Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa
File: WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa (raw, json)
Hash identifier: OpV4tgEanecwJP3L/2htD3wFwFErrWLFYPu5S83daZo=
Subject key identifier: 58:91:43:BC:82:52:E5:5C:49:3E:15:CC:45:9E:F1:59:68:DA:68:46
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 0194274854FE3493DAA8420EFD139D1A1F68
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29577
IP address blocks: 194.225.125.0/24 maxlen: 24
194.225.126.0/24 maxlen: 24
2001:14e8:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:54:fe:34:93:da:a8:42:0e:fd:13:9d:1a:1f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=589143bc8252e55c493e15cc459ef15968da6846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a2:00:07:9e:b5:8c:3e:a4:28:2f:a9:05:12:
94:15:65:28:f3:89:68:3c:a7:a9:a7:34:9c:54:da:
6d:cf:91:4b:cf:33:be:20:ec:b3:6f:96:f4:63:59:
5c:52:b0:1a:de:fa:f9:51:56:ba:5d:12:31:53:5c:
c9:e3:f6:4b:d3:18:73:27:6d:09:25:76:1c:8c:02:
1f:64:97:f4:18:6e:38:98:4d:73:6b:1c:53:f6:cb:
e2:52:8d:33:dc:9e:89:00:d9:cc:b7:7b:f1:40:71:
90:df:75:41:6d:c1:9a:b1:80:fb:dc:3e:ee:c6:64:
5a:79:13:fd:f0:44:03:d2:d6:5f:f4:40:45:35:1a:
75:73:2c:fb:b2:6d:b1:1c:5d:6c:0c:91:7e:a7:98:
1c:b1:51:c6:3e:45:99:42:61:0b:1c:df:cd:02:ba:
e6:46:59:43:8d:ab:8e:4e:e2:db:fe:46:9b:4f:5f:
52:e1:02:38:7a:ec:00:8e:88:7f:60:5f:44:9d:1e:
a3:81:d1:c8:9e:d0:9b:a8:6f:3b:5b:2c:f9:fd:6e:
9e:f7:57:71:0d:34:81:49:43:50:0a:a1:0c:57:cf:
ef:f6:d6:04:51:94:c5:3d:72:13:d1:ce:ac:51:08:
a0:de:7b:dd:17:81:bd:38:36:48:6d:3e:e0:5a:18:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:91:43:BC:82:52:E5:5C:49:3E:15:CC:45:9E:F1:59:68:DA:68:46
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.125.0-194.225.126.255
IPv6:
2001:14e8:8::/48
Signature Algorithm: sha256WithRSAEncryption
6e:b1:fb:68:01:fa:4e:02:af:cf:7d:5a:ba:e8:17:43:94:cd:
49:4e:16:85:d5:87:4b:be:2f:8c:a2:4a:8f:45:a1:79:87:21:
cd:cc:ac:ae:2f:86:b4:d6:13:85:cd:b6:98:64:65:80:f2:7e:
2d:8f:1b:86:d9:51:7a:ea:39:dd:88:9e:38:e6:ec:69:2e:88:
a9:5f:c3:c0:62:7d:4e:68:12:3c:bb:55:1f:d5:ba:6d:a4:01:
f5:5d:02:bd:9f:73:53:40:af:ea:c1:66:db:38:d5:76:7e:ee:
23:7b:26:c5:e4:19:61:0b:b1:62:e8:63:14:54:06:19:3c:c1:
83:d7:ea:82:6b:93:2a:ea:4f:cd:87:8e:8a:90:c5:65:ac:25:
60:59:46:dd:64:05:f8:f0:6d:3e:7a:9d:c0:be:8b:02:4c:10:
30:05:bd:c7:09:bf:c6:15:77:c8:5a:54:26:3e:ce:cd:9a:f0:
9a:51:27:09:19:8c:eb:45:f0:34:62:20:f3:24:a1:5f:81:99:
e9:0f:1e:9c:27:0c:a7:91:6a:b8:fd:e4:b4:cb:28:46:af:c1:
8a:c1:e3:19:a4:c3:84:3e:e2:9c:01:ad:e0:39:bd:b0:d6:81:
74:1d:a8:de:bb:ac:59:89:c6:6a:72:8f:6a:27:ff:e9:40:0a:
5e:86:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:15:57 2025 by rpki-client