Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/wmwzHnavsbNneHL_oBiaJZvkaxE.roa
File: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (raw, json)
Hash identifier: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=
Subject key identifier: C2:6C:33:1E:76:AF:B1:B3:67:78:72:FF:A0:18:9A:25:9B:E4:6B:11
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 0194206850E76BACA8E592EE09677A951ACE
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/wmwzHnavsbNneHL_oBiaJZvkaxE.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 5.252.153.0/24 maxlen: 24
5.252.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:50:e7:6b:ac:a8:e5:92:ee:09:67:7a:95:1a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c26c331e76afb1b3677872ffa0189a259be46b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:a2:12:8e:9e:64:de:57:2a:66:c1:76:ef:
03:bf:fa:29:42:cb:94:71:d4:cf:0f:38:e1:18:f9:
ad:6d:5b:49:8c:b4:f1:61:ac:f7:56:7b:84:06:ed:
4d:df:21:be:05:36:e4:75:5f:a7:6c:7b:da:9e:dd:
f1:2f:6b:e5:bf:0e:ae:58:7d:56:ee:51:31:01:ad:
08:64:0e:1d:b9:24:94:3b:1b:57:2b:de:60:e2:92:
76:24:c7:af:01:ed:ed:2d:3b:d2:14:ec:2f:bd:3b:
7d:dc:0e:2f:33:78:1d:ed:ff:35:bb:fd:ce:0c:45:
52:c7:82:61:4e:58:8f:6d:78:0b:b2:37:1a:27:9d:
65:65:ee:cb:0b:d5:72:84:0e:be:da:35:de:98:89:
36:08:04:8d:2d:a0:74:69:47:d6:a6:dd:62:7a:52:
eb:c3:06:00:54:ca:e2:47:3a:ca:b4:35:41:dd:51:
c9:4f:56:4d:f4:87:d9:52:3d:90:90:92:ae:2e:d9:
a0:e4:40:2d:88:90:5e:6d:20:d0:04:b8:08:a0:2b:
eb:65:7f:06:da:94:1a:dd:71:27:df:bc:33:84:62:
dc:ad:d2:36:53:ca:92:2e:03:0c:91:af:8a:1c:de:
dc:f1:d5:95:ca:57:bc:3e:3b:f8:6c:30:63:65:bb:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:33:1E:76:AF:B1:B3:67:78:72:FF:A0:18:9A:25:9B:E4:6B:11
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/wmwzHnavsbNneHL_oBiaJZvkaxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.153.0/24
5.252.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:91:b9:87:0d:0f:8e:5e:0a:ce:b7:5f:84:9d:60:94:4f:8a:
9a:f0:b8:10:0a:3e:4d:7b:ad:ee:00:9a:95:3e:d7:36:c4:ac:
5b:e2:73:6b:1b:0f:52:fc:c2:ca:c9:92:14:90:fa:09:89:80:
ab:13:31:4b:17:94:15:a1:30:86:e1:8c:3f:cc:b3:c4:2a:90:
d7:e8:c9:71:c5:ba:80:7d:5c:72:dd:0a:ca:6f:88:8f:fb:86:
d4:dd:41:44:1c:ff:7d:f4:63:47:a2:80:1a:b8:a2:e5:e7:0c:
17:22:17:06:eb:5e:2e:56:88:3e:17:28:0e:ec:95:55:20:d7:
5c:9d:c0:eb:62:11:94:f8:05:2c:cc:50:6c:55:d9:76:71:50:
d4:c3:f4:76:80:8f:41:1c:81:26:11:9e:0d:02:fc:27:93:50:
2e:a8:ce:04:b9:2d:c5:97:fb:a3:e5:11:18:4b:7d:ee:37:71:
5c:86:72:79:cd:57:bc:4d:8a:de:ee:fe:d5:12:fc:18:ef:52:
b8:44:c0:4d:b1:b7:fb:7f:2d:60:9c:d8:44:f9:d0:32:ec:b7:
b3:02:a7:d3:c5:ac:ad:d1:2e:de:1b:6a:39:ef:f8:03:1c:22:
90:0c:06:d3:44:e0:da:62:6a:6c:9b:c7:01:a5:af:ed:b3:23:
bc:ec:7c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:22 2025 by rpki-client