Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/WywaCMaoX-4Vjd6cVj-u89uGhyI.roa
File: WywaCMaoX-4Vjd6cVj-u89uGhyI.roa (raw, json)
Hash identifier: AYAIVJDWWfRtiSD4573Cq+miJDAAqjH32NCsFxgcKF8=
Subject key identifier: 5B:2C:1A:08:C6:A8:5F:EE:15:8D:DE:9C:56:3F:AE:F3:DB:86:87:22
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 019424B3A34E260A404050FA4C9005B1D445
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/WywaCMaoX-4Vjd6cVj-u89uGhyI.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210158
IP address blocks: 193.36.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a3:4e:26:0a:40:40:50:fa:4c:90:05:b1:d4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b2c1a08c6a85fee158dde9c563faef3db868722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:ba:64:86:f2:c7:90:51:15:6e:e1:c6:8b:
db:18:80:1c:b0:3e:c8:e0:8c:29:2d:93:25:8a:d3:
0a:c4:f6:03:47:40:cf:1e:d6:0f:20:83:bc:d5:3a:
07:28:8a:0b:09:46:8d:c5:99:6f:59:a5:73:cb:70:
32:62:18:84:b0:07:b8:1c:ab:63:05:62:14:8e:05:
a8:f6:4e:d8:f5:81:e4:dd:61:11:84:13:c6:6d:35:
8e:ee:d7:28:c7:27:b7:57:92:fe:fb:0f:0a:0f:20:
09:6e:d0:10:b2:46:a0:08:06:6e:bf:73:f0:72:45:
83:f4:28:cb:28:c0:f2:38:52:75:09:8d:56:94:a2:
19:a2:a9:6a:8b:2d:35:df:cb:f9:98:08:3e:b5:c1:
7d:35:85:eb:df:eb:03:b0:7c:b2:13:2e:5c:e3:69:
58:fa:a8:90:6c:33:6d:5a:a3:41:71:0a:26:ee:d9:
44:8c:fd:59:2e:cb:ab:47:b3:03:f4:5f:65:38:03:
41:24:f6:f4:8c:a3:05:e9:87:df:60:5c:ee:db:c8:
4b:4d:ee:11:46:8e:fe:28:57:9c:16:6c:f8:4a:79:
fe:d0:98:31:4a:1d:32:88:49:97:05:78:79:44:0b:
8c:42:59:d3:4d:c5:75:8c:17:b8:f1:d8:46:2c:b5:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2C:1A:08:C6:A8:5F:EE:15:8D:DE:9C:56:3F:AE:F3:DB:86:87:22
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/WywaCMaoX-4Vjd6cVj-u89uGhyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2f:09:e8:3f:de:98:5e:ab:14:82:8d:b5:98:cd:41:72:62:
19:4a:a9:bf:9d:70:7c:32:d9:61:22:f7:18:b9:45:b5:8c:5d:
10:7a:16:f8:39:c7:e0:a7:a8:34:c0:3e:1e:ec:89:60:e6:61:
e8:b9:35:29:7c:2c:7f:32:b4:ce:03:b5:f9:40:94:9a:cb:36:
dc:67:9d:0b:de:91:d3:fb:a2:37:26:01:b2:18:40:33:7b:38:
bb:b7:c8:73:98:26:c0:68:91:68:8b:ab:66:50:1a:12:3e:79:
78:21:ff:7f:a3:56:ea:8e:a0:49:8c:d7:dc:75:f2:2b:d2:db:
ce:3d:a8:dc:47:02:b3:bb:d9:05:f8:e6:aa:e7:83:f4:3d:e3:
7e:a4:ea:26:1d:62:03:5f:d1:9f:53:7c:1e:ff:9b:73:fd:12:
e2:3b:f5:16:75:52:3b:0b:f8:70:c6:bf:c2:af:63:3e:97:e5:
8e:8e:78:c0:f1:39:9a:58:73:f8:48:cb:da:ef:0c:33:1c:f1:
72:92:2d:61:42:a7:99:fd:f4:84:fc:5a:59:47:5f:05:16:89:
5a:0f:08:48:f8:f3:68:6a:82:d7:51:a7:55:cd:b9:c0:e1:ad:
12:28:ff:7b:06:28:8a:0f:2e:6f:35:de:71:d3:fb:11:42:c9:
7d:11:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:39:27 2025 by rpki-client