Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/Wk_9wtGClVrtYODuHEtURJ-3oHQ.roa
File: Wk_9wtGClVrtYODuHEtURJ-3oHQ.roa (raw, json)
Hash identifier: s/nXb34IkLeKLlmquub76FOlWdViv6YcrY3Wh7bVOcc=
Subject key identifier: 5A:4F:FD:C2:D1:82:95:5A:ED:60:E0:EE:1C:4B:54:44:9F:B7:A0:74
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 01942067F9149AAE2DD26D90141F81475D40
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/Wk_9wtGClVrtYODuHEtURJ-3oHQ.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205081
IP address blocks: 153.92.27.0/24 maxlen: 24
155.133.192.0/23 maxlen: 23
185.136.216.0/22 maxlen: 22
185.136.216.0/24 maxlen: 24
185.136.217.0/24 maxlen: 24
185.136.218.0/24 maxlen: 24
185.136.219.0/24 maxlen: 24
2a0c:5500::/48 maxlen: 48
2a0c:5500:1::/48 maxlen: 48
2a0c:5500:2::/48 maxlen: 48
2a0c:5500:3::/48 maxlen: 48
2a0c:5500:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f9:14:9a:ae:2d:d2:6d:90:14:1f:81:47:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a4ffdc2d182955aed60e0ee1c4b54449fb7a074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:12:25:90:81:bf:df:fa:80:b0:4a:13:8d:
b0:04:b6:ca:9f:df:5b:c9:8c:25:6c:1c:60:c5:37:
6a:2d:38:c7:25:67:07:82:c7:14:5e:ca:0c:7b:08:
19:b4:c7:49:91:5f:06:d4:81:fd:42:5b:54:55:d0:
10:62:08:5c:25:7e:b0:1e:4d:5f:33:d9:13:58:a1:
2c:dd:bb:f2:27:0a:c8:26:9f:7b:30:87:8b:8d:10:
fd:a1:48:8c:df:4d:a5:06:21:92:bb:7d:94:16:e8:
b0:1a:84:4f:ff:3c:ad:94:f1:d0:c4:e0:1e:31:f1:
35:ec:b7:4a:fd:ae:53:d7:92:37:30:cb:cc:2d:ea:
4c:c4:ff:50:f1:4c:34:62:7f:fd:18:74:b0:cf:fa:
a8:cf:ea:df:a8:2b:23:a9:b6:35:9b:12:b3:76:b7:
d9:9c:e3:0b:39:13:57:d0:a8:b7:4d:36:19:58:67:
e8:44:b9:1c:04:b8:86:fc:04:fc:57:c8:a1:70:1c:
79:9a:14:5a:9d:32:67:9a:49:49:1e:65:38:4e:73:
f4:78:1b:be:df:ee:5a:9f:eb:73:b3:77:1b:64:27:
c0:15:e9:34:dd:1a:9b:2d:76:e6:29:92:24:8d:56:
77:3d:f3:eb:d4:0e:a9:94:0e:38:fd:c3:21:e8:da:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:FD:C2:D1:82:95:5A:ED:60:E0:EE:1C:4B:54:44:9F:B7:A0:74
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/Wk_9wtGClVrtYODuHEtURJ-3oHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.27.0/24
155.133.192.0/23
185.136.216.0/22
IPv6:
2a0c:5500::-2a0c:5500:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
07:2c:10:a8:b9:86:1c:05:9c:e8:c7:c1:45:fb:f6:fd:23:30:
6a:04:cc:fc:2d:25:d7:ad:41:2a:e7:e9:ef:f7:11:f1:66:e3:
3a:76:03:4a:00:d0:45:69:9e:89:14:e3:31:9b:04:2e:6e:9a:
10:89:76:a9:b7:ac:57:1d:08:ba:ef:c1:20:7b:0c:3e:fa:20:
59:a9:24:d2:e0:4d:f2:f0:98:bf:5e:a0:db:76:b1:b8:0d:0d:
25:4a:c6:2e:97:89:44:08:6b:3a:a4:2d:ec:e7:46:53:1a:14:
91:c6:0d:02:42:17:ce:7d:90:42:84:67:d0:40:e6:4a:f9:38:
28:5f:42:cc:1d:d9:c7:58:e1:98:09:80:3a:be:81:7f:40:49:
4b:ec:16:74:e2:21:a3:bc:05:7d:bf:f3:34:fe:56:40:4d:59:
7b:b1:1e:82:65:38:f6:91:b5:b6:a3:2a:84:b8:6d:b9:6f:0d:
c5:0f:ee:4c:91:c9:d6:14:d7:73:c3:1d:71:dd:df:01:55:f9:
f3:2b:19:1e:91:65:e6:9a:ee:55:d1:e3:1c:2c:a8:68:06:6a:
c7:b7:74:44:4d:b0:f8:ac:61:cc:74:19:47:ac:1a:18:44:49:
47:f6:7f:29:a1:6e:5c:de:be:d8:68:cb:d0:1f:5a:0c:bf:e0:
d4:b2:52:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:28 2025 by rpki-client