Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/wZSP-d8n6hvvOKPvEYxVgr9KV58.roa
File: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (raw, json)
Hash identifier: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=
Subject key identifier: C1:94:8F:F9:DF:27:EA:1B:EF:38:A3:EF:11:8C:55:82:BF:4A:57:9F
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 0194888C58A54E5CF00E7548C767DB5034AB
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/wZSP-d8n6hvvOKPvEYxVgr9KV58.roa
Signing time: Tue 21 Jan 2025 11:08:06 +0000
ROA not before: Tue 21 Jan 2025 11:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213960
IP address blocks: 93.126.50.0/24 maxlen: 24
93.126.53.0/24 maxlen: 24
93.126.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:8c:58:a5:4e:5c:f0:0e:75:48:c7:67:db:50:34:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 21 11:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1948ff9df27ea1bef38a3ef118c5582bf4a579f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:62:12:46:42:f9:c4:4b:b1:ac:9f:55:a7:
76:6a:55:98:1a:6c:ca:73:89:a2:8a:c1:aa:4f:c9:
b6:39:05:84:93:bd:f0:71:c1:07:89:bf:38:08:4b:
1a:99:fb:27:01:0c:1b:25:4f:19:ca:a3:04:e1:17:
82:45:52:d0:8f:2d:13:37:6f:1b:2e:57:11:c6:b4:
16:da:38:c6:b5:a6:0c:2e:9b:49:12:9d:92:b1:df:
7c:c3:e6:df:75:c7:06:51:43:ab:9c:d7:69:cd:17:
c8:f8:20:66:f3:f2:5b:24:a5:71:ef:41:32:a2:1e:
8e:2b:f9:9c:6b:45:2d:a9:2b:37:e7:5f:ca:32:45:
65:63:4b:ea:53:a7:90:c1:a5:ae:87:fc:61:86:7c:
2d:c2:3c:f4:4c:64:10:29:c3:1a:63:d6:a2:ed:18:
37:10:9f:6c:68:05:5d:8f:81:9a:ec:55:e8:b9:1e:
40:3b:1c:a5:6e:c5:6a:3f:a4:78:6b:98:88:19:00:
7d:41:ba:bd:72:45:f8:49:3c:51:f2:73:2d:09:72:
ef:d9:67:f1:91:b9:a4:25:1c:eb:d3:92:37:f0:57:
bd:9c:2c:0b:99:75:2d:b2:d9:0d:b0:46:c7:d2:b9:
57:0f:73:2c:34:f1:92:fe:12:1c:79:51:4c:89:63:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:94:8F:F9:DF:27:EA:1B:EF:38:A3:EF:11:8C:55:82:BF:4A:57:9F
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/wZSP-d8n6hvvOKPvEYxVgr9KV58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.50.0/24
93.126.53.0-93.126.54.255
Signature Algorithm: sha256WithRSAEncryption
9b:c8:c2:41:7c:5d:35:44:10:b5:88:21:be:36:b1:57:bd:5b:
8d:31:8d:ba:98:ab:ae:f1:75:6a:69:8a:b4:4a:d1:29:9c:79:
34:d3:07:11:d8:ee:54:fe:01:d7:ec:d8:7b:dd:c7:c6:1f:67:
42:74:32:4a:6f:bd:b5:2e:53:67:e5:67:da:db:e1:92:0c:fd:
69:d2:50:ad:d3:68:40:2f:51:90:59:ed:56:cf:d4:32:93:36:
c7:de:82:7c:39:18:39:5e:cc:1e:0a:81:6c:11:ae:87:1b:29:
e4:e6:a3:14:21:32:d6:0e:bb:e5:2c:05:53:a9:23:76:f7:7f:
72:bc:18:65:59:a2:42:b6:8a:5a:17:f3:d7:6f:59:6e:34:18:
14:6d:e4:99:f9:51:d5:dc:45:91:30:5b:00:c3:80:25:c0:f2:
9f:64:f5:3e:4f:78:19:0c:27:e9:f7:b2:dc:67:9a:ed:ec:9a:
e4:54:6c:37:11:30:35:26:d6:26:af:85:04:98:51:5e:88:e6:
cf:91:61:d6:0c:36:50:8c:fd:67:be:f6:75:f2:03:40:aa:ca:
15:fb:97:47:47:60:1d:61:bf:b9:98:a3:57:9e:b0:cd:13:60:
90:9f:24:05:5a:fb:28:8d:2a:2d:71:15:b8:3e:46:96:14:f1:
74:90:12:c7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZSIjFilTlzwDnVIx2fbUDSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm
NDA0ZDMwHhcNMjUwMTIxMTEwODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTk0OGZmOWRmMjdlYTFiZWYzOGEzZWYxMThjNTU4MmJmNGE1NzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UBiEkZC+cRLsayfVad2alWYGmzK
c4miisGqT8m2OQWEk73wccEHib84CEsamfsnAQwbJU8ZyqME4ReCRVLQjy0TN28b
LlcRxrQW2jjGtaYMLptJEp2Ssd98w+bfdccGUUOrnNdpzRfI+CBm8/JbJKVx70Ey
oh6OK/mca0UtqSs351/KMkVlY0vqU6eQwaWuh/xhhnwtwjz0TGQQKcMaY9ai7Rg3
EJ9saAVdj4Ga7FXouR5AOxylbsVqP6R4a5iIGQB9Qbq9ckX4STxR8nMtCXLv2Wfx
kbmkJRzr05I38Fe9nCwLmXUtstkNsEbH0rlXD3MsNPGS/hIceVFMiWNDBQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMGUj/nfJ+ob7zij7xGMVYK/SlefMB8GA1UdIwQY
MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt
NmMzOTUwMTk0MzcwLzEvd1pTUC1kOG42aHZ2T0tQdkVZeFZncjlLVjU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw
LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAXX4yMAwD
BABdfjUDBABdfjYwDQYJKoZIhvcNAQELBQADggEBAJvIwkF8XTVEELWIIb42sVe9
W40xjbqYq67xdWppirRK0SmceTTTBxHY7lT+Adfs2Hvdx8YfZ0J0MkpvvbUuU2fl
Z9rb4ZIM/WnSUK3TaEAvUZBZ7VbP1DKTNsfegnw5GDlezB4KgWwRrocbKeTmoxQh
MtYOu+UsBVOpI3b3f3K8GGVZokK2iloX89dvWW40GBRt5Jn5UdXcRZEwWwDDgCXA
8p9k9T5PeBkMJ+n3stxnmu3smuRUbDcRMDUm1iavhQSYUV6I5s+RYdYMNlCM/We+
9nXyA0CqyhX7l0dHYB1hv7mYo1eesM0TYJCfJAVa+yiNKi1xFbg+RpYU8XSQEsc=
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:26 2025 by rpki-client