Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/0wC5w948UY0C8lbbbwjaNWUmaMs.roa
File: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (raw, json)
Hash identifier: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=
Subject key identifier: D3:00:B9:C3:DE:3C:51:8D:02:F2:56:DB:6F:08:DA:35:65:26:68:CB
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 0194236A3172CBA2E3CCD7395E9076E83B0D
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/0wC5w948UY0C8lbbbwjaNWUmaMs.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203547
IP address blocks: 185.131.44.0/24 maxlen: 24
185.131.45.0/24 maxlen: 24
185.131.46.0/24 maxlen: 24
185.131.47.0/24 maxlen: 24
2a05:e7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:31:72:cb:a2:e3:cc:d7:39:5e:90:76:e8:3b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d300b9c3de3c518d02f256db6f08da35652668cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:17:d9:73:01:12:5d:bf:a4:44:af:fc:4e:
83:12:55:44:3d:4e:a6:d7:98:28:2f:fe:fe:7c:06:
fb:0c:16:8a:10:99:33:fb:5f:56:0a:4a:f7:e1:a5:
56:85:3a:f9:12:8c:cc:27:00:a3:87:45:00:9a:a9:
80:d7:cb:4c:cb:09:6c:20:80:e2:58:fb:24:36:b2:
5f:a6:5f:4d:ad:25:c4:51:2a:0f:24:95:63:b6:71:
df:c2:e9:ad:64:7f:cc:4c:ad:a7:44:24:73:13:c3:
cc:29:05:f2:33:46:4c:cc:42:bc:80:70:98:70:40:
18:f3:15:8a:41:39:23:f5:89:ee:16:9f:53:de:c6:
1d:10:d5:43:8a:3c:b6:30:5e:a0:35:c7:8a:1b:5f:
fd:48:a4:9f:40:3d:07:92:0f:17:46:4d:e7:f3:72:
e8:16:1c:b8:63:fa:7e:4c:13:8a:a7:82:2b:70:85:
95:65:7b:0b:04:82:af:98:4d:9d:3c:ef:69:e7:52:
75:a0:6e:b9:18:ff:8f:d4:8c:da:27:08:22:51:3b:
6b:e2:c9:27:7d:d9:43:64:27:72:f6:23:59:54:7b:
f0:0c:d6:49:cc:f0:85:aa:7c:13:d9:ed:ee:4d:6e:
02:50:c9:d0:1c:c0:f9:2e:a9:82:32:5c:e1:96:2b:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:B9:C3:DE:3C:51:8D:02:F2:56:DB:6F:08:DA:35:65:26:68:CB
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/0wC5w948UY0C8lbbbwjaNWUmaMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.44.0/22
IPv6:
2a05:e7c0::/29
Signature Algorithm: sha256WithRSAEncryption
90:4e:e5:67:b3:cb:c1:da:a4:0d:fc:88:06:b6:20:b0:5c:8a:
6e:6c:68:d9:c5:b1:7d:48:ee:b2:ad:bf:fc:77:dd:24:4b:fa:
d9:a6:c4:40:51:93:8c:42:90:70:fa:58:b1:3e:dd:f5:ef:08:
6e:38:f3:35:a0:b5:2a:13:c0:75:ac:f2:25:2c:5b:f8:d3:94:
a5:ab:6b:7c:75:d2:45:21:03:b4:51:30:7c:67:a2:0b:34:31:
ac:30:7b:39:61:38:ff:63:34:b6:cb:fd:ff:1c:74:57:bc:39:
b6:01:21:13:19:69:05:23:57:af:f9:6b:3c:cb:db:1e:49:3e:
0e:e6:e2:ed:2a:70:21:21:89:f6:a6:77:75:d1:a1:dd:a7:e5:
3a:6c:cd:45:3f:48:a9:54:dc:a4:20:18:83:e5:6c:bc:e0:3f:
d1:0d:d1:b8:38:79:8b:c3:1b:06:dd:7c:8a:ad:e7:5f:7f:5d:
8d:9c:45:9d:8b:9a:bf:64:28:6e:e8:34:88:3f:ca:e9:ff:82:
aa:fc:12:18:73:cb:75:e0:c5:dc:07:e0:65:7d:04:66:74:bd:
33:69:fc:38:f0:84:36:d8:e4:36:be:40:5a:34:af:94:d7:03:
58:61:dd:5d:7e:58:cd:e1:3d:dd:81:3e:19:96:5c:75:13:a8:
07:3b:46:cb
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQjajFyy6LjzNc5XpB26DsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjUyNzU1MjFkMjljYWY3MTc2ZWUyYzM5OGQ0MGExZWM0
NzljNDIwHhcNMjUwMTAxMTk0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzAwYjljM2RlM2M1MThkMDJmMjU2ZGI2ZjA4ZGEzNTY1MjY2OGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueYX2XMBEl2/pESv/E6DElVEPU6m
15goL/7+fAb7DBaKEJkz+19WCkr34aVWhTr5EozMJwCjh0UAmqmA18tMywlsIIDi
WPskNrJfpl9NrSXEUSoPJJVjtnHfwumtZH/MTK2nRCRzE8PMKQXyM0ZMzEK8gHCY
cEAY8xWKQTkj9YnuFp9T3sYdENVDijy2MF6gNceKG1/9SKSfQD0Hkg8XRk3n83Lo
Fhy4Y/p+TBOKp4IrcIWVZXsLBIKvmE2dPO9p51J1oG65GP+P1IzaJwgiUTtr4skn
fdlDZCdy9iNZVHvwDNZJzPCFqnwT2e3uTW4CUMnQHMD5LqmCMlzhlivg2QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNMAucPePFGNAvJW228I2jVlJmjLMB8GA1UdIwQY
MBaAFCtlJ1Uh0pyvcXbuLDmNQKHsR5xCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yN2Y1OTUtOTY0Zi00MDU1LWI5MmYt
OWVhOWY1ZTIwM2EwLzEvMHdDNXc5NDhVWTBDOGxiYmJ3amFOV1VtYU1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yN2Y1OTUtOTY0Zi00MDU1LWI5MmYtOWVhOWY1ZTIwM2Ew
LzEvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYMsMA0E
AgACMAcDBQMqBefAMA0GCSqGSIb3DQEBCwUAA4IBAQCQTuVns8vB2qQN/IgGtiCw
XIpubGjZxbF9SO6yrb/8d90kS/rZpsRAUZOMQpBw+lixPt317whuOPM1oLUqE8B1
rPIlLFv405Slq2t8ddJFIQO0UTB8Z6ILNDGsMHs5YTj/YzS2y/3/HHRXvDm2ASET
GWkFI1ev+Ws8y9seST4O5uLtKnAhIYn2pnd10aHdp+U6bM1FP0ipVNykIBiD5Wy8
4D/RDdG4OHmLwxsG3XyKredff12NnEWdi5q/ZChu6DSIP8rp/4Kq/BIYc8t14MXc
B+BlfQRmdL0zafw48IQ22OQ2vkBaNK+U1wNYYd1dfljN4T3dgT4Zllx1E6gHO0bL
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:53 2025 by rpki-client