Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/W_b0Ax5Mpx_fhvv-92F8GttV04I.roa
File: W_b0Ax5Mpx_fhvv-92F8GttV04I.roa (raw, json)
Hash identifier: y/SVVGY3IuSmMubg1JbInzxD9q8qop1Ol37UDvpp3pE=
Subject key identifier: 5B:F6:F4:03:1E:4C:A7:1F:DF:86:FB:FE:F7:61:7C:1A:DB:55:D3:82
Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial: 019422FB2DEA2606B365B12A4501D543F500
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/W_b0Ax5Mpx_fhvv-92F8GttV04I.roa
Signing time: Wed 01 Jan 2025 17:47:54 +0000
ROA not before: Wed 01 Jan 2025 17:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 89.106.184.0/21 maxlen: 24
160.92.0.0/16 maxlen: 24
192.136.30.0/24 maxlen: 24
193.16.186.0/23 maxlen: 24
193.16.188.0/22 maxlen: 24
193.56.46.0/24 maxlen: 24
193.58.80.0/21 maxlen: 24
193.201.76.0/23 maxlen: 24
2a01:20::/48 maxlen: 48
2a01:20:4::/48 maxlen: 48
2a01:20:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:2d:ea:26:06:b3:65:b1:2a:45:01:d5:43:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Validity
Not Before: Jan 1 17:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bf6f4031e4ca71fdf86fbfef7617c1adb55d382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:46:31:b1:5b:48:07:02:3a:9c:e7:06:98:
10:d8:00:8b:48:e1:43:a8:2c:86:27:d4:4b:2d:52:
11:79:f4:8f:a6:a1:3d:70:da:b0:7b:7a:80:4a:db:
f7:2e:46:9e:a9:1f:a7:71:ff:0b:7e:c3:95:2f:d5:
99:af:40:11:53:72:23:2a:a6:2f:df:56:89:a1:a2:
3c:dc:c5:c0:f2:d0:34:18:29:c2:ce:7c:f7:e9:d2:
34:ef:fd:4d:13:d2:51:ba:f1:3b:92:64:18:5f:31:
c0:55:4d:35:54:6f:a1:2e:f7:46:2c:37:29:f1:b9:
cc:d1:26:49:24:ca:2e:ef:6a:ad:e0:97:19:37:44:
e8:f8:fb:08:30:46:97:b1:24:e1:9f:36:76:37:2f:
02:6f:af:da:c9:40:06:80:06:5e:bb:2b:92:6c:3a:
26:67:86:1a:57:80:04:f4:f9:02:c3:74:33:e5:13:
a7:60:2c:8f:37:5f:1d:84:98:f9:f3:43:af:7d:44:
90:20:e6:16:90:7e:a0:57:fe:7e:a7:b6:6d:30:36:
3f:c2:36:36:5b:be:77:f9:39:b0:4d:db:7a:d6:f7:
a6:c0:db:3e:9d:4d:82:17:18:3c:fc:37:ff:d1:41:
f1:ce:a8:49:ba:40:07:3e:92:3c:e8:1c:26:9b:ff:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:F4:03:1E:4C:A7:1F:DF:86:FB:FE:F7:61:7C:1A:DB:55:D3:82
X509v3 Authority Key Identifier:
keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/W_b0Ax5Mpx_fhvv-92F8GttV04I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.184.0/21
160.92.0.0/16
192.136.30.0/24
193.16.186.0-193.16.191.255
193.56.46.0/24
193.58.80.0/21
193.201.76.0/23
IPv6:
2a01:20::/48
2a01:20:4::/48
2a01:20:6::/48
Signature Algorithm: sha256WithRSAEncryption
05:b2:ce:a7:2f:d0:ec:f4:85:a4:89:18:b3:f1:c0:09:2c:29:
f3:e7:5e:63:ff:c1:45:e2:34:f5:9e:4e:0a:67:12:32:93:16:
1a:86:e6:91:68:83:6a:3f:93:b0:03:75:5d:87:0b:cd:6a:3c:
ba:06:85:cc:00:01:09:4c:ca:89:de:27:74:f7:84:14:a7:c5:
bd:98:c9:17:0a:2c:d3:60:89:88:90:68:13:12:6b:14:87:e2:
6f:b8:31:a9:87:3b:06:eb:bd:37:a3:fa:01:2d:14:03:13:ec:
a9:d2:79:30:6e:d1:d6:ed:ed:ea:1f:e0:da:72:c6:03:73:8e:
3b:4c:4b:30:c1:c9:86:f8:ee:c7:fb:92:74:d8:2b:f8:d6:3b:
b7:bb:4d:47:16:54:e0:b9:ad:be:7c:ba:31:50:1e:31:69:17:
f2:96:cc:bc:3c:32:c1:6d:3a:b4:fe:42:83:4a:27:15:b5:b1:
e7:83:1c:52:ac:e9:76:f7:1f:09:c1:84:22:f9:62:35:38:28:
8f:f1:b3:c3:e0:f5:b9:74:ab:37:ec:5b:12:4d:62:8a:7f:4f:
55:c7:56:62:84:9a:1d:3f:85:f2:aa:b2:99:35:cf:59:93:1b:
5f:00:cb:87:c3:8c:d1:69:85:22:db:33:09:d7:08:eb:cd:6f:
b2:a4:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:42:00 2025 by rpki-client