Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/WxxzockSF-0jbEBubYwjKIfgtaw.roa
File: WxxzockSF-0jbEBubYwjKIfgtaw.roa (raw, json)
Hash identifier: uNom3cZ42KKzlsjBXTYNfCi+Ksse/PrjCfplRbo7jWE=
Subject key identifier: 5B:1C:73:A1:C9:12:17:ED:23:6C:40:6E:6D:8C:23:28:87:E0:B5:AC
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 019421B1D6AC53D9D44AC4E48FBE8B7116C8
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/WxxzockSF-0jbEBubYwjKIfgtaw.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44575
IP address blocks: 92.63.80.0/24 maxlen: 24
92.63.81.0/24 maxlen: 24
92.63.82.0/24 maxlen: 24
92.63.83.0/24 maxlen: 24
92.63.84.0/24 maxlen: 24
92.63.86.0/24 maxlen: 24
92.63.88.0/24 maxlen: 24
92.63.92.0/24 maxlen: 24
92.63.93.0/24 maxlen: 24
193.110.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 11:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d6:ac:53:d9:d4:4a:c4:e4:8f:be:8b:71:16:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b1c73a1c91217ed236c406e6d8c232887e0b5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:d7:1c:4b:83:e4:d4:64:94:75:8f:74:83:
8a:89:d9:c6:ca:5e:54:d4:33:b6:e2:ea:d8:6d:66:
d4:b5:10:87:4e:d4:d7:74:bf:34:a9:e9:fc:78:5a:
37:38:43:f0:fb:ee:8e:af:4d:9d:e8:bd:e7:c9:2b:
5d:3c:74:a4:a3:44:41:ca:13:16:2d:03:e9:9f:09:
1a:31:bf:72:ca:35:53:fb:df:80:35:6c:6d:25:e7:
b3:af:49:2f:d7:c3:a6:c0:c4:53:17:25:99:1e:37:
6f:4e:10:47:7d:2e:48:1f:38:b2:de:a7:f8:9f:2e:
af:87:a2:fd:9f:a0:a3:72:82:1a:76:9a:f9:e0:e3:
6c:d3:57:b4:3b:ec:f2:ab:45:9a:8e:18:43:bf:bf:
b9:39:75:16:67:8c:02:95:fd:c2:b8:85:ba:22:63:
e4:8d:6d:8c:a2:f6:b4:3f:d0:91:1c:09:da:8b:5f:
d3:5f:35:cf:f8:78:ef:78:44:13:5c:ac:84:3b:32:
36:17:7a:cc:a0:97:e7:17:e6:e1:ba:66:52:e4:4f:
c7:13:4b:ec:09:e0:64:eb:d2:e4:dc:b8:6f:b8:41:
c6:d5:7e:fb:da:0d:c2:0c:f2:0f:9d:7f:b2:ed:a7:
1a:87:d6:a6:41:9e:a3:00:9d:16:5e:ee:bd:c3:23:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:73:A1:C9:12:17:ED:23:6C:40:6E:6D:8C:23:28:87:E0:B5:AC
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/WxxzockSF-0jbEBubYwjKIfgtaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.80.0-92.63.84.255
92.63.86.0/24
92.63.88.0/24
92.63.92.0/23
193.110.164.0/23
Signature Algorithm: sha256WithRSAEncryption
20:f0:8e:35:5b:85:2c:5a:0a:89:8d:c9:53:60:07:ab:42:df:
91:d9:ca:14:58:04:bd:f4:82:05:ab:49:60:81:10:6d:96:12:
16:0f:42:d2:ae:c6:25:65:a3:da:ce:4d:7d:41:cf:a4:67:ff:
57:dd:b7:69:10:42:6a:17:19:2e:d6:97:30:07:64:cc:0e:0d:
60:56:d3:1c:4f:84:6e:71:ce:71:6e:c9:a6:c6:fc:bd:6f:16:
cd:3c:80:bc:e0:fe:61:5c:a2:4c:2b:bb:19:c4:e1:15:4c:3d:
86:e7:aa:58:f7:48:68:79:99:80:87:60:ad:f9:67:7b:05:2e:
59:9a:1d:37:6d:a1:10:55:99:a4:cd:83:fb:b0:84:96:51:d1:
96:0e:c6:22:91:99:b5:28:b6:f1:70:af:7b:f3:d1:61:47:bd:
9a:eb:78:73:e0:8b:98:da:7a:7d:5a:8e:cb:5e:9e:71:70:a5:
82:04:62:c5:b1:76:39:c8:11:52:c9:72:8e:65:fd:84:2c:cd:
2e:5b:33:25:c3:1c:b8:00:a7:00:4d:50:ff:36:1b:85:df:54:
e9:8e:7e:a8:d0:70:37:91:1e:de:10:d3:25:e4:63:35:0f:4c:
d0:37:af:0b:5b:6e:74:8a:c7:02:46:e5:4b:51:18:77:78:9a:
00:31:cb:4b
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZQhsdasU9nUSsTkj76LcRbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTA0ZTRmN2Q5ZjM4ZDhlMjJhMmQzMmJlMDE5MDMxOTMw
YzFhNDcwHhcNMjUwMTAxMTE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjFjNzNhMWM5MTIxN2VkMjM2YzQwNmU2ZDhjMjMyODg3ZTBiNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP7XHEuD5NRklHWPdIOKidnGyl5U
1DO24urYbWbUtRCHTtTXdL80qen8eFo3OEPw++6Or02d6L3nyStdPHSko0RByhMW
LQPpnwkaMb9yyjVT+9+ANWxtJeezr0kv18OmwMRTFyWZHjdvThBHfS5IHziy3qf4
ny6vh6L9n6CjcoIadpr54ONs01e0O+zyq0WajhhDv7+5OXUWZ4wClf3CuIW6ImPk
jW2Mova0P9CRHAnai1/TXzXP+HjveEQTXKyEOzI2F3rMoJfnF+bhumZS5E/HE0vs
CeBk69Lk3LhvuEHG1X772g3CDPIPnX+y7acah9amQZ6jAJ0WXu69wyPWKwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFFscc6HJEhftI2xAbm2MIyiH4LWsMB8GA1UdIwQY
MBaAFGYQTk99nzjY4iotMr4BkDGTDBpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQt
NDc0NzJlZDNiZWNiLzEvV3h4em9ja1NGLTBqYkVCdWJZd2pLSWZndGF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQtNDc0NzJlZDNiZWNi
LzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBARcP1AD
BABcP1QDBABcP1YDBABcP1gDBAFcP1wDBAHBbqQwDQYJKoZIhvcNAQELBQADggEB
ACDwjjVbhSxaComNyVNgB6tC35HZyhRYBL30ggWrSWCBEG2WEhYPQtKuxiVlo9rO
TX1Bz6Rn/1fdt2kQQmoXGS7WlzAHZMwODWBW0xxPhG5xznFuyabG/L1vFs08gLzg
/mFcokwruxnE4RVMPYbnqlj3SGh5mYCHYK35Z3sFLlmaHTdtoRBVmaTNg/uwhJZR
0ZYOxiKRmbUotvFwr3vz0WFHvZrreHPgi5jaen1ajstennFwpYIEYsWxdjnIEVLJ
co5l/YQszS5bMyXDHLgApwBNUP82G4XfVOmOfqjQcDeRHt4Q0yXkYzUPTNA3rwtb
bnSKxwJG5UtRGHd4mgAxy0s=
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:03:55 2025 by rpki-client