0194221F9F71D584D61AFDC6392E8BA4CCE7
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/1wC6QLmrFyKOInRDcmow-XqW0-M.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59790
IP address blocks: 5.154.243.0/24 maxlen: 24
185.65.208.0/22 maxlen: 22
185.109.144.0/22 maxlen: 22
185.182.164.0/22 maxlen: 22
185.227.52.0/22 maxlen: 22
193.93.140.0/23 maxlen: 23
193.124.14.0/24 maxlen: 24
193.124.84.0/24 maxlen: 24
194.135.47.0/24 maxlen: 24
194.135.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9f:71:d5:84:d6:1a:fd:c6:39:2e:8b:a4:cc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d700ba40b9ab17228e227443726a30f97a96d3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:49:df:07:08:d8:24:6a:b0:c5:fb:0f:df:
3f:8e:5a:ef:7d:59:53:30:26:1d:eb:74:5c:2c:2f:
e2:4a:24:4e:47:fc:c2:62:1a:07:b9:6d:97:9f:cf:
93:98:ce:e8:c3:c5:3b:72:9d:db:c9:21:c5:6e:e2:
f8:01:a0:e3:3a:52:d3:3c:96:ed:62:b5:bb:60:39:
f7:71:bf:9a:40:76:f1:78:d1:26:7a:b8:3d:4e:ad:
40:83:97:24:d2:45:9e:0f:8f:2b:96:d4:e7:5c:2a:
47:55:47:fa:7c:5c:96:92:a3:4e:0d:2c:45:32:95:
c0:5c:86:6f:23:26:34:3f:8f:c7:1d:66:d7:93:22:
1d:98:29:1f:ca:e8:a6:15:07:89:ea:36:88:25:2f:
01:22:ba:b1:38:ef:f0:a1:f4:de:57:76:94:47:da:
7e:d6:03:02:69:51:be:65:f1:1c:87:26:d7:24:ae:
3d:3e:61:26:20:5a:da:3f:9a:d8:26:6a:9f:53:62:
73:18:fe:fb:df:d8:05:82:34:f6:1a:48:f5:07:6e:
e2:fd:5b:89:5d:74:49:41:09:13:2e:84:94:72:ee:
c7:09:24:87:6f:87:fa:a6:c4:89:05:d3:5f:d3:b1:
d3:9e:be:0c:30:65:b2:37:bf:2a:83:71:4f:3f:46:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:00:BA:40:B9:AB:17:22:8E:22:74:43:72:6A:30:F9:7A:96:D3:E3
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/1wC6QLmrFyKOInRDcmow-XqW0-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.243.0/24
185.65.208.0/22
185.109.144.0/22
185.182.164.0/22
185.227.52.0/22
193.93.140.0/23
193.124.14.0/24
193.124.84.0/24
194.135.47.0/24
194.135.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b1:52:a1:40:8c:bd:41:a7:b1:7b:6f:40:76:5c:90:c8:e5:
94:93:31:ad:81:a1:49:49:84:eb:08:a3:b3:8f:16:73:d6:13:
35:60:b2:e6:bd:e7:e0:89:26:9a:17:d9:0e:16:c6:fa:0e:19:
40:13:c5:56:c3:17:da:14:74:2f:e5:3e:33:4e:02:d6:29:99:
51:18:2e:04:ef:3c:cb:f6:12:b2:17:d6:42:a3:4d:59:bd:27:
ee:8d:a7:35:1c:dc:af:24:46:50:f0:fe:d0:90:64:37:2d:12:
33:c9:f1:6f:f9:5b:83:e7:0d:85:2a:e4:87:79:55:44:18:53:
9d:b3:7c:73:78:25:63:8e:12:81:95:5c:60:9c:89:42:c0:8b:
e9:bc:2f:84:81:16:0b:b5:b9:b4:49:d9:04:17:5c:e7:a8:95:
32:a4:db:b4:b5:b5:cf:2e:35:3b:72:e6:0f:f2:bf:c3:93:e6:
1c:53:3b:d8:d9:b2:a5:3d:df:79:60:a2:d2:90:3f:94:da:17:
ab:59:ca:2f:05:01:59:eb:f8:a1:cb:ab:02:1c:80:8e:0f:b2:
86:8c:8d:de:fe:c3:80:0d:2c:45:80:67:cf:b7:a4:c0:25:83:
ff:a1:c9:d5:f0:08:ef:a5:ec:bb:9f:03:ce:da:a0:9d:7e:0a:
db:4f:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:51 2025 by rpki-client