Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/WziYZQTgG6uYWNEdvqwQxarVou4.roa
File: WziYZQTgG6uYWNEdvqwQxarVou4.roa (raw, json)
Hash identifier: K1TtQwXEcoMLvYVaawZdU+KIeSsRtPv5nA+Jxlzh0sU=
Subject key identifier: 5B:38:98:65:04:E0:1B:AB:98:58:D1:1D:BE:AC:10:C5:AA:D5:A2:EE
Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial: 019427B55F205AF98F09EA4BBCE2B9E351A5
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/WziYZQTgG6uYWNEdvqwQxarVou4.roa
Signing time: Thu 02 Jan 2025 15:49:45 +0000
ROA not before: Thu 02 Jan 2025 15:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49223
IP address blocks: 45.14.24.0/22 maxlen: 22
109.108.224.0/19 maxlen: 19
109.108.224.0/20 maxlen: 20
109.108.240.0/20 maxlen: 20
141.138.96.0/19 maxlen: 19
178.74.192.0/18 maxlen: 18
178.74.192.0/19 maxlen: 19
178.74.240.0/20 maxlen: 20
185.16.124.0/22 maxlen: 22
185.181.36.0/22 maxlen: 22
193.106.20.0/22 maxlen: 22
193.148.88.0/22 maxlen: 22
213.226.92.0/22 maxlen: 22
217.30.192.0/20 maxlen: 20
2a04:100::/29 maxlen: 29
2a04:100::/36 maxlen: 36
2a04:100:1000::/36 maxlen: 36
2a04:100:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5f:20:5a:f9:8f:09:ea:4b:bc:e2:b9:e3:51:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b38986504e01bab9858d11dbeac10c5aad5a2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:bc:06:52:93:81:c5:d8:42:5e:27:87:71:
0a:52:37:95:85:37:89:9e:3c:f8:a6:06:25:00:68:
77:09:ca:06:02:23:1c:55:75:d2:4e:de:a4:fb:c9:
b4:17:75:f4:bb:eb:d0:13:02:20:57:b9:ca:36:80:
0e:69:ad:11:84:67:df:f6:fa:3c:54:22:3a:57:36:
28:40:b5:9f:70:14:6a:49:1a:ce:0c:3e:86:12:69:
05:c9:c5:bb:0e:05:90:eb:50:36:58:5d:a0:d9:f6:
c3:45:77:5f:47:e9:9b:bc:a3:9e:3b:65:df:0f:ba:
db:f6:33:06:b0:71:cb:74:09:48:b1:c4:20:d3:26:
05:60:a2:1d:eb:3f:b3:be:99:e8:f4:ab:23:9b:f8:
33:21:0a:ee:4e:72:39:58:d7:b4:e4:3a:9c:29:a2:
8a:6d:32:8d:c4:20:cf:8c:fe:2d:01:a1:c9:96:29:
f5:ac:60:44:b8:29:34:8a:0d:bb:e7:74:54:de:0d:
4e:cc:fd:e3:cb:a5:63:b8:55:59:21:6f:fe:db:4c:
52:d4:2e:15:bb:8b:9f:d2:8b:aa:a4:86:00:65:38:
b7:04:b4:8d:d9:34:01:9d:51:58:b5:16:ca:06:ab:
28:14:1b:41:8b:f8:da:ab:d0:e7:80:5e:f8:e4:91:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:38:98:65:04:E0:1B:AB:98:58:D1:1D:BE:AC:10:C5:AA:D5:A2:EE
X509v3 Authority Key Identifier:
keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/WziYZQTgG6uYWNEdvqwQxarVou4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.24.0/22
109.108.224.0/19
141.138.96.0/19
178.74.192.0/18
185.16.124.0/22
185.181.36.0/22
193.106.20.0/22
193.148.88.0/22
213.226.92.0/22
217.30.192.0/20
IPv6:
2a04:100::/29
Signature Algorithm: sha256WithRSAEncryption
6d:42:33:37:27:ca:d4:ee:5a:6a:86:a0:05:88:0b:28:f1:bf:
6b:71:03:87:32:a2:d9:e9:79:27:5e:e8:c8:4e:e7:4c:7e:b8:
7b:e2:eb:75:1b:ee:85:55:3c:d6:e4:9a:f4:4f:54:23:66:16:
e4:3d:4b:73:89:f7:e3:0e:3b:ec:17:ca:2e:e4:4f:f0:61:61:
27:61:11:ba:0d:d7:aa:4f:78:f1:bf:b7:41:c9:40:8e:c4:c3:
44:bd:cc:9c:b2:f5:c5:03:80:9d:86:e9:32:d4:50:d0:aa:13:
be:65:32:3b:e3:36:63:8a:a1:75:ac:1b:f5:7d:d7:f4:30:b6:
30:3b:db:74:ba:dd:f1:24:90:c1:d9:1f:f0:2b:31:21:f8:b5:
f3:68:f3:60:1e:83:3e:3c:4e:75:de:41:91:41:d7:c9:6c:38:
31:1f:94:05:9e:cc:ec:0e:d6:d0:98:72:ac:68:4d:7e:33:9e:
2c:dd:87:85:3f:fa:82:73:38:22:9b:16:1a:ca:0f:d1:9f:2a:
9a:6d:c6:27:cd:6b:66:3d:d3:b6:51:ec:41:fb:39:dd:75:34:
99:2e:f4:bc:c9:4d:43:82:37:96:28:ff:fa:c1:21:b4:09:f5:
05:f4:b4:73:90:da:44:94:1b:f3:13:01:5a:4a:39:f8:3f:49:
7a:73:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:42:18 2025 by rpki-client