Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/wzHIGD42fUcyZOMwdy5qWh3OTRk.roa
File: wzHIGD42fUcyZOMwdy5qWh3OTRk.roa (raw, json)
Hash identifier: tiQ15bDhU7zh74fUF2BbipXYxZTtrZHDNCmQemXj8S0=
Subject key identifier: C3:31:C8:18:3E:36:7D:47:32:64:E3:30:77:2E:6A:5A:1D:CE:4D:19
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A656E49E46ACF962AAF34EDACA09
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/wzHIGD42fUcyZOMwdy5qWh3OTRk.roa
Signing time: Thu 02 Jan 2025 15:50:03 +0000
ROA not before: Thu 02 Jan 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50340
IP address blocks: 146.185.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a6:56:e4:9e:46:ac:f9:62:aa:f3:4e:da:ca:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c331c8183e367d473264e330772e6a5a1dce4d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:f1:45:c2:08:4c:2a:ff:18:5f:bc:9b:7f:
b0:f8:b1:68:88:1c:49:be:9f:07:38:2c:7f:64:eb:
71:84:2d:68:1a:b9:4f:58:99:15:b1:24:2d:0a:ba:
54:88:5b:3f:e6:d6:62:0e:81:4d:e7:b5:48:4e:37:
69:54:36:fa:d1:4c:bb:9b:86:bd:dc:4e:33:32:3e:
29:1e:c2:d1:de:83:c6:48:34:7e:c3:e4:98:d6:91:
c5:44:15:11:a4:ff:16:aa:e1:3c:51:2e:89:0b:31:
c9:31:49:9f:1d:6f:47:c3:31:8e:b8:5c:d0:b3:57:
8a:7e:ee:1e:1f:9a:0a:79:db:19:28:35:14:52:61:
40:2d:da:c0:2f:4b:73:b5:93:d5:ef:41:11:de:88:
e1:78:46:0b:0f:31:a6:17:ed:da:a1:35:85:0a:de:
fc:cc:cc:d7:a1:77:f2:0e:85:d8:ff:5b:6e:af:ce:
74:c5:f7:fb:6d:80:6b:0f:4e:34:88:9f:98:e3:2f:
07:a4:24:ed:69:e0:45:69:87:26:02:35:f4:60:dd:
43:04:99:00:b9:56:b4:01:fe:36:54:cb:14:f8:99:
86:6f:64:84:a9:ae:fe:b3:9e:3a:2e:1a:c1:10:f9:
16:75:9f:bb:73:2f:ed:f5:f1:e7:b6:93:09:3f:f5:
a8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:31:C8:18:3E:36:7D:47:32:64:E3:30:77:2E:6A:5A:1D:CE:4D:19
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/wzHIGD42fUcyZOMwdy5qWh3OTRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.235.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:be:0b:ca:df:2a:91:bf:3f:0e:3e:5d:45:4a:a9:a6:8c:57:
85:a1:67:a2:72:66:b1:fa:9c:c4:45:03:5b:78:ef:a8:c6:cc:
93:87:8d:a1:68:42:27:04:bc:8e:11:5b:54:2b:e6:df:84:ad:
70:27:f1:88:34:48:4e:8f:a5:f4:12:d4:06:fe:0b:3f:61:cc:
55:9a:88:65:d5:b3:7a:71:1a:d9:7a:42:1f:b9:f7:cf:70:18:
ef:bb:26:a1:49:25:b3:47:16:48:df:0a:70:c7:6b:59:fd:82:
e4:29:1e:2b:e9:49:eb:e6:6b:09:ae:22:b8:05:cd:4d:7d:73:
0c:4c:2a:a4:90:2f:97:91:72:7d:83:55:bc:e0:7b:ac:46:f4:
46:c4:8c:30:90:da:b9:50:f5:3d:44:7a:9a:aa:1d:fe:4e:7b:
36:1b:d4:20:52:6f:c5:a2:a7:6c:2d:83:72:96:10:7c:cc:f9:
dc:f7:7b:5c:2b:85:3e:32:98:aa:15:63:25:3e:ba:e9:69:86:
e9:24:6b:64:dd:f5:e7:95:2d:f3:c8:00:f9:54:03:93:42:d0:
d5:ce:98:fb:a5:e5:16:bd:b9:44:32:06:98:2d:8a:dd:f8:a6:
27:d2:4a:00:1e:d9:53:d3:3d:a0:49:de:15:45:8a:1b:12:96:
52:2e:44:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntaZW5J5GrPliqvNO2soJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwMTAyMTU1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzMxYzgxODNlMzY3ZDQ3MzI2NGUzMzA3NzJlNmE1YTFkY2U0ZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8DxRcIITCr/GF+8m3+w+LFoiBxJ
vp8HOCx/ZOtxhC1oGrlPWJkVsSQtCrpUiFs/5tZiDoFN57VITjdpVDb60Uy7m4a9
3E4zMj4pHsLR3oPGSDR+w+SY1pHFRBURpP8WquE8US6JCzHJMUmfHW9HwzGOuFzQ
s1eKfu4eH5oKedsZKDUUUmFALdrAL0tztZPV70ER3ojheEYLDzGmF+3aoTWFCt78
zMzXoXfyDoXY/1tur850xff7bYBrD040iJ+Y4y8HpCTtaeBFaYcmAjX0YN1DBJkA
uVa0Af42VMsU+JmGb2SEqa7+s546LhrBEPkWdZ+7cy/t9fHntpMJP/WoUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMMxyBg+Nn1HMmTjMHcualodzk0ZMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvd3pISUdENDJmVWN5Wk9Nd2R5NXFXaDNPVFJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkrnrMA0G
CSqGSIb3DQEBCwUAA4IBAQBqvgvK3yqRvz8OPl1FSqmmjFeFoWeicmax+pzERQNb
eO+oxsyTh42haEInBLyOEVtUK+bfhK1wJ/GINEhOj6X0EtQG/gs/YcxVmohl1bN6
cRrZekIfuffPcBjvuyahSSWzRxZI3wpwx2tZ/YLkKR4r6Unr5msJriK4Bc1NfXMM
TCqkkC+XkXJ9g1W84HusRvRGxIwwkNq5UPU9RHqaqh3+Tns2G9QgUm/FoqdsLYNy
lhB8zPnc93tcK4U+MpiqFWMlPrrpaYbpJGtk3fXnlS3zyAD5VAOTQtDVzpj7peUW
vblEMgaYLYrd+KYn0koAHtlT0z2gSd4VRYobEpZSLkRd
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:31:56 2025 by rpki-client