Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa
File: Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa (raw, json)
Hash identifier: Y3X9Ri7kJ6o/ebs+JUXNiJ+ZA7lhHw1uv9ydtQHMGRI=
Subject key identifier: 59:F7:1E:DD:9B:47:15:CF:7D:B6:61:72:37:AE:10:FA:F6:76:46:90
Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial: 01942067C6CA1E01CD848EAAB23F459A5F0B
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208381
IP address blocks: 194.124.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c6:ca:1e:01:cd:84:8e:aa:b2:3f:45:9a:5f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59f71edd9b4715cf7db6617237ae10faf6764690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:92:fb:5c:40:83:bb:f3:78:a7:e6:1c:08:
c4:33:12:c2:07:14:8a:ed:3a:fc:53:e0:f6:7f:cc:
f5:70:1b:1d:67:45:f4:19:1f:00:d5:1e:85:8f:3a:
c1:48:16:ad:e7:34:a9:b6:41:15:3a:b7:0f:74:4c:
a7:2c:bd:59:f2:71:ec:80:6c:72:7d:7b:89:9e:87:
ac:e3:2a:57:db:e5:47:71:02:bf:19:08:3e:09:be:
b5:68:66:be:a3:04:dd:e3:0d:a5:89:41:c1:a3:68:
3c:63:53:bd:36:6e:0d:e6:6c:62:9d:61:a3:61:22:
3f:a0:2e:d5:a5:2f:53:e8:2c:2f:2f:7d:f2:b4:85:
ce:69:14:56:34:30:56:cc:8f:08:d8:1a:b2:53:31:
32:88:13:49:b5:10:e1:0e:3d:fe:78:7d:9c:40:a4:
cf:4e:10:4a:a0:00:92:67:14:ea:48:59:b9:45:2f:
7c:53:ae:4a:79:c0:dc:f2:b9:b6:4f:a0:c7:4a:8f:
fe:f4:88:71:4f:dc:c0:d9:b0:0d:a2:09:90:95:df:
5b:d6:74:39:2b:20:bb:a8:ca:42:b8:b7:03:09:5f:
0d:10:62:8c:5a:0a:d6:f9:e1:8a:cc:b6:b0:7e:cb:
53:13:9d:5b:f9:5f:49:2d:16:5f:ab:1f:ec:ae:dc:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F7:1E:DD:9B:47:15:CF:7D:B6:61:72:37:AE:10:FA:F6:76:46:90
X509v3 Authority Key Identifier:
keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
80:62:3b:a9:48:54:64:6e:fe:c3:12:b1:d3:a1:4f:37:a0:4d:
af:fc:ad:a9:4f:88:33:ea:7c:0e:be:7b:3e:80:50:8d:69:cc:
51:2a:96:93:85:fa:6c:1d:45:34:f7:ce:99:1b:41:c6:7c:d7:
0e:5c:3a:8a:b1:33:b9:00:3e:5a:a4:29:16:9d:78:21:dd:db:
6b:8a:82:f1:70:66:78:6e:4f:63:f3:9a:68:99:dd:7d:16:fe:
04:72:6e:99:0f:94:f1:33:94:86:e1:59:b2:23:68:06:16:e0:
ea:80:ca:a9:73:86:fe:83:ca:b3:55:23:c4:c5:2a:0b:88:ed:
c6:23:33:fe:8f:e1:f6:5e:df:a0:e0:a3:41:84:25:fc:23:fd:
81:37:ad:7d:94:65:bc:8f:0a:8a:73:e1:c7:76:b4:ef:71:24:
ff:58:25:58:19:37:36:c6:1f:e1:9f:cd:69:95:a1:60:31:89:
31:ff:02:7a:06:03:51:d3:1a:2a:8e:64:ca:4e:ed:05:59:c2:
8d:25:cb:f5:ea:08:46:63:ba:b1:26:1b:f2:2d:47:98:67:b9:
de:e2:42:2d:7a:4e:0e:71:5d:a5:aa:26:bf:84:6c:8c:5b:b3:
35:22:18:2f:39:06:59:df:3a:eb:29:f1:e2:d8:75:9f:6a:ef:
06:36:49:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ8bKHgHNhI6qsj9Fml8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNTNjYmViNzE1MDg0YjMyMmExYTE0OWM5NmUwOWM0MGVk
NmQ4ODMwHhcNMjUwMTAxMDU0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWY3MWVkZDliNDcxNWNmN2RiNjYxNzIzN2FlMTBmYWY2NzY0NjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWOS+1xAg7vzeKfmHAjEMxLCBxSK
7Tr8U+D2f8z1cBsdZ0X0GR8A1R6FjzrBSBat5zSptkEVOrcPdEynLL1Z8nHsgGxy
fXuJnoes4ypX2+VHcQK/GQg+Cb61aGa+owTd4w2liUHBo2g8Y1O9Nm4N5mxinWGj
YSI/oC7VpS9T6CwvL33ytIXOaRRWNDBWzI8I2BqyUzEyiBNJtRDhDj3+eH2cQKTP
ThBKoACSZxTqSFm5RS98U65KecDc8rm2T6DHSo/+9IhxT9zA2bANogmQld9b1nQ5
KyC7qMpCuLcDCV8NEGKMWgrW+eGKzLawfstTE51b+V9JLRZfqx/srty25wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFn3Ht2bRxXPfbZhcjeuEPr2dkaQMB8GA1UdIwQY
MBaAFKxTy+txUISzIqGhScluCcQO1tiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQt
N2FlYWRiNDVhMjM3LzEvV2ZjZTNadEhGYzk5dG1GeU42NFEtdloyUnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQtN2FlYWRiNDVhMjM3
LzEvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnz+MA0G
CSqGSIb3DQEBCwUAA4IBAQCAYjupSFRkbv7DErHToU83oE2v/K2pT4gz6nwOvns+
gFCNacxRKpaThfpsHUU0986ZG0HGfNcOXDqKsTO5AD5apCkWnXgh3dtrioLxcGZ4
bk9j85pomd19Fv4Ecm6ZD5TxM5SG4VmyI2gGFuDqgMqpc4b+g8qzVSPExSoLiO3G
IzP+j+H2Xt+g4KNBhCX8I/2BN619lGW8jwqKc+HHdrTvcST/WCVYGTc2xh/hn81p
laFgMYkx/wJ6BgNR0xoqjmTKTu0FWcKNJcv16ghGY7qxJhvyLUeYZ7ne4kItek4O
cV2lqia/hGyMW7M1IhgvOQZZ3zrrKfHi2HWfau8GNkmq
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:35:52 2025 by rpki-client