Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/wvepJ_S5tr7m_zhxo8MkVscbOBo.roa
File: wvepJ_S5tr7m_zhxo8MkVscbOBo.roa (raw, json)
Hash identifier: 3bW1rADdI6dgzgPslPIXDLnlwFBtZeQLDvcY24JdJFQ=
Subject key identifier: C2:F7:A9:27:F4:B9:B6:BE:E6:FF:38:71:A3:C3:24:56:C7:1B:38:1A
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 0194252159F3E5B6FF1AF868CF1C54605E38
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/wvepJ_S5tr7m_zhxo8MkVscbOBo.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202371
IP address blocks: 185.133.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:59:f3:e5:b6:ff:1a:f8:68:cf:1c:54:60:5e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2f7a927f4b9b6bee6ff3871a3c32456c71b381a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:6b:20:4d:a5:6a:63:f7:7e:5a:3a:5c:c0:
07:51:39:46:19:5b:ab:eb:34:ca:51:48:26:4d:05:
94:d9:17:d8:47:c4:31:b4:30:dd:aa:37:1b:bf:f1:
0a:01:80:47:d2:fd:53:a0:94:86:7e:05:a6:02:f2:
54:eb:00:c0:45:ea:eb:9d:1c:e4:ab:a3:9f:ea:3c:
4d:0e:61:e9:13:85:6e:b6:7f:bd:59:57:7e:f4:f9:
9c:0b:08:67:47:9c:d5:7f:b2:d9:f7:7e:94:66:db:
c8:94:eb:6d:ce:ee:4d:8a:85:bc:44:d6:44:cf:8f:
42:da:06:1d:f9:50:27:b5:cf:0a:c6:c8:24:ef:f9:
f2:fa:74:da:d6:fb:27:38:0f:73:b5:c2:d8:75:03:
64:e0:49:be:dc:56:fa:e0:3c:f4:41:e4:d6:c6:d2:
be:08:79:45:90:62:5c:43:05:af:f4:42:92:0f:9e:
9f:e0:28:03:de:70:62:a6:36:90:74:de:d5:25:8a:
cb:68:3c:8c:b3:d2:68:4c:d4:76:a3:c7:f5:51:6c:
f8:f6:0e:27:cc:3f:cc:49:e4:f5:83:7b:f1:9f:f7:
63:28:78:12:d9:87:19:9b:c1:a2:05:5c:12:8a:d2:
8a:b8:a1:75:de:b5:a7:43:48:7f:cc:6f:3f:17:59:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F7:A9:27:F4:B9:B6:BE:E6:FF:38:71:A3:C3:24:56:C7:1B:38:1A
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/wvepJ_S5tr7m_zhxo8MkVscbOBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.127.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a8:7d:1e:5f:90:98:b4:dc:2f:c0:f4:30:38:86:5a:d2:1b:
84:f7:1a:7a:1c:41:fb:e6:49:88:7f:65:fe:47:bd:7c:ea:03:
8c:0f:ed:fd:2a:ba:c4:5c:b6:37:5b:0e:5c:fb:8c:d6:e9:ad:
a4:d6:24:02:64:a5:30:c3:67:e1:96:45:6d:73:a5:08:36:4a:
a7:40:70:5c:5f:65:bb:40:f3:cb:3a:0d:ef:91:86:17:a6:1c:
c7:e4:d2:1e:f5:08:dc:f8:c8:49:6d:ac:d7:09:49:a7:34:6b:
6f:df:39:e6:4a:7b:ec:b1:0f:1f:a3:d1:44:43:43:c2:10:8a:
aa:0d:9f:1f:b4:ef:65:ea:a6:30:df:ae:55:60:91:f3:3c:19:
b1:75:4c:a7:2b:db:90:67:7d:9c:ce:a6:e6:66:b1:26:69:83:
68:ec:4d:ec:61:6a:de:e2:ec:f2:22:e8:13:11:c7:a2:56:35:
91:26:ab:e6:2f:c8:c1:4c:33:4a:a8:85:46:3a:68:52:21:62:
fd:e0:53:4e:73:6d:07:6d:c0:b0:66:1b:e0:44:5a:4a:77:4f:
39:0a:e1:45:4d:9e:22:04:d1:b6:48:b0:f8:a1:d6:c3:5e:34:
f3:cb:a0:46:ff:5b:da:0b:d9:1e:89:ef:c6:ce:b9:66:57:5e:
c7:fa:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:17 2025 by rpki-client