Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/wzbAA_7v4SO8gotTxJQmyHJivbA.roa
File: wzbAA_7v4SO8gotTxJQmyHJivbA.roa (raw, json)
Hash identifier: yFDcInj33yWnnvdYVc/TUwbE4elU5cTUQYixYyOr5So=
Subject key identifier: C3:36:C0:03:FE:EF:E1:23:BC:82:8B:53:C4:94:26:C8:72:62:BD:B0
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0196D9594D7ED4BDF1CAC279EB430FD85884
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/wzbAA_7v4SO8gotTxJQmyHJivbA.roa
Signing time: Fri 16 May 2025 13:47:10 +0000
ROA not before: Fri 16 May 2025 13:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208427
IP address blocks: 91.203.232.0/23 maxlen: 23
91.238.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:59:4d:7e:d4:bd:f1:ca:c2:79:eb:43:0f:d8:58:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: May 16 13:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c336c003feefe123bc828b53c49426c87262bdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:8f:e8:f3:12:1d:60:ca:15:b7:da:f3:2b:
2c:0e:a8:c1:19:a2:35:fa:8e:3a:41:fd:99:f5:0a:
2b:3d:3d:dc:59:4d:db:bf:a2:fd:f1:a5:75:ab:5f:
bb:e4:d0:13:00:19:89:4b:1b:07:7c:f4:46:6d:08:
15:cf:7b:51:dd:e7:e7:6f:c2:cd:53:1f:c6:f1:f9:
c1:45:ec:cb:b8:dd:65:44:41:dc:a5:83:a8:b2:2b:
7f:7e:86:ea:93:bb:01:a0:19:36:e6:72:da:34:c8:
21:bf:97:fe:e5:b3:70:fa:96:4c:aa:6a:7d:a9:e8:
b9:59:d7:65:70:dd:40:b8:3d:fa:fb:0d:36:8f:2e:
3d:96:48:71:7b:75:75:d0:58:72:46:f6:8f:a2:fd:
c2:61:ab:42:06:b5:6b:fd:25:e3:33:0a:94:ae:91:
6b:6a:2f:4c:78:57:2c:de:ef:a4:65:4b:b0:55:bb:
17:ac:b6:f8:d5:e5:28:a9:c5:3b:ba:e8:0f:40:90:
2d:f4:87:b1:dd:9f:e2:5e:fa:3c:f1:34:d8:73:69:
57:31:e6:3d:66:51:f0:27:69:13:20:5a:aa:7a:15:
fa:fe:ca:a8:88:3f:da:57:5b:b3:da:05:9a:c3:3d:
61:1d:6f:8e:7a:45:60:2e:f0:60:70:7b:29:4f:03:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:36:C0:03:FE:EF:E1:23:BC:82:8B:53:C4:94:26:C8:72:62:BD:B0
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/wzbAA_7v4SO8gotTxJQmyHJivbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.232.0/23
91.238.98.0/23
Signature Algorithm: sha256WithRSAEncryption
17:80:a7:1b:dd:e9:42:27:25:94:c8:28:0f:42:a0:38:24:0b:
fe:e0:b5:aa:ca:d0:3e:d1:c0:6b:cc:2e:23:98:19:26:d0:af:
07:f1:48:0f:5d:25:02:52:16:03:d3:0c:25:8a:64:1d:40:5f:
7f:3d:e5:f8:f9:77:b8:df:61:73:2d:c6:ce:db:15:a4:e7:36:
d0:9c:a0:a6:d7:c9:8f:fe:85:25:a8:6c:87:0d:f3:76:1c:cd:
5c:c0:7d:4e:18:ea:55:4f:c1:63:41:ae:8a:d4:c8:cc:e1:f5:
bf:6b:8c:f6:03:7f:38:a3:2e:4a:fc:65:3b:d0:d3:cb:b9:36:
ef:96:bf:8a:5a:a9:ba:74:ac:4f:f3:eb:58:5a:e5:12:6e:7f:
6e:9f:cf:bf:d2:ac:c1:58:76:40:6b:e9:53:2d:a8:99:3a:25:
3c:19:2a:a8:e5:90:1b:ba:82:c3:a4:dc:8e:8b:b5:c8:5e:8d:
56:81:ae:db:c6:b4:ab:97:26:f3:80:59:a1:db:20:03:95:1e:
32:37:25:6d:c3:ea:c6:c8:87:12:64:75:d9:d0:b1:4a:8a:f3:
a6:aa:47:d4:a4:14:b2:de:16:d0:e0:17:d0:2c:c8:5a:0b:bb:
0b:a6:f1:83:b7:51:82:1b:06:c4:a8:7c:2f:01:97:1e:6f:91:
50:57:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:20:54 2025 by rpki-client