Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/PIXJy1lwlibwbVRJMDgxK7qX3n8.roa
File: PIXJy1lwlibwbVRJMDgxK7qX3n8.roa (raw, json)
Hash identifier: G+nFG8M3t0bz2vOGqdbaOSNmLf0qzMF1t7uKbdGXy6c=
Subject key identifier: 3C:85:C9:CB:59:70:96:26:F0:6D:54:49:30:38:31:2B:BA:97:DE:7F
Certificate issuer: /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Certificate serial: 01942825D8E47C45EE563816B373D4812CBD
Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/PIXJy1lwlibwbVRJMDgxK7qX3n8.roa
Signing time: Thu 02 Jan 2025 17:52:36 +0000
ROA not before: Thu 02 Jan 2025 17:52:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60820
IP address blocks: 178.250.192.0/21 maxlen: 21
185.64.108.0/22 maxlen: 22
2a04:31c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d8:e4:7c:45:ee:56:38:16:b3:73:d4:81:2c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Validity
Not Before: Jan 2 17:52:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c85c9cb59709626f06d54493038312bba97de7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:88:b9:d7:a0:09:06:c1:18:4e:56:71:e9:
80:70:2b:92:28:c8:dc:1e:3d:d1:ca:44:74:3b:97:
b9:72:e4:26:3e:53:4d:87:2d:be:49:a0:77:8b:5a:
44:34:3d:2a:bc:cd:30:f6:43:06:64:16:58:15:ee:
f7:69:e7:8d:5d:ce:58:a0:db:6a:df:e8:17:8a:42:
f7:04:2d:c0:0d:c5:cc:5c:87:ee:65:c8:e1:4d:16:
2c:3b:ac:a0:d7:2e:9b:15:c6:4e:94:9f:dd:7e:b3:
e5:28:0c:26:ba:c8:53:74:53:a9:3c:a4:88:55:88:
51:0d:cf:b8:27:57:2b:fd:84:b8:66:79:78:08:7e:
05:37:ac:fe:4a:82:08:03:ae:6c:59:99:19:96:a5:
f0:e9:f1:fd:d2:cb:47:67:99:89:6d:15:75:57:27:
19:14:52:fd:ab:cf:4b:49:61:3c:2f:cb:6b:93:f3:
dd:96:ab:2e:bd:08:38:a6:55:7b:87:8d:5f:92:e7:
03:e7:b7:1d:11:7e:92:ae:c8:eb:08:6f:b4:e5:c5:
68:ab:81:f1:ee:f8:d0:1e:46:c8:fa:14:48:e4:3d:
0a:06:fb:91:51:0c:d8:07:6f:6c:fd:da:b6:5b:85:
cf:d4:21:ed:c9:59:41:ff:d0:a0:f6:52:3e:28:19:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:85:C9:CB:59:70:96:26:F0:6D:54:49:30:38:31:2B:BA:97:DE:7F
X509v3 Authority Key Identifier:
keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/PIXJy1lwlibwbVRJMDgxK7qX3n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.192.0/21
185.64.108.0/22
IPv6:
2a04:31c0::/29
Signature Algorithm: sha256WithRSAEncryption
14:65:9b:6e:4c:18:f3:67:0f:8e:b4:de:9b:f0:44:f3:2c:87:
22:a6:fa:ae:5b:51:f1:13:cd:62:57:e1:e8:6d:b9:6b:e4:2b:
cb:85:e6:00:53:ca:35:d6:4c:77:04:9a:72:8a:ff:56:2d:1b:
aa:f9:43:6b:d1:f3:26:37:5e:50:4d:5d:19:13:6a:f3:b9:e5:
25:da:a7:2e:b4:8a:33:c5:d5:33:16:04:f2:0e:cc:67:08:a1:
42:fa:eb:e6:d3:21:b3:52:04:bc:6e:28:e0:61:4f:12:3d:1a:
d2:5f:62:50:a6:0f:16:72:00:71:ca:ec:f5:96:e9:d9:8e:04:
19:32:9f:6d:0d:d2:06:f0:e1:4a:54:ce:22:7f:ef:e4:4b:b7:
7e:1c:17:d4:87:9c:c7:07:95:61:ee:77:e3:8c:34:18:be:31:
67:0f:7a:1f:98:d1:5b:64:51:3c:aa:b1:0d:b8:36:58:db:80:
3f:38:1b:9d:ee:50:55:fc:13:4c:14:fd:66:c8:4b:86:11:4d:
ed:af:33:fd:7c:4a:6d:37:25:0d:b8:fb:a3:ce:ac:49:33:e4:
3b:98:fd:04:57:87:eb:cc:85:18:50:77:61:3a:24:9b:0e:e1:
c3:c4:9c:04:96:9d:da:01:22:5d:98:51:8e:1c:c8:fb:93:fa:
de:40:0a:b1
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQoJdjkfEXuVjgWs3PUgSy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZGU1MDQ0ZWQ4Mzg3NWM3ZTllZThlY2I4N2RkNmQzMWRk
NWM0YWUwHhcNMjUwMTAyMTc1MjM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzg1YzljYjU5NzA5NjI2ZjA2ZDU0NDkzMDM4MzEyYmJhOTdkZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeOIudegCQbBGE5WcemAcCuSKMjc
Hj3RykR0O5e5cuQmPlNNhy2+SaB3i1pEND0qvM0w9kMGZBZYFe73aeeNXc5YoNtq
3+gXikL3BC3ADcXMXIfuZcjhTRYsO6yg1y6bFcZOlJ/dfrPlKAwmushTdFOpPKSI
VYhRDc+4J1cr/YS4Znl4CH4FN6z+SoIIA65sWZkZlqXw6fH90stHZ5mJbRV1VycZ
FFL9q89LSWE8L8trk/PdlqsuvQg4plV7h41fkucD57cdEX6SrsjrCG+05cVoq4Hx
7vjQHkbI+hRI5D0KBvuRUQzYB29s/dq2W4XP1CHtyVlB/9Cg9lI+KBnhQQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDyFyctZcJYm8G1USTA4MSu6l95/MB8GA1UdIwQY
MBaAFFjeUETtg4dcfp7o7Lh91tMd1cSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQt
YWE5NTg3ODhlZWJmLzEvUElYSnkxbHdsaWJ3YlZSSk1EZ3hLN3FYM244LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQtYWE5NTg3ODhlZWJm
LzEvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsvrAAwQC
uUBsMA0EAgACMAcDBQMqBDHAMA0GCSqGSIb3DQEBCwUAA4IBAQAUZZtuTBjzZw+O
tN6b8ETzLIcipvquW1HxE81iV+Hobblr5CvLheYAU8o11kx3BJpyiv9WLRuq+UNr
0fMmN15QTV0ZE2rzueUl2qcutIozxdUzFgTyDsxnCKFC+uvm0yGzUgS8bijgYU8S
PRrSX2JQpg8WcgBxyuz1lunZjgQZMp9tDdIG8OFKVM4if+/kS7d+HBfUh5zHB5Vh
7nfjjDQYvjFnD3ofmNFbZFE8qrENuDZY24A/OBud7lBV/BNMFP1myEuGEU3trzP9
fEptNyUNuPujzqxJM+Q7mP0EV4frzIUYUHdhOiSbDuHDxJwElp3aASJdmFGOHMj7
k/reQAqx
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:48:23 2025 by rpki-client