Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/wzja5RznMFQCsPrVLj5Ban3nUjY.roa
File: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (raw, json)
Hash identifier: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=
Subject key identifier: C3:38:DA:E5:1C:E7:30:54:02:B0:FA:D5:2E:3E:41:6A:7D:E7:52:36
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 019424452FF763B56A017942C5D27012F001
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/wzja5RznMFQCsPrVLj5Ban3nUjY.roa
Signing time: Wed 01 Jan 2025 23:48:21 +0000
ROA not before: Wed 01 Jan 2025 23:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44514
IP address blocks: 46.228.224.0/20 maxlen: 20
91.192.250.0/23 maxlen: 23
212.67.128.0/19 maxlen: 19
217.170.160.0/20 maxlen: 20
2a02:78::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2f:f7:63:b5:6a:01:79:42:c5:d2:70:12:f0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c338dae51ce7305402b0fad52e3e416a7de75236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:06:dc:cb:f3:82:b5:6d:96:63:81:24:73:ae:
42:86:48:74:67:8a:ae:7c:2f:22:9d:a3:8e:4e:eb:
f3:68:92:8a:bc:d4:f5:37:b8:06:f6:a8:ab:c5:3d:
9b:57:a1:fe:7e:b2:55:4c:73:de:eb:62:98:2d:02:
7b:55:7a:d6:5f:57:6f:91:b7:68:17:ad:2a:3d:66:
ca:83:04:ad:b0:48:b7:8a:75:32:aa:2b:0b:00:95:
a5:98:61:d2:6c:7c:ec:5a:6c:d4:52:cd:74:64:72:
79:fc:00:ab:43:94:3c:81:a3:84:ec:3d:eb:3a:cb:
2e:1b:f7:28:e7:5b:8e:0b:9a:4b:bc:cf:76:6f:d6:
30:e6:36:3b:c4:47:3c:97:b1:bf:f6:cd:49:2f:c5:
91:97:ec:6d:19:e3:0d:ce:b2:3c:c0:fb:5b:73:00:
70:bf:3f:e4:21:2f:8f:af:aa:d1:75:1b:d0:38:cd:
23:71:f7:1d:1d:59:5f:5d:73:6e:de:a5:ea:e1:c8:
32:92:84:8e:f6:eb:ce:fd:3e:a3:40:0c:47:f1:85:
5e:72:5f:5a:b0:ac:f2:68:7d:d2:db:5f:79:88:41:
03:99:66:9a:b7:1a:4d:05:fb:b8:44:90:b6:b3:01:
d2:22:e7:d8:9f:9e:ca:22:1d:b9:04:bb:4d:03:01:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:38:DA:E5:1C:E7:30:54:02:B0:FA:D5:2E:3E:41:6A:7D:E7:52:36
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/wzja5RznMFQCsPrVLj5Ban3nUjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.224.0/20
91.192.250.0/23
212.67.128.0/19
217.170.160.0/20
IPv6:
2a02:78::/32
Signature Algorithm: sha256WithRSAEncryption
cb:a9:ff:59:77:b4:b7:d2:1e:c7:a0:bb:22:f1:e2:9d:17:1b:
a5:68:94:18:53:1a:15:1d:45:cf:c5:8c:76:e4:ef:af:44:26:
f4:78:fc:d1:91:92:84:42:53:ee:c6:7f:09:53:42:7c:85:8b:
3c:d6:1a:5e:39:01:f0:e9:26:19:03:5b:50:48:97:af:5d:d9:
90:90:a2:8a:ad:d6:ae:19:3e:5b:a3:f0:90:9f:96:37:31:32:
ed:5a:7b:53:09:4a:4d:a6:4c:b1:9e:6b:23:ae:27:54:05:49:
e7:9d:b3:9d:ef:b5:d1:61:a0:6e:06:24:d9:fb:b6:6e:d5:80:
7b:35:ab:e3:a7:8e:a5:4a:dd:6c:ce:b3:78:b8:da:90:2d:45:
ad:a3:b5:8b:80:91:3f:61:ff:a3:ef:11:da:7e:fa:f6:1f:45:
db:93:31:dd:72:8d:9d:b5:5d:79:01:2e:13:7a:ef:a0:5f:f2:
dd:f3:5e:73:a8:0b:e9:86:ab:a5:81:40:d2:7c:5e:67:6c:36:
4d:b9:ca:67:05:68:1a:db:5b:90:0d:d7:26:d8:f1:79:b5:f2:
4e:36:16:45:28:a8:3d:88:5e:0a:7d:b3:71:4c:ef:84:f4:e2:
7d:45:2b:99:9e:05:81:d4:19:ed:44:52:78:71:49:9d:35:c5:
fd:a2:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:44 2025 by rpki-client