Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/Wz8Tze_k6NBsc1hnRSZvAZ6mWaY.roa
File: Wz8Tze_k6NBsc1hnRSZvAZ6mWaY.roa (raw, json)
Hash identifier: 8pntjMPZqzDhwFWw96ozeVMPSsmCvPX1r6u6dUlRX1E=
Subject key identifier: 5B:3F:13:CD:EF:E4:E8:D0:6C:73:58:67:45:26:6F:01:9E:A6:59:A6
Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial: 019425FD7028A3CBC2F6ADE9FF64A60754D4
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/Wz8Tze_k6NBsc1hnRSZvAZ6mWaY.roa
Signing time: Thu 02 Jan 2025 07:49:13 +0000
ROA not before: Thu 02 Jan 2025 07:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43128
IP address blocks: 178.218.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:70:28:a3:cb:c2:f6:ad:e9:ff:64:a6:07:54:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
Validity
Not Before: Jan 2 07:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b3f13cdefe4e8d06c73586745266f019ea659a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:2a:f1:13:b9:97:8b:b2:0e:ab:b8:3c:87:
dc:58:1a:90:79:dd:f6:26:e2:27:ba:f7:0e:2b:6a:
02:f5:3f:c6:79:d4:ac:8b:9a:e6:c2:8e:8f:54:66:
d4:9d:71:55:09:26:ec:29:3c:6c:09:bf:0d:60:3c:
a1:a8:d5:74:91:db:43:ef:38:2e:1e:88:56:58:a9:
c1:fa:05:c2:fa:f0:a4:5b:f4:ca:d5:2e:fb:0a:46:
0d:89:b8:da:d5:ab:d7:2c:1f:74:52:ea:c6:b6:dc:
92:35:c8:02:f0:0b:97:7d:44:ad:7d:93:d4:13:40:
29:ae:25:92:b7:25:1c:d9:69:ad:80:90:61:5c:0c:
1d:0c:f5:26:2b:df:ed:56:84:64:dd:e7:95:c1:f1:
f2:de:a8:35:9a:52:c5:df:73:7c:d6:74:e8:93:53:
5d:0d:e2:2e:1c:06:4e:ea:ce:9e:5b:dc:07:5d:85:
52:7c:a0:9f:2a:92:c0:5e:e5:bd:d0:61:98:13:63:
90:67:58:fe:57:4f:ae:d2:a0:09:7a:04:93:36:f1:
eb:25:6c:f0:eb:f9:47:90:2a:df:7a:11:27:65:b6:
18:fb:24:d6:38:46:36:8e:67:f5:6c:6b:c4:dd:96:
00:3a:2b:c4:2c:87:2c:65:77:f8:8e:32:7f:3b:41:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3F:13:CD:EF:E4:E8:D0:6C:73:58:67:45:26:6F:01:9E:A6:59:A6
X509v3 Authority Key Identifier:
keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/Wz8Tze_k6NBsc1hnRSZvAZ6mWaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.175.0/24
Signature Algorithm: sha256WithRSAEncryption
29:0a:89:50:6b:49:ca:f7:89:e3:d7:f1:8c:61:e1:7f:a8:7b:
b7:dc:20:d2:d2:9d:2b:cb:e3:ee:2f:da:26:5b:45:d4:dc:81:
83:59:46:9c:13:b1:4a:b3:f7:6f:25:02:6a:22:33:40:41:b7:
58:0d:e4:7a:16:0c:32:19:a5:52:e8:51:60:fa:bb:c1:6e:5f:
a8:30:ab:4a:4a:6c:8e:59:23:51:de:db:2f:22:47:c6:34:9b:
c8:c1:6d:40:49:3b:47:ec:ab:bc:aa:aa:cd:84:a0:86:a0:87:
46:97:de:f5:5a:7b:48:55:e6:c1:f7:97:1e:7f:58:8f:2f:92:
4f:f6:c3:d6:af:d0:f3:a9:44:e7:a7:54:25:d5:5f:7c:43:70:
00:c1:6e:4b:a0:9d:c2:2b:ea:3d:c4:a2:ab:f2:04:99:91:bf:
74:c4:de:4a:c9:bb:2f:26:41:cd:56:2f:4a:60:cc:6a:1a:4c:
a3:d7:1b:60:17:5e:a2:cf:4f:cf:14:ce:4d:c7:d6:0c:fe:e8:
9c:d8:d8:64:87:6b:bd:e3:df:6a:ae:f1:4c:3e:c9:77:b3:0c:
1d:1b:80:0f:cf:3c:64:c9:84:2c:ec:d8:21:79:d5:8a:6b:d7:
fd:82:41:12:60:b4:33:f8:e1:bf:3d:ec:a2:82:8c:56:3b:7a:
9c:3a:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:29:35 2025 by rpki-client