Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa
File: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (raw, json)
Hash identifier: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=
Subject key identifier: E5:67:10:23:EF:7A:3B:91:47:D6:A5:F7:3A:4F:59:2E:AA:86:57:DD
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 019428255244AEDF1A4E4BCB6F9EE222FD1D
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa
Signing time: Thu 02 Jan 2025 17:52:01 +0000
ROA not before: Thu 02 Jan 2025 17:52:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149457
IP address blocks: 185.202.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:52:44:ae:df:1a:4e:4b:cb:6f:9e:e2:22:fd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jan 2 17:52:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5671023ef7a3b9147d6a5f73a4f592eaa8657dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:de:0e:1e:e9:3d:06:9e:e7:bf:3b:fc:c6:
c3:ca:e9:6d:96:c0:61:8e:a5:c4:0f:e3:35:6d:38:
ce:ae:cd:76:52:15:50:dc:ef:97:a5:44:c3:b6:b8:
d5:bd:0f:18:56:ef:6c:40:49:99:02:97:53:c2:da:
db:74:2d:49:ff:39:cd:e7:17:a5:d3:e3:98:b7:c5:
83:1f:45:4a:18:f5:6b:58:8d:7f:15:ac:db:03:80:
de:33:5d:65:5d:17:55:ac:f0:32:ab:2b:50:e5:ad:
f3:43:dd:ff:4d:57:4e:9a:e9:71:22:52:7d:fe:dd:
a7:4a:20:30:af:23:3a:84:e4:03:bc:e5:ef:54:77:
67:6d:fe:98:3c:9c:1f:1a:6d:89:aa:49:13:b6:b9:
3e:ed:8e:4f:42:09:36:e1:a1:ab:cf:d8:d1:b9:77:
69:87:52:c6:70:d7:b4:ed:42:17:ec:08:6c:b8:9f:
e8:80:df:7d:d8:78:80:91:23:56:72:4e:37:d0:45:
14:a6:31:cb:48:31:64:c8:08:8a:a0:d7:6c:29:4c:
32:7b:3a:f2:e3:79:cb:6d:2c:1b:33:d3:0a:18:cb:
52:58:eb:e9:7b:d8:bd:6f:cb:49:48:4a:0e:69:bf:
14:1f:1f:af:86:d2:c7:e1:23:d9:39:aa:73:a1:1d:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:10:23:EF:7A:3B:91:47:D6:A5:F7:3A:4F:59:2E:AA:86:57:DD
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.102.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:73:12:59:92:6d:95:7a:33:43:9c:70:9e:f0:b7:a2:b7:d7:
a9:52:35:e8:9b:8c:b6:35:aa:99:10:f2:ff:39:e1:e0:2b:38:
d4:b1:de:fd:7b:89:ec:88:cb:c7:c8:eb:3c:c5:b6:ea:30:c3:
91:7e:26:ab:bc:02:a5:6c:82:d9:68:01:51:07:5e:4f:9f:17:
ae:c0:01:42:7a:30:ac:dd:82:90:c6:bf:e0:2f:f3:c3:2b:90:
f8:01:f7:97:a2:c2:d9:c6:ac:38:20:59:72:db:ef:99:b2:96:
ef:10:84:2d:c8:3c:09:39:9d:62:33:8e:8b:0b:21:b9:cc:2e:
40:b4:19:2b:41:b0:f5:f5:59:4a:34:ec:6d:5e:fd:b1:94:fc:
7f:b0:08:58:de:6f:15:5e:73:5c:f2:ec:66:60:fb:84:82:76:
e4:6a:98:96:43:ed:ef:49:9f:c4:0e:0d:ea:16:b8:b3:c2:50:
75:b2:e1:01:f7:3a:1d:cf:1c:fd:74:bf:29:e3:76:09:57:9d:
af:4b:f4:5d:67:5c:c3:8f:81:0f:5e:e7:da:6a:a2:0f:c8:36:
00:93:8d:d4:e6:e4:30:b8:0c:fa:fd:47:3b:b8:2b:0a:72:c5:
70:37:4c:d8:61:5a:93:60:19:c7:2d:b7:10:00:ea:de:39:95:
4f:94:83:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJVJErt8aTkvLb57iIv0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx
NjM2Y2QwHhcNMjUwMTAyMTc1MjAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTY3MTAyM2VmN2EzYjkxNDdkNmE1ZjczYTRmNTkyZWFhODY1N2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx3eDh7pPQae5787/MbDyultlsBh
jqXED+M1bTjOrs12UhVQ3O+XpUTDtrjVvQ8YVu9sQEmZApdTwtrbdC1J/znN5xel
0+OYt8WDH0VKGPVrWI1/FazbA4DeM11lXRdVrPAyqytQ5a3zQ93/TVdOmulxIlJ9
/t2nSiAwryM6hOQDvOXvVHdnbf6YPJwfGm2JqkkTtrk+7Y5PQgk24aGrz9jRuXdp
h1LGcNe07UIX7AhsuJ/ogN992HiAkSNWck430EUUpjHLSDFkyAiKoNdsKUwyezry
43nLbSwbM9MKGMtSWOvpe9i9b8tJSEoOab8UHx+vhtLH4SPZOapzoR0YVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOVnECPvejuRR9al9zpPWS6qhlfdMB8GA1UdIwQY
MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvNVdjUUktOTZPNUZIMXFYM09rOVpMcXFHVjkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucpmMA0G
CSqGSIb3DQEBCwUAA4IBAQB6cxJZkm2VejNDnHCe8Leit9epUjXom4y2NaqZEPL/
OeHgKzjUsd79e4nsiMvHyOs8xbbqMMORfiarvAKlbILZaAFRB15PnxeuwAFCejCs
3YKQxr/gL/PDK5D4AfeXosLZxqw4IFly2++ZspbvEIQtyDwJOZ1iM46LCyG5zC5A
tBkrQbD19VlKNOxtXv2xlPx/sAhY3m8VXnNc8uxmYPuEgnbkapiWQ+3vSZ/EDg3q
FrizwlB1suEB9zodzxz9dL8p43YJV52vS/RdZ1zDj4EPXufaaqIPyDYAk43U5uQw
uAz6/Uc7uCsKcsVwN0zYYVqTYBnHLbcQAOreOZVPlINQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:28 2025 by rpki-client