Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/WFQrYtzg0wXZ0_HEWDci9z7QJjA.roa
File: WFQrYtzg0wXZ0_HEWDci9z7QJjA.roa (raw, json)
Hash identifier: FEyf6kH3cUePOo9mPRSNvRoDQMoA3uUlJo7Y4wOsw1E=
Subject key identifier: 58:54:2B:62:DC:E0:D3:05:D9:D3:F1:C4:58:37:22:F7:3E:D0:26:30
Certificate issuer: /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Certificate serial: 01948F221935EAB04A943EEF4B96AC19B4D1
Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/WFQrYtzg0wXZ0_HEWDci9z7QJjA.roa
Signing time: Wed 22 Jan 2025 17:49:23 +0000
ROA not before: Wed 22 Jan 2025 17:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214267
IP address blocks: 185.37.102.0/24 maxlen: 24
2a14:5a80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:22:19:35:ea:b0:4a:94:3e:ef:4b:96:ac:19:b4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Validity
Not Before: Jan 22 17:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58542b62dce0d305d9d3f1c4583722f73ed02630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:ac:d7:01:d5:48:9a:9a:4c:e0:e5:bb:9f:
fd:41:d8:ca:cc:39:a1:3e:96:9f:f8:0b:12:38:6a:
3c:0e:c7:22:50:e8:26:ac:fb:ee:6d:4d:c7:54:3e:
dc:db:da:31:b2:aa:09:06:a8:d3:69:60:1a:2b:95:
d9:3d:19:33:89:78:3e:5b:f0:4e:a1:eb:1a:3b:78:
73:b5:35:e9:35:12:be:3e:d3:d5:7d:be:37:35:b1:
d2:4b:fc:ad:ab:da:19:f2:86:49:95:7c:78:86:d7:
bb:4d:14:91:c9:bb:3c:f3:1c:f6:50:de:ba:66:d2:
39:39:fe:2f:a3:82:1c:df:27:68:87:b6:de:5d:1d:
fc:83:bb:6f:d4:37:3d:49:12:78:bb:fe:90:a1:7f:
f2:06:a4:c0:e4:0f:3e:76:d2:93:2a:1c:8c:eb:91:
66:0d:3d:f1:4b:12:65:43:1d:71:c4:2e:10:86:fe:
15:86:73:4e:03:83:aa:73:17:c6:de:65:ae:d1:f6:
3d:73:46:52:78:d2:ba:b7:00:8f:30:9a:f8:b9:26:
b8:1f:df:fc:b2:fa:c8:8d:6e:00:05:fd:8f:a5:9b:
45:09:e0:b4:50:52:9f:7b:bc:c2:94:54:d6:94:35:
02:f8:7d:e0:5a:a6:c7:f7:4a:74:36:8b:99:19:b3:
7f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:2B:62:DC:E0:D3:05:D9:D3:F1:C4:58:37:22:F7:3E:D0:26:30
X509v3 Authority Key Identifier:
keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/WFQrYtzg0wXZ0_HEWDci9z7QJjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.102.0/24
IPv6:
2a14:5a80::/29
Signature Algorithm: sha256WithRSAEncryption
65:f1:ee:e2:0b:33:44:f1:ce:33:47:eb:d5:99:31:4a:f0:53:
b7:ab:7e:24:cf:8b:02:97:8a:3e:72:ed:2f:28:5d:ef:02:e1:
de:ba:1d:da:79:12:ad:20:84:90:02:a0:db:ac:dc:db:d3:88:
34:ea:b4:dd:4a:f8:61:37:cb:88:3c:8a:d2:78:4f:2f:24:be:
84:d1:d8:45:04:b8:dd:84:a7:7a:a4:f3:a4:87:d3:92:4b:42:
d6:33:6d:c8:1e:0b:c9:f9:94:fc:f7:ab:d1:72:00:d9:73:c2:
4b:e0:9d:93:27:16:e9:a9:c6:32:bf:b5:d0:45:dc:f9:63:52:
68:ea:88:37:72:0f:fc:3d:d3:3b:95:cf:16:3e:c2:3d:b5:cc:
9f:49:74:c7:ee:b3:5b:6f:74:3e:dc:9c:3b:d7:a5:ef:17:cc:
55:0c:6d:00:1d:78:2f:54:5f:ac:7d:47:b0:03:be:47:5d:11:
a0:c1:50:d0:72:e0:07:71:1d:9b:4b:0b:3b:7c:f8:c4:01:9b:
69:0b:de:26:c0:8e:f6:46:25:4a:c1:49:41:b9:29:b9:b8:d5:
27:34:a0:13:d3:54:09:8e:c9:ca:eb:dd:75:83:d0:bf:f9:ca:
fd:cd:ab:04:f3:19:d2:de:98:f7:0e:73:9d:b0:5c:ec:f0:09:
cc:cd:e0:0a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZSPIhk16rBKlD7vS5asGbTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTUxNDhiMzk5YjUzYmE1MmZkNjhlYWJkYmRmNmFkOTlj
YzcxZjQwHhcNMjUwMTIyMTc0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODU0MmI2MmRjZTBkMzA1ZDlkM2YxYzQ1ODM3MjJmNzNlZDAyNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5ms1wHVSJqaTODlu5/9QdjKzDmh
Ppaf+AsSOGo8DsciUOgmrPvubU3HVD7c29oxsqoJBqjTaWAaK5XZPRkziXg+W/BO
oesaO3hztTXpNRK+PtPVfb43NbHSS/ytq9oZ8oZJlXx4hte7TRSRybs88xz2UN66
ZtI5Of4vo4Ic3ydoh7beXR38g7tv1Dc9SRJ4u/6QoX/yBqTA5A8+dtKTKhyM65Fm
DT3xSxJlQx1xxC4Qhv4VhnNOA4OqcxfG3mWu0fY9c0ZSeNK6twCPMJr4uSa4H9/8
svrIjW4ABf2PpZtFCeC0UFKfe7zClFTWlDUC+H3gWqbH90p0NouZGbN/swIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFhUK2Lc4NMF2dPxxFg3Ivc+0CYwMB8GA1UdIwQY
MBaAFKjlFIs5m1O6Uv1o6r299q2ZzHH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hMzJiMWMtZjg0MS00ZjVhLTljZTQt
ZTczNDk5M2YxMWFjLzEvV0ZRcll0emcwd1haMF9IRVdEY2k5ejdRSmpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hMzJiMWMtZjg0MS00ZjVhLTljZTQtZTczNDk5M2YxMWFj
LzEvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuSVmMA0E
AgACMAcDBQMqFFqAMA0GCSqGSIb3DQEBCwUAA4IBAQBl8e7iCzNE8c4zR+vVmTFK
8FO3q34kz4sCl4o+cu0vKF3vAuHeuh3aeRKtIISQAqDbrNzb04g06rTdSvhhN8uI
PIrSeE8vJL6E0dhFBLjdhKd6pPOkh9OSS0LWM23IHgvJ+ZT896vRcgDZc8JL4J2T
JxbpqcYyv7XQRdz5Y1Jo6og3cg/8PdM7lc8WPsI9tcyfSXTH7rNbb3Q+3Jw716Xv
F8xVDG0AHXgvVF+sfUewA75HXRGgwVDQcuAHcR2bSws7fPjEAZtpC94mwI72RiVK
wUlBuSm5uNUnNKAT01QJjsnK6911g9C/+cr9zasE8xnS3pj3DnOdsFzs8AnMzeAK
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:21 2025 by rpki-client