Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/WMfZ9_oSWOFVeUy99ChSUELiYaI.roa
File: WMfZ9_oSWOFVeUy99ChSUELiYaI.roa (raw, json)
Hash identifier: H0ifkv1EEGP8mDtQZpBc/lFwxXIm4L3JwiD9/BcXTyk=
Subject key identifier: 58:C7:D9:F7:FA:12:58:E1:55:79:4C:BD:F4:28:52:50:42:E2:61:A2
Certificate issuer: /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Certificate serial: 01942144426EBB223767FF1088ECFE791BCA
Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/WMfZ9_oSWOFVeUy99ChSUELiYaI.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 164.153.132.0/24 maxlen: 24
164.153.133.0/24 maxlen: 24
164.153.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:42:6e:bb:22:37:67:ff:10:88:ec:fe:79:1b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58c7d9f7fa1258e155794cbdf428525042e261a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:b5:24:12:16:91:23:5e:d1:c3:68:e0:96:
58:c9:21:81:3e:29:97:a8:41:cd:21:05:17:40:ee:
73:ab:c5:26:00:ec:b8:8f:85:2f:45:23:5c:f7:c9:
93:1d:1e:da:f9:7a:b2:19:2a:56:57:55:41:ab:bd:
9c:ae:e3:fe:2c:a4:b4:a4:d8:8a:97:55:fa:bc:73:
4a:5b:fd:c1:9a:0c:d3:5a:d7:f2:40:19:bf:03:f6:
5c:22:c9:05:81:91:1b:9e:f2:0a:25:41:ed:27:b5:
a0:9b:6f:e9:99:79:f1:cb:97:db:a8:7c:f9:1a:82:
09:d4:49:64:c7:94:cd:12:54:cd:7d:0b:6b:9d:52:
a0:29:f4:93:de:85:35:fe:01:10:73:44:93:21:2f:
49:42:a2:fd:90:0d:9e:9b:64:f1:3b:41:37:d0:9f:
33:3f:c1:6c:3b:d9:2f:93:7b:9a:6f:54:8b:18:ef:
d9:51:c4:6b:73:c2:05:20:ed:f5:b6:8a:14:c4:06:
79:71:81:10:4e:fa:00:29:de:3f:c0:c1:e9:7d:5f:
0d:f0:55:d2:63:24:bf:e1:7c:f4:68:5f:85:7e:62:
4f:ad:e2:22:77:f1:3e:97:60:f2:82:d3:84:f8:59:
76:d5:e6:e4:fc:a8:66:da:52:b9:8d:58:fa:7a:0a:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C7:D9:F7:FA:12:58:E1:55:79:4C:BD:F4:28:52:50:42:E2:61:A2
X509v3 Authority Key Identifier:
keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/WMfZ9_oSWOFVeUy99ChSUELiYaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.153.132.0-164.153.134.255
Signature Algorithm: sha256WithRSAEncryption
50:47:f6:66:3e:0f:11:ac:62:72:a6:f6:9f:51:16:c8:27:1e:
a1:10:d9:e0:89:f9:52:74:cb:1e:cf:bc:05:91:da:87:dc:22:
e9:95:10:ac:01:ee:99:7a:54:0b:5d:97:af:90:80:b7:62:80:
d7:08:57:b9:ed:6c:d9:12:b9:aa:80:f1:53:39:22:fe:85:7c:
b9:b1:bc:35:ea:fa:84:67:6d:af:bf:b3:bb:a0:7b:a1:67:01:
fb:bb:49:20:8c:53:9b:b6:4e:9a:9a:7d:45:26:83:82:5a:cd:
ac:bc:14:68:9e:0b:8e:b6:29:71:a3:12:4e:88:6e:81:06:76:
c1:f0:49:75:29:9e:e4:5d:7b:01:2d:ae:48:e0:69:8e:ed:ea:
74:db:82:d1:49:6f:7f:4d:cb:6c:06:1f:f3:24:12:73:82:e0:
c0:20:22:ba:b4:76:4a:b4:58:44:a0:c1:66:d7:15:4a:52:c9:
11:a7:91:84:9a:10:ba:93:dd:3f:56:a2:96:6e:b3:5a:c5:98:
6b:e3:f7:4c:84:6d:18:c7:b8:63:9a:e1:79:c5:dc:84:f3:ea:
49:84:17:de:2a:e4:8c:54:e8:83:27:36:dd:e9:ef:16:dd:90:
7c:9e:31:d6:c0:ee:aa:ac:75:5f:9a:e9:41:f2:8e:d3:76:43:
98:cd:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:08 2025 by rpki-client