Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa
File: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (raw, json)
Hash identifier: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=
Subject key identifier: 59:6F:84:83:89:43:D3:C5:97:46:32:88:C8:C7:F9:6B:D2:4D:DE:C2
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 0194266B6121C1DC8C9E747A24368B8A4153
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa
Signing time: Thu 02 Jan 2025 09:49:18 +0000
ROA not before: Thu 02 Jan 2025 09:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200059
IP address blocks: 109.235.0.0/21 maxlen: 32
185.40.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:61:21:c1:dc:8c:9e:74:7a:24:36:8b:8a:41:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 2 09:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=596f84838943d3c597463288c8c7f96bd24ddec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:61:7e:ef:3b:2c:fd:e7:26:96:98:52:86:
33:1a:37:d1:41:b7:6a:e3:7f:11:8f:ba:a5:4f:e9:
49:06:db:9c:df:c4:46:f5:dc:0c:99:54:43:a8:02:
a8:e7:30:c9:1d:46:a1:57:5d:2e:2d:08:ba:46:78:
73:2d:92:c3:ee:0f:15:db:13:76:9c:1d:8b:b5:06:
1d:21:01:35:2b:bb:b5:1a:ef:ce:1c:58:f8:3f:ca:
4c:c9:9b:74:b0:22:d8:52:08:68:16:3e:52:6d:dd:
f9:2e:c2:dc:ae:c3:31:71:bb:67:e0:08:78:b9:dc:
0c:1b:6d:9e:50:09:b8:d0:c9:21:13:1b:05:0d:4e:
b8:85:5c:79:90:ac:dc:9e:77:38:d6:cd:70:c1:13:
d2:27:cd:bf:b1:93:a0:c6:4c:cb:1e:10:fa:df:7a:
8b:7b:e6:94:27:fd:07:f3:63:72:29:44:82:48:78:
50:bf:6a:1f:34:89:33:4e:a3:a0:f0:4d:2b:d0:78:
51:da:d3:8e:e9:03:60:9a:61:b3:b5:44:64:39:0f:
0e:c3:70:a8:dd:1b:b3:e1:99:62:f7:81:bb:b5:c6:
b3:07:e8:8e:c4:78:84:0f:ba:1f:c7:64:0f:97:c5:
cc:36:e6:36:5c:59:c1:93:92:a3:c2:9e:3d:5d:12:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6F:84:83:89:43:D3:C5:97:46:32:88:C8:C7:F9:6B:D2:4D:DE:C2
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.0.0/21
185.40.80.0/22
Signature Algorithm: sha256WithRSAEncryption
75:a2:58:da:a1:cd:e6:25:44:bd:ef:19:f6:68:d9:03:c3:aa:
17:f4:62:6b:16:6f:5f:00:1b:1d:64:cf:74:4b:02:f6:0f:ea:
3e:c8:e5:89:d8:d2:b0:3d:a8:5f:08:05:10:85:69:a4:b3:bf:
9a:84:60:06:fe:df:2d:2a:6b:ad:85:85:00:b2:d9:62:ee:bd:
a8:f9:3d:44:ca:99:48:89:66:4f:f1:e8:92:d7:c0:90:ab:9c:
5f:0b:3f:cc:50:6a:be:5d:2c:64:57:e3:8d:36:6a:93:9c:58:
bb:bc:69:7d:33:7a:bc:f9:10:cd:bf:a4:b1:25:66:97:1e:ff:
46:cf:3b:23:2d:1c:ce:60:ac:6a:38:44:1c:e8:58:af:86:5c:
6c:f3:f4:89:ed:3f:b2:1e:9a:12:19:f4:07:7a:b7:7f:ef:7d:
91:31:54:ca:d1:db:db:1c:94:4c:bd:7e:38:5d:f5:00:b9:c1:
2c:51:4e:f6:11:e8:e4:e9:88:d1:6f:88:55:7e:76:80:17:3e:
46:53:28:36:5b:49:0b:52:8a:b1:64:80:54:67:64:85:fb:de:
69:f6:86:c2:1a:74:53:c7:1d:d3:f4:46:8a:a1:60:8e:0a:87:
4a:9c:71:6d:f5:f9:5e:2b:44:16:00:d7:cf:91:c8:82:94:7b:
a4:5e:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:59:11 2025 by rpki-client