Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/wBeey_3DAfmS3bVpXKczcJjM4cE.roa
File: wBeey_3DAfmS3bVpXKczcJjM4cE.roa (raw, json)
Hash identifier: 0BXIC9Ywwqhs3eAEJFqVmWCSiRTOnC7ial/YIuKbIQc=
Subject key identifier: C0:17:9E:CB:FD:C3:01:F9:92:DD:B5:69:5C:A7:33:70:98:CC:E1:C1
Certificate issuer: /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial: 01942444C973271207207D1E4583927454D1
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/wBeey_3DAfmS3bVpXKczcJjM4cE.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12703
IP address blocks: 5.153.64.0/19 maxlen: 24
5.172.152.0/21 maxlen: 24
46.249.192.0/19 maxlen: 24
84.19.224.0/19 maxlen: 24
87.246.64.0/18 maxlen: 24
185.64.88.0/22 maxlen: 24
193.29.223.0/24 maxlen: 24
195.47.244.0/24 maxlen: 24
195.248.70.0/24 maxlen: 24
212.20.224.0/19 maxlen: 24
217.30.112.0/20 maxlen: 24
2a02:16e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c9:73:27:12:07:20:7d:1e:45:83:92:74:54:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0179ecbfdc301f992ddb5695ca7337098cce1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:1c:f9:3f:d2:54:17:9b:bd:cb:db:fd:23:
27:8e:2f:39:46:e6:d1:36:a4:85:0d:88:a3:97:71:
f3:4a:bc:d0:10:93:97:2b:85:8b:ad:88:36:7d:49:
12:89:b1:8e:61:51:70:f3:08:83:f4:fd:8e:b3:5f:
c9:fc:2e:d3:b2:48:d1:79:35:a9:48:5b:ba:87:fd:
ec:66:33:94:80:bd:ef:2c:94:77:0e:26:bb:bc:e5:
81:3b:0e:6a:1e:16:f9:21:31:1e:44:fa:b5:4e:a0:
cd:32:8b:17:22:45:24:b0:c1:60:5c:df:32:d5:97:
a3:93:80:d9:83:f4:57:22:d0:a3:b8:94:5a:7f:99:
58:5c:43:27:4e:e3:cf:f6:24:2c:17:44:bf:b8:7b:
e2:99:2a:58:75:d2:6c:99:0a:eb:6d:25:32:b1:2c:
f4:96:a8:34:95:91:3c:a7:6f:e0:03:9f:bd:80:7b:
ff:b8:66:08:6f:2f:db:50:09:00:d9:83:85:bb:ea:
7a:75:3c:f2:81:71:11:17:0e:73:dc:d0:59:dc:dc:
56:be:c5:e6:d5:0a:9b:9f:2b:a3:a9:a4:ca:a1:7e:
81:f8:18:08:bc:a2:14:86:38:75:6c:fe:65:3e:c5:
72:7b:46:85:70:89:f4:7b:31:fb:4f:0d:16:63:9b:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:9E:CB:FD:C3:01:F9:92:DD:B5:69:5C:A7:33:70:98:CC:E1:C1
X509v3 Authority Key Identifier:
keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/wBeey_3DAfmS3bVpXKczcJjM4cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.64.0/19
5.172.152.0/21
46.249.192.0/19
84.19.224.0/19
87.246.64.0/18
185.64.88.0/22
193.29.223.0/24
195.47.244.0/24
195.248.70.0/24
212.20.224.0/19
217.30.112.0/20
IPv6:
2a02:16e0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:60:e1:4f:5d:48:a6:f4:58:de:12:d5:73:3b:7c:6b:3b:c5:
f2:66:e4:dd:2c:5a:42:58:7d:bb:86:f8:eb:2a:50:a5:20:62:
58:bd:41:45:fd:df:db:b4:f2:e0:5d:ab:06:1f:b9:62:23:43:
9c:c3:2d:1d:a5:39:fa:37:6e:10:00:9e:6d:1f:bc:8f:88:8d:
44:02:2d:a9:5b:23:ef:41:0d:4b:1f:16:eb:5a:df:8e:fc:2d:
46:37:44:b4:a2:87:93:42:ff:2b:49:16:98:6c:ee:bf:33:98:
7b:64:d4:43:0d:e4:61:3d:6d:d4:54:ef:60:fd:70:c6:92:74:
b2:be:b8:14:3b:d1:68:ea:63:a8:3b:fc:9b:7e:12:63:ac:33:
ad:4e:d7:81:69:d0:d1:bd:bb:70:c7:6c:cf:83:88:b8:5e:33:
80:86:66:ed:6c:dd:ed:90:26:6f:78:97:b5:11:df:7b:22:9a:
74:67:cf:63:c4:43:be:55:d8:27:2e:b3:06:ec:09:0f:a8:d4:
39:c9:41:17:e9:ab:2e:57:d3:fe:55:f6:80:d6:97:85:8b:dd:
7e:34:6f:d9:f9:16:90:59:70:72:4d:7c:4c:e7:88:7d:d3:94:
94:ed:79:f8:0e:d5:e2:be:45:a1:0c:a5:d0:dd:b2:f2:09:06:
d8:04:4e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:08 2025 by rpki-client