Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/wEh3vO3dgtKTECF1wKW0yxDLOtg.roa
File: wEh3vO3dgtKTECF1wKW0yxDLOtg.roa (raw, json)
Hash identifier: P6w+XjZFyVjq9qzSBeaf4pBxGDNF0Qkwd7uEqTvs+FU=
Subject key identifier: C0:48:77:BC:ED:DD:82:D2:93:10:21:75:C0:A5:B4:CB:10:CB:3A:D8
Certificate issuer: /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial: 0194266C2FA50BEE9CA8D2763B132FC4491B
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/wEh3vO3dgtKTECF1wKW0yxDLOtg.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48500
IP address blocks: 37.99.224.0/20 maxlen: 20
37.99.240.0/21 maxlen: 21
94.230.64.0/21 maxlen: 21
109.104.224.0/21 maxlen: 21
134.90.224.0/20 maxlen: 20
185.46.100.0/22 maxlen: 22
217.196.128.0/21 maxlen: 21
217.196.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2f:a5:0b:ee:9c:a8:d2:76:3b:13:2f:c4:49:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c04877bceddd82d293102175c0a5b4cb10cb3ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:fa:21:eb:22:11:1a:73:b1:a3:31:65:db:
98:cd:24:c9:b8:d3:67:91:51:8e:b8:35:4f:0d:31:
d9:fa:b2:9b:56:35:d6:99:c7:c6:eb:96:23:e0:3f:
24:9d:b5:30:e4:54:89:a3:a9:c6:99:7c:c9:0f:17:
47:af:bc:74:cf:3a:d7:50:9e:9f:b2:fe:76:bc:4a:
2b:60:cf:00:a3:2d:a5:d7:17:0b:e5:ab:8f:5c:e3:
f5:67:c2:2d:d2:57:28:92:5d:4c:8a:ee:6f:a0:df:
d7:4d:a3:8d:b4:7d:16:6c:2e:ea:f3:bd:6d:89:1a:
35:b0:6b:2b:94:34:61:53:71:e2:68:a8:05:b5:01:
8f:79:75:19:c1:c6:93:3a:41:bc:3d:3d:65:7e:5b:
3f:83:e3:fc:ee:59:6d:0a:a7:85:e8:96:78:e6:d2:
6f:b4:be:9f:ac:50:2c:21:77:f7:00:e0:eb:34:fd:
08:07:0c:f5:d2:a6:59:43:3d:f9:d6:88:02:8d:5c:
c3:7f:ad:86:43:d8:d8:42:2b:d8:46:21:c6:75:14:
cc:55:05:e4:c5:d6:45:c3:d9:61:cd:35:6c:6c:e8:
6c:18:fd:52:58:4a:c8:a6:30:a9:f1:b7:83:87:2c:
ae:a3:b9:00:99:7d:f3:ed:42:31:8f:d7:b6:87:bd:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:48:77:BC:ED:DD:82:D2:93:10:21:75:C0:A5:B4:CB:10:CB:3A:D8
X509v3 Authority Key Identifier:
keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/wEh3vO3dgtKTECF1wKW0yxDLOtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.224.0-37.99.247.255
94.230.64.0/21
109.104.224.0/21
134.90.224.0/20
185.46.100.0/22
217.196.128.0/21
217.196.140.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:0f:8d:57:51:4b:5c:91:e6:f0:dd:69:58:91:b0:82:77:99:
aa:61:04:11:ca:2c:2f:f4:0b:c5:14:34:b9:34:1f:db:f4:42:
a6:a4:a3:fc:49:a3:13:c3:b4:33:09:41:e4:be:4b:cf:b5:f1:
de:2a:16:45:27:0d:37:85:60:16:89:0a:f6:34:80:a7:fc:35:
25:1a:98:ff:1f:4d:69:dd:9d:26:f9:bd:98:a5:83:05:8c:db:
6d:19:0e:21:76:17:f6:98:1f:27:24:88:10:42:70:b3:67:d8:
6f:a4:6c:89:d1:e2:bf:4e:8e:70:c9:e4:24:4d:a2:f2:6c:ec:
62:41:7a:a1:5c:46:b7:04:03:ce:b0:c2:7a:48:3f:88:b5:f3:
8d:78:49:3f:83:22:0f:91:2e:58:6a:ea:ac:ec:26:67:11:d8:
34:f9:6c:80:97:32:03:08:a7:bd:58:c3:b1:80:87:44:f6:62:
c1:95:c3:d8:d8:df:e6:18:bf:06:c9:bb:87:0c:1b:99:0a:cf:
01:4c:ac:6f:22:dc:e5:df:4f:35:7e:4f:de:60:d8:5c:ba:f7:
b0:0e:82:05:47:57:f7:22:72:7e:ed:e0:ed:aa:d2:4e:9b:69:
06:9e:ef:4c:40:79:5f:0e:5c:d6:8a:8e:62:85:b4:dc:36:e2:
3c:f3:b0:28
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZQmbC+lC+6cqNJ2OxMvxEkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNjI2YmJiN2I2OWVlYzlmNjc5MGIwMzcwNTU0NWI4OTJm
YTJlOGEwHhcNMjUwMTAyMDk1MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDQ4NzdiY2VkZGQ4MmQyOTMxMDIxNzVjMGE1YjRjYjEwY2IzYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvT6IesiERpzsaMxZduYzSTJuNNn
kVGOuDVPDTHZ+rKbVjXWmcfG65Yj4D8knbUw5FSJo6nGmXzJDxdHr7x0zzrXUJ6f
sv52vEorYM8Aoy2l1xcL5auPXOP1Z8It0lcokl1Miu5voN/XTaONtH0WbC7q871t
iRo1sGsrlDRhU3HiaKgFtQGPeXUZwcaTOkG8PT1lfls/g+P87lltCqeF6JZ45tJv
tL6frFAsIXf3AODrNP0IBwz10qZZQz351ogCjVzDf62GQ9jYQivYRiHGdRTMVQXk
xdZFw9lhzTVsbOhsGP1SWErIpjCp8beDhyyuo7kAmX3z7UIxj9e2h731UQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFMBId7zt3YLSkxAhdcCltMsQyzrYMB8GA1UdIwQY
MBaAFM1ia7t7ae7J9nkLA3BVRbiS+i6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDct
YzBmODlhZDM2YmNhLzEvd0VoM3ZPM2RndEtURUNGMXdLVzB5eERMT3RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDctYzBmODlhZDM2YmNh
LzEveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBAUlY+AD
BAMlY/ADBANe5kADBANtaOADBASGWuADBAK5LmQDBAPZxIADBAHZxIwwDQYJKoZI
hvcNAQELBQADggEBALsPjVdRS1yR5vDdaViRsIJ3maphBBHKLC/0C8UUNLk0H9v0
Qqako/xJoxPDtDMJQeS+S8+18d4qFkUnDTeFYBaJCvY0gKf8NSUamP8fTWndnSb5
vZilgwWM220ZDiF2F/aYHyckiBBCcLNn2G+kbInR4r9OjnDJ5CRNovJs7GJBeqFc
RrcEA86wwnpIP4i18414ST+DIg+RLlhq6qzsJmcR2DT5bICXMgMIp71Yw7GAh0T2
YsGVw9jY3+YYvwbJu4cMG5kKzwFMrG8i3OXfTzV+T95g2Fy697AOggVHV/cicn7t
4O2q0k6baQae70xAeV8OXNaKjmKFtNw24jzzsCg=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:13 2025 by rpki-client