
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa
File: Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa (raw, json)
Hash identifier: Mhq4SXBV17W3XI37JWd2SZ0W3pU7Z4ZVwJBUNoboInU=
Subject key identifier: 5A:CD:0F:CD:29:73:72:22:FF:D7:C6:72:2F:E9:FB:44:D2:57:D5:17
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 0194228DA35A82CC53E2B03687571AD44175
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa
Signing time: Wed 01 Jan 2025 15:48:15 +0000
ROA not before: Wed 01 Jan 2025 15:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50737
IP address blocks: 193.105.111.0/24 maxlen: 24
2a03:4740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a3:5a:82:cc:53:e2:b0:36:87:57:1a:d4:41:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Jan 1 15:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5acd0fcd29737222ffd7c6722fe9fb44d257d517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:07:90:12:1f:96:81:fb:ab:48:65:6c:c9:
27:7e:59:fe:9d:b6:18:bf:78:03:3d:39:8e:23:f0:
82:ad:95:6a:3b:6c:5a:b9:b5:bf:a3:95:0b:6b:b9:
89:b3:69:42:be:1f:64:9c:4a:c8:11:61:e2:3a:1b:
d2:fa:ff:44:6e:be:9b:dd:0e:a8:13:a3:20:d4:2d:
cd:89:72:d6:1e:a7:29:83:ff:1a:18:78:e5:17:e6:
f5:bc:7a:32:cd:1b:6d:af:f0:96:15:27:6b:30:f8:
b5:f5:72:f5:ca:15:b6:67:fc:4e:f6:11:68:1b:b6:
58:31:38:29:92:46:7c:8f:3a:48:c5:93:a8:ec:2e:
a9:70:2b:ec:99:63:09:d1:87:40:b2:70:30:58:f7:
fa:e2:cc:74:4a:f3:8d:40:c7:1e:b3:7e:b0:ed:49:
de:f0:52:43:e3:9c:42:10:3b:47:7c:55:64:0b:0f:
8a:5a:9a:70:48:e0:23:c1:72:75:71:b2:63:d9:16:
90:f5:ff:ee:06:98:a9:c8:62:83:10:6a:f0:63:d2:
dd:d2:0e:11:db:41:0f:a7:62:f6:6c:dc:6f:59:3c:
0e:b1:cd:b3:88:f7:c6:4f:3f:42:15:43:84:bb:a2:
f7:45:71:ba:a8:b7:29:27:e9:ca:d8:4e:7f:7e:bb:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CD:0F:CD:29:73:72:22:FF:D7:C6:72:2F:E9:FB:44:D2:57:D5:17
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/Ws0PzSlzciL_18ZyL-n7RNJX1Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.111.0/24
IPv6:
2a03:4740::/32
Signature Algorithm: sha256WithRSAEncryption
4e:e1:7e:79:9c:73:1f:4d:fe:d1:55:be:b8:82:2b:41:3c:19:
ba:b5:86:2c:44:db:a5:0e:1f:ff:0f:b3:23:af:90:1b:ee:8d:
8c:b6:71:4a:3a:cc:cd:0f:88:bd:e8:68:dd:cf:f9:56:e2:ba:
2d:86:2e:ba:f3:c5:2d:fd:ed:ea:2a:33:98:ce:d1:b6:7b:8b:
0e:76:f0:53:1b:e2:1a:bd:16:60:9d:fb:3d:7a:38:07:71:b0:
59:ac:a9:12:fd:cd:ca:b4:9d:9a:7c:d3:9b:88:37:3f:74:ac:
91:03:52:02:93:f6:09:dd:0f:16:0d:6d:85:b9:01:ad:1b:08:
ae:6b:3b:e4:69:05:21:00:d7:dc:af:58:6b:17:97:c8:28:5a:
b4:bf:6c:29:ad:f5:56:b2:55:38:0b:0d:ce:8c:53:8d:90:d8:
05:e0:f2:0c:99:fd:1f:cb:8a:c9:2e:28:2a:ee:43:8b:5b:a2:
e4:b8:5a:30:32:2f:5a:7b:5f:88:9b:39:f3:ad:e6:0b:52:7f:
31:69:4b:09:20:93:f4:ae:60:87:4d:d8:12:24:d8:c5:dc:f0:
11:39:76:56:49:51:24:19:fd:60:b9:9d:5d:4e:c7:2a:47:4c:
36:ab:39:1a:78:8f:fd:7c:4f:9b:97:09:a0:65:54:b3:c6:96:
f4:04:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:08 2025 by rpki-client