Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/WxqcaVhaoBXALuT0nuZ5-ldvy5M.roa
File: WxqcaVhaoBXALuT0nuZ5-ldvy5M.roa (raw, json)
Hash identifier: 54+VisoJk6Lfjr1TOYfxuR0DXzQFt+Z0Jx7YmBHPCJQ=
Subject key identifier: 5B:1A:9C:69:58:5A:A0:15:C0:2E:E4:F4:9E:E6:79:FA:57:6F:CB:93
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0195C3BCD85CB18F60E9E1890A61662F7CF3
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/WxqcaVhaoBXALuT0nuZ5-ldvy5M.roa
Signing time: Sun 23 Mar 2025 16:01:28 +0000
ROA not before: Sun 23 Mar 2025 16:01:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.153.0/24 maxlen: 24
45.149.154.0/24 maxlen: 24
89.150.49.0/24 maxlen: 24
185.162.176.0/24 maxlen: 24
188.94.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c3:bc:d8:5c:b1:8f:60:e9:e1:89:0a:61:66:2f:7c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Mar 23 16:01:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b1a9c69585aa015c02ee4f49ee679fa576fcb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:a8:fb:d0:89:0f:a7:3c:01:e7:26:a6:9c:
ec:a5:22:1c:ca:86:e0:7e:72:8c:26:9a:9e:17:e3:
d7:e9:d7:a9:71:e3:fc:8e:3c:b0:c1:a7:cf:5f:45:
ed:aa:ff:12:b9:72:87:d1:f8:fd:33:3e:39:54:f6:
c9:cd:cc:46:c9:07:5c:e5:eb:b2:e9:05:90:5a:aa:
f3:74:54:1b:10:fb:89:9a:36:20:a0:36:a9:37:3d:
7b:39:9b:a1:3c:6a:dd:e7:3e:50:6d:14:7f:d8:e3:
5b:db:c2:58:4b:a7:c2:b9:eb:e7:f7:b6:81:de:23:
96:b2:74:d0:cd:96:73:5e:4c:22:57:3a:fd:3f:08:
96:bd:c1:6c:07:e0:75:3e:52:19:3a:a6:b3:e5:8d:
f8:52:7a:ca:26:e1:d7:10:09:46:01:2c:fb:06:dc:
5a:a8:82:32:ce:49:00:74:d2:be:d3:5e:fd:6c:05:
a1:81:66:5e:f8:3e:9d:ef:92:81:1d:ce:0a:ff:a5:
9d:a1:51:15:b6:0e:68:68:18:1e:f9:48:7e:e6:10:
2d:14:87:6f:8e:0e:c4:80:49:4f:5f:16:32:43:4a:
8c:51:39:5d:45:65:42:04:18:17:19:f0:aa:22:48:
2b:13:f9:ae:dd:26:03:f7:d6:05:af:58:9c:7f:a6:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1A:9C:69:58:5A:A0:15:C0:2E:E4:F4:9E:E6:79:FA:57:6F:CB:93
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/WxqcaVhaoBXALuT0nuZ5-ldvy5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0-45.149.154.255
89.150.49.0/24
185.162.176.0/24
188.94.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:04:46:0d:a6:0b:cf:1a:fe:78:51:7f:9f:88:fd:98:07:69:
af:77:65:9c:a0:39:a7:fb:d3:96:fb:24:30:69:27:53:a3:dc:
10:41:58:22:85:2a:c2:16:48:df:e1:fb:ad:cf:f6:6e:c6:28:
a3:9e:a0:37:3b:ac:8f:82:b5:21:39:d6:9a:63:13:51:4e:93:
0b:09:67:96:7b:62:86:84:8c:d1:a6:52:24:76:c6:15:e6:a3:
c1:e8:9a:a9:41:19:7b:9c:5a:e0:78:e5:8d:08:79:f0:50:2a:
42:31:d5:16:03:8b:7e:6d:68:04:16:67:48:cf:5a:80:82:79:
46:e5:df:80:8a:4a:b8:e4:68:f6:90:f7:b7:4f:79:ac:35:b0:
ab:99:95:df:07:f2:c0:59:8a:0b:19:48:f2:1a:a6:28:ed:c0:
5e:97:87:a9:94:f0:cf:83:58:6a:58:35:d2:8d:d6:c0:89:16:
29:75:e4:a8:3f:7d:8d:87:ba:a0:dd:57:04:83:d3:3d:49:59:
29:82:b8:84:81:51:66:5d:90:df:73:56:c3:f2:e2:2b:d7:ad:
02:9e:1e:fd:c7:8e:1e:e1:24:86:be:71:f0:0c:bd:58:51:ab:
a2:86:97:c4:6e:c8:ba:43:7f:cd:fb:18:b6:be:d1:3e:f3:0f:
3b:6e:e8:51
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZXDvNhcsY9g6eGJCmFmL3zzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWY4Yzk0NDdkNjE0Yjg2MTgyNzYzZDkzMzMyNTBlMmQ5
NDEyZTIwHhcNMjUwMzIzMTYwMTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjFhOWM2OTU4NWFhMDE1YzAyZWU0ZjQ5ZWU2NzlmYTU3NmZjYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Ko+9CJD6c8AecmppzspSIcyobg
fnKMJpqeF+PX6depceP8jjywwafPX0Xtqv8SuXKH0fj9Mz45VPbJzcxGyQdc5euy
6QWQWqrzdFQbEPuJmjYgoDapNz17OZuhPGrd5z5QbRR/2ONb28JYS6fCuevn97aB
3iOWsnTQzZZzXkwiVzr9PwiWvcFsB+B1PlIZOqaz5Y34UnrKJuHXEAlGASz7Btxa
qIIyzkkAdNK+0179bAWhgWZe+D6d75KBHc4K/6WdoVEVtg5oaBge+Uh+5hAtFIdv
jg7EgElPXxYyQ0qMUTldRWVCBBgXGfCqIkgrE/mu3SYD99YFr1icf6aCrwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFsanGlYWqAVwC7k9J7mefpXb8uTMB8GA1UdIwQY
MBaAFAtfjJRH1hS4YYJ2PZMzJQ4tlBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYt
OGE5NWU2Mzc3MzMyLzEvV3hxY2FWaGFvQlhBTHVUMG51WjUtbGR2eTVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYtOGE5NWU2Mzc3MzMy
LzEvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAtlZkD
BAAtlZoDBABZljEDBAC5orADBAC8Xr8wDQYJKoZIhvcNAQELBQADggEBAHsERg2m
C88a/nhRf5+I/ZgHaa93ZZygOaf705b7JDBpJ1Oj3BBBWCKFKsIWSN/h+63P9m7G
KKOeoDc7rI+CtSE51ppjE1FOkwsJZ5Z7YoaEjNGmUiR2xhXmo8HomqlBGXucWuB4
5Y0IefBQKkIx1RYDi35taAQWZ0jPWoCCeUbl34CKSrjkaPaQ97dPeaw1sKuZld8H
8sBZigsZSPIapijtwF6Xh6mU8M+DWGpYNdKN1sCJFil15Kg/fY2HuqDdVwSD0z1J
WSmCuISBUWZdkN9zVsPy4ivXrQKeHv3Hjh7hJIa+cfAMvVhRq6KGl8RuyLpDf837
GLa+0T7zDztu6FE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:20 2025 by rpki-client