Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa
File: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (raw, json)
Hash identifier: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=
Subject key identifier: 5A:67:39:C9:85:5A:18:9E:EE:1C:4D:B8:BD:B7:3B:B5:6E:39:0C:E3
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 019428214C37F6DAF297807AA3034659F627
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa
Signing time: Thu 02 Jan 2025 17:47:38 +0000
ROA not before: Thu 02 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.149.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:21:4c:37:f6:da:f2:97:80:7a:a3:03:46:59:f6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Jan 2 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a6739c9855a189eee1c4db8bdb73bb56e390ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e1:e3:5d:af:63:b6:0a:01:06:19:fe:7b:80:
5c:17:bf:29:b3:23:47:e1:0a:76:e0:f2:e2:0d:74:
54:22:eb:a8:66:22:b0:13:33:97:0a:4b:7e:72:2a:
7e:db:2b:0c:bf:3b:91:d8:82:38:44:49:54:7f:61:
c1:29:b1:a4:50:d7:04:b3:c6:44:0c:db:ec:56:94:
08:b7:1c:f9:e7:fc:d8:ea:ea:87:5a:a6:8f:32:83:
af:5b:59:6b:45:80:85:3a:61:d1:ac:e5:fe:80:c6:
4a:28:ff:05:24:00:b2:f5:80:96:71:a2:0a:f9:57:
e4:23:28:06:09:9d:e0:64:66:0e:d1:5d:91:18:d5:
ff:31:5e:74:ef:33:fb:e3:32:cf:84:de:70:61:e0:
c2:56:f2:dc:04:09:73:2e:89:d0:c0:01:ff:a5:c6:
2c:74:4d:d6:92:ff:56:09:b8:1a:c8:4f:a7:bb:0e:
85:03:b8:45:0c:cf:7b:44:36:0c:a9:a2:4e:d9:35:
c9:23:04:3f:10:02:e1:c3:89:e0:2f:14:a3:55:ed:
8a:68:60:41:17:e5:5e:96:36:52:16:d2:7a:65:4b:
07:7f:04:28:f5:95:02:8d:e6:e4:28:3a:ac:57:08:
8b:6d:4e:03:6e:d3:7e:e9:ad:d2:73:d2:68:da:14:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:67:39:C9:85:5A:18:9E:EE:1C:4D:B8:BD:B7:3B:B5:6E:39:0C:E3
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.108.0/22
Signature Algorithm: sha256WithRSAEncryption
76:8a:e1:c5:81:cf:a9:10:f2:db:fa:e6:0f:e7:bf:03:d0:72:
1e:e2:bf:cb:8f:13:d7:2c:a3:1c:e1:0c:27:8a:18:72:b8:60:
2f:dc:4f:dd:be:a9:6c:47:4b:55:cb:81:3a:db:6b:4b:fa:9c:
c1:19:60:d9:30:4a:08:dd:a5:dc:e4:13:fd:6f:e5:04:54:6f:
02:26:4d:ca:05:fa:85:d6:59:ee:0d:c6:31:b2:3b:ab:38:04:
76:e5:24:0e:f4:09:9c:39:e7:4f:66:82:42:7f:c2:fc:dc:ba:
17:51:6f:98:b9:17:78:05:ca:7b:e5:bf:69:d0:f5:63:ba:8b:
ee:c3:de:01:2c:20:6a:50:cb:fd:1e:24:2a:85:7d:30:58:a0:
9c:86:74:56:7e:20:e4:3d:ff:c8:00:42:84:df:b9:4e:4b:5c:
ca:0c:e8:c0:4c:3d:01:cd:f2:fe:8e:d1:6c:2b:21:08:2c:09:
f8:cc:ef:dc:28:5e:6c:a1:f5:61:6e:38:ed:c2:ec:5f:25:cd:
5a:24:83:57:ef:58:bc:e7:89:ed:d2:a5:ff:91:9c:53:94:03:
84:71:e6:74:24:90:59:ef:ae:8f:a5:62:15:5d:59:c8:4d:fd:
93:0d:4b:b4:42:60:32:6d:e0:c1:d4:d0:ca:f3:20:72:be:09:
81:75:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:10 2025 by rpki-client