Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/WQLBymqnHEPqWCxtCicxi2cKp-4.roa
File: WQLBymqnHEPqWCxtCicxi2cKp-4.roa (raw, json)
Hash identifier: +9NIzXALGtkqTPG9vs1CbkFB05k1fHs0XykT9xFFJ/A=
Subject key identifier: 59:02:C1:CA:6A:A7:1C:43:EA:58:2C:6D:0A:27:31:8B:67:0A:A7:EE
Certificate issuer: /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Certificate serial: 0194266BEE251B302A4D8F53173E5152D1E6
Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/WQLBymqnHEPqWCxtCicxi2cKp-4.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13127
IP address blocks: 193.176.208.0/24 maxlen: 24
194.53.33.0/24 maxlen: 24
194.53.35.0/24 maxlen: 24
194.53.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ee:25:1b:30:2a:4d:8f:53:17:3e:51:52:d1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5902c1ca6aa71c43ea582c6d0a27318b670aa7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:23:dd:12:ad:e5:97:cd:b8:73:c1:87:37:
f6:be:9d:c7:af:ed:ce:0d:bb:48:2f:bd:56:c7:6e:
b7:1f:fe:d1:59:a6:15:c9:6e:10:fe:d1:00:28:e5:
7f:15:ec:2c:e2:55:0a:f5:3d:90:8b:93:5a:f3:67:
06:87:fc:a2:3d:a9:c2:1e:99:b8:b5:c0:88:7f:05:
da:b8:ea:c1:b7:70:11:4c:39:86:6e:8b:64:6d:74:
8c:83:33:d1:ba:e6:72:19:11:ef:0a:c5:12:e2:c4:
32:9d:7f:18:99:da:4b:c4:e9:21:2e:7c:4b:06:46:
12:27:4d:6a:14:0e:57:3d:25:54:ba:f5:a1:73:3d:
32:73:ab:bb:7c:35:20:2d:a5:3d:fc:c2:f8:fe:05:
01:28:38:d2:f8:4c:c7:2c:0c:3a:25:ed:61:41:1e:
c5:dd:ff:fc:03:8c:3c:bd:b5:26:6c:b7:38:35:6f:
a0:ce:c6:f9:fa:df:be:69:fc:30:c7:c4:7b:44:5f:
4b:0e:ad:2f:15:1f:f4:8c:1f:a8:22:73:af:ff:21:
a5:a1:0f:36:ee:67:b9:e6:cb:e1:81:4b:f2:93:cb:
89:fe:44:b7:0e:34:a1:20:fc:f7:ab:71:50:90:ca:
5a:24:0c:f4:53:0a:85:4c:ec:0a:d6:c2:58:4a:84:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:02:C1:CA:6A:A7:1C:43:EA:58:2C:6D:0A:27:31:8B:67:0A:A7:EE
X509v3 Authority Key Identifier:
keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/WQLBymqnHEPqWCxtCicxi2cKp-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.208.0/24
194.53.33.0/24
194.53.35.0-194.53.36.255
Signature Algorithm: sha256WithRSAEncryption
08:a6:48:98:0f:49:30:eb:9d:a5:cd:e9:e1:9f:1d:cb:aa:12:
9b:d1:f8:5d:c8:10:ec:fc:57:dd:11:f5:49:e5:65:d0:77:42:
14:b1:3b:c4:aa:12:ba:0f:a5:ba:83:56:1c:12:20:b1:8d:8c:
24:ee:f3:5d:56:0a:98:1b:ec:dd:d6:ba:59:2c:22:de:ee:d0:
3d:16:79:e4:b8:ce:13:7b:1a:9a:e1:0b:bf:80:82:73:cc:3b:
3f:b6:98:c5:87:ab:eb:a6:d6:10:83:fe:1f:ce:a6:ce:43:60:
6f:03:df:c9:02:0c:27:c4:8a:cf:81:2e:2b:56:4a:73:f2:dc:
5c:40:17:a1:86:e1:9f:81:a1:aa:85:af:d8:ac:76:85:30:9e:
e7:fd:d8:44:c0:f6:d3:bf:c3:ef:77:cd:e5:55:99:79:79:4b:
dc:38:99:82:7a:dc:1e:c8:b6:0b:e6:90:4a:e7:37:e0:c9:37:
52:01:cb:3e:62:89:33:07:57:c6:61:56:3d:ca:be:84:4f:d6:
10:d3:36:2b:ff:c9:b9:62:dc:bd:a6:8e:11:14:13:b9:b1:22:
fa:a7:44:9d:52:4e:db:72:96:ea:c7:05:37:b2:db:fa:9a:c8:
32:55:71:e2:8d:8d:96:c7:3d:c8:f2:d5:ac:27:88:58:0b:94:
21:8e:18:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 08:13:11 2025 by rpki-client