Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/WqCM--ZSqxtcqHxil1wItYtEpEM.roa
File: WqCM--ZSqxtcqHxil1wItYtEpEM.roa (raw, json)
Hash identifier: CPcHuYLnfs1zjrIDaz07dO7we+nME2TOlwKRzyCU7gM=
Subject key identifier: 5A:A0:8C:FB:E6:52:AB:1B:5C:A8:7C:62:97:5C:08:B5:8B:44:A4:43
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 019423D6ACB7DD05D0FA9556EF6977D15F6B
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/WqCM--ZSqxtcqHxil1wItYtEpEM.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8412
IP address blocks: 192.94.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ac:b7:dd:05:d0:fa:95:56:ef:69:77:d1:5f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aa08cfbe652ab1b5ca87c62975c08b58b44a443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:c2:60:bf:5a:ec:c1:33:a7:09:53:db:d8:
36:e9:c2:47:eb:67:34:b2:28:87:9d:1b:07:96:27:
37:31:59:e7:a6:80:69:cc:e8:a7:7d:84:f5:29:17:
88:f0:f9:7c:fa:fd:29:22:48:33:5a:cd:2d:84:da:
fa:b2:09:da:62:ed:18:8a:f8:70:5e:20:dc:25:1b:
cf:33:f9:98:7c:95:2e:50:c8:85:10:b7:b2:de:ca:
6a:af:c0:a9:b6:df:b0:bf:fd:c1:93:b3:cf:69:c8:
14:f3:e0:b7:81:62:c5:58:e2:d7:55:ce:e2:1e:55:
b6:5c:9c:a9:38:e5:85:6d:57:61:3b:ba:a0:55:55:
53:a0:b6:13:9a:44:a6:30:6f:14:d9:9d:e7:0d:61:
0a:47:9a:93:a1:72:96:5d:73:61:43:e0:50:7c:0a:
35:69:07:52:a1:63:8d:cc:47:80:9c:f5:71:8a:8e:
9a:42:28:19:51:3d:4a:94:ef:56:55:30:46:11:f3:
28:c5:fb:62:b8:b9:4f:07:e8:7c:50:02:79:2e:38:
33:8d:a3:9c:9f:e3:db:d1:09:64:51:88:f7:d2:32:
41:93:df:42:a5:80:a9:9a:d6:18:30:51:8e:59:a4:
ce:16:cf:9b:56:96:64:2e:9e:d8:b8:b9:d5:d2:7e:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A0:8C:FB:E6:52:AB:1B:5C:A8:7C:62:97:5C:08:B5:8B:44:A4:43
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/WqCM--ZSqxtcqHxil1wItYtEpEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.226.0/24
Signature Algorithm: sha256WithRSAEncryption
08:02:90:2e:d9:60:b6:01:3f:de:5d:c3:bd:7a:e3:58:0e:23:
46:64:99:5a:7a:16:19:18:3c:6a:17:a5:fc:bc:fa:b3:21:ff:
9d:80:9c:5e:87:4a:da:8f:92:2e:eb:bf:99:c2:54:b5:92:17:
af:95:25:ce:f5:d1:12:28:4e:20:48:d5:c4:80:1b:69:10:64:
a5:86:87:63:28:9d:b9:18:98:e1:e8:5b:99:7f:ac:b1:04:88:
59:ea:dd:a8:78:bb:41:73:3c:86:f3:28:44:40:d1:80:d0:77:
02:63:c5:66:20:b1:7d:88:fd:db:78:bb:7d:16:70:23:d8:27:
fc:40:f2:0c:07:ee:85:5c:73:79:1f:c3:a2:10:57:39:00:61:
70:0b:e2:80:02:86:99:d1:a9:62:90:29:fc:cb:43:f5:db:53:
d3:ca:63:d5:39:0f:38:0d:42:74:4a:a9:43:9a:f7:ee:1c:af:
98:f8:ff:77:7e:b9:56:61:60:f7:e4:c9:37:e5:83:4e:74:3a:
80:e5:3e:16:6e:31:2e:21:47:7e:8c:7d:9a:93:17:5b:8d:4f:
79:9b:f8:fe:cc:f8:45:d5:d4:1d:0e:d3:6c:63:72:8a:3d:f8:
51:a5:04:56:f4:22:76:ef:78:47:12:35:eb:6f:84:14:58:18:
7e:a0:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:12 2025 by rpki-client