Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/Wg4PDoD95oP20hNGU-XkM4hA54s.roa
File: Wg4PDoD95oP20hNGU-XkM4hA54s.roa (raw, json)
Hash identifier: hP+gBGGdpot5xyTsmAcY1OY8gqZua3LHwTIZrj4KFro=
Subject key identifier: 5A:0E:0F:0E:80:FD:E6:83:F6:D2:13:46:53:E5:E4:33:88:40:E7:8B
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 0194236A11CDF44D53FE35601602A944F56C
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/Wg4PDoD95oP20hNGU-XkM4hA54s.roa
Signing time: Wed 01 Jan 2025 19:49:01 +0000
ROA not before: Wed 01 Jan 2025 19:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212555
IP address blocks: 45.11.108.0/24 maxlen: 24
45.11.109.0/24 maxlen: 24
45.11.110.0/24 maxlen: 24
45.11.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:11:cd:f4:4d:53:fe:35:60:16:02:a9:44:f5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a0e0f0e80fde683f6d2134653e5e4338840e78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:33:8d:6a:b1:8d:f7:e4:61:1d:d2:ba:19:
ac:12:2e:6e:95:5a:6e:62:89:6a:92:23:0e:9d:81:
de:0a:a1:67:78:f2:34:2f:22:a5:6e:9c:ff:4d:d0:
38:ae:29:3d:8f:a3:40:4e:7e:14:36:ca:95:23:9a:
27:ca:1f:12:5f:64:18:22:4e:e5:c0:27:5d:ab:30:
b0:ad:99:8b:f3:4a:12:0d:d9:b9:8b:0e:38:9b:1d:
ed:15:1f:b8:a2:85:3e:4f:f0:6d:19:e5:14:af:e3:
2f:f4:4f:2d:0b:e7:24:d5:c6:5c:6c:5f:43:ea:17:
10:74:de:a6:30:fc:ad:d5:a3:a2:bb:7e:77:aa:1e:
c9:0e:28:9c:9b:31:c5:c8:13:93:0c:f7:48:39:56:
dc:fd:76:43:e2:01:2e:cb:89:3b:b9:00:dc:3f:b8:
df:a4:38:40:d5:f9:1d:84:8e:6d:65:e0:85:26:52:
4e:bd:e8:be:8b:c5:da:fd:fa:47:cd:85:3d:cf:57:
56:e5:cd:af:15:73:12:60:0d:ee:02:ad:a1:04:1b:
b5:b7:2f:ef:df:25:31:ec:28:a4:5b:89:14:74:10:
e1:b2:2e:fc:d9:45:40:c8:9d:6e:56:07:2c:ea:c4:
b2:d6:e2:23:4d:1f:35:e1:f2:30:28:ea:3b:a1:c0:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0E:0F:0E:80:FD:E6:83:F6:D2:13:46:53:E5:E4:33:88:40:E7:8B
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/Wg4PDoD95oP20hNGU-XkM4hA54s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.108.0/22
Signature Algorithm: sha256WithRSAEncryption
97:d3:ca:47:28:f6:c5:89:3e:a1:3f:f9:47:d1:86:96:a4:03:
e6:25:dd:d5:3e:0e:9e:67:6c:b1:37:54:73:21:34:9e:dc:b2:
15:62:45:70:12:ec:c5:58:de:22:4e:a4:9c:41:24:a6:3d:22:
de:9e:61:8e:88:21:80:e5:c9:5d:db:03:8a:d6:53:cf:1b:49:
32:e8:0d:2f:89:f1:d4:34:90:3f:dc:09:72:02:e9:ac:b0:aa:
a9:a0:44:b9:08:d9:af:4c:37:49:7a:d2:01:35:8a:7e:25:f0:
63:34:f9:a0:d4:6e:b2:4b:67:87:58:98:98:36:26:fe:84:fb:
62:3e:4a:60:42:5b:8a:ab:1d:58:43:c6:5e:8a:99:af:e4:27:
f5:91:db:fc:69:41:97:14:0b:1e:e9:54:31:88:bb:cb:74:18:
33:2d:f9:4e:e3:fd:3f:ed:18:f0:6a:59:5e:b8:6b:35:b2:f5:
5c:55:b0:83:db:7e:ee:1b:a3:2b:d9:5c:1d:9f:24:c3:35:57:
a3:bc:a7:76:66:29:8d:fb:31:73:b2:44:fc:48:f2:f8:c3:74:
53:7a:aa:51:e5:e1:32:c8:7c:af:ab:f1:cf:9f:34:57:17:47:
39:e6:d9:9c:87:7c:5e:08:60:63:b6:b7:6a:fa:c2:8f:0b:4a:
b3:c6:ee:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjahHN9E1T/jVgFgKpRPVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Y2Q2N2I1Zjk3YmE3OTVhNmJmODY5MDZiNzcxYzFkZDJj
YjFkYzkwHhcNMjUwMTAxMTk0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTBlMGYwZTgwZmRlNjgzZjZkMjEzNDY1M2U1ZTQzMzg4NDBlNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl8zjWqxjffkYR3SuhmsEi5ulVpu
YolqkiMOnYHeCqFnePI0LyKlbpz/TdA4rik9j6NATn4UNsqVI5onyh8SX2QYIk7l
wCddqzCwrZmL80oSDdm5iw44mx3tFR+4ooU+T/BtGeUUr+Mv9E8tC+ck1cZcbF9D
6hcQdN6mMPyt1aOiu353qh7JDiicmzHFyBOTDPdIOVbc/XZD4gEuy4k7uQDcP7jf
pDhA1fkdhI5tZeCFJlJOvei+i8Xa/fpHzYU9z1dW5c2vFXMSYA3uAq2hBBu1ty/v
3yUx7CikW4kUdBDhsi782UVAyJ1uVgcs6sSy1uIjTR814fIwKOo7ocCZdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFoODw6A/eaD9tITRlPl5DOIQOeLMB8GA1UdIwQY
MBaAFAjNZ7X5e6eVpr+GkGt3HB3Syx3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMt
NTc0NjJjMjgzMjk0LzEvV2c0UERvRDk1b1AyMGhOR1UtWGtNNGhBNTRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMtNTc0NjJjMjgzMjk0
LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQtsMA0G
CSqGSIb3DQEBCwUAA4IBAQCX08pHKPbFiT6hP/lH0YaWpAPmJd3VPg6eZ2yxN1Rz
ITSe3LIVYkVwEuzFWN4iTqScQSSmPSLenmGOiCGA5cld2wOK1lPPG0ky6A0vifHU
NJA/3AlyAumssKqpoES5CNmvTDdJetIBNYp+JfBjNPmg1G6yS2eHWJiYNib+hPti
PkpgQluKqx1YQ8Zeipmv5Cf1kdv8aUGXFAse6VQxiLvLdBgzLflO4/0/7Rjwalle
uGs1svVcVbCD237uG6Mr2VwdnyTDNVejvKd2ZimN+zFzskT8SPL4w3RTeqpR5eEy
yHyvq/HPnzRXF0c55tmch3xeCGBjtrdq+sKPC0qzxu7x
-----END CERTIFICATE-----
Generated at Sat Feb 22 05:29:43 2025 by rpki-client