Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WGJ99XGaJh7skBGQoXvYDlpBLUg.roa
File: WGJ99XGaJh7skBGQoXvYDlpBLUg.roa (raw, json)
Hash identifier: ByZ7aX7sT5x1n3O18fpW4i1dWSQUUItWNkg4JqwxdJg=
Subject key identifier: 58:62:7D:F5:71:9A:26:1E:EC:90:11:90:A1:7B:D8:0E:5A:41:2D:48
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B56389FE0AEC10A88802770E6D69C9
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WGJ99XGaJh7skBGQoXvYDlpBLUg.roa
Signing time: Thu 02 Jan 2025 15:49:46 +0000
ROA not before: Thu 02 Jan 2025 15:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51396
IP address blocks: 2a11:5780::/30 maxlen: 30
2a11:5784::/30 maxlen: 30
2a12:5a00::/30 maxlen: 30
2a12:5a04::/30 maxlen: 30
2a12:8100::/30 maxlen: 30
2a12:8104::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:63:89:fe:0a:ec:10:a8:88:02:77:0e:6d:69:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58627df5719a261eec901190a17bd80e5a412d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:a0:4b:8b:dc:bc:1b:0d:7c:7c:3f:88:8a:
54:51:3e:14:1b:16:8c:a1:52:9a:12:bc:26:2f:56:
3e:37:4c:86:73:ad:a3:64:aa:bf:f4:92:ee:5a:50:
52:04:5a:f6:bd:02:e5:1b:56:de:e8:5d:be:2b:d7:
17:bf:e8:95:eb:b6:3e:a4:43:95:d4:59:c7:aa:f8:
33:ec:e7:1a:07:2d:03:02:d8:32:07:f6:06:bb:4c:
bd:2c:38:a1:12:1a:9a:69:a7:0c:58:11:f5:dd:15:
96:ec:e5:44:f8:fb:60:67:15:4f:7e:38:7d:f8:48:
d2:2c:36:40:4b:9b:bd:9a:fb:f6:dd:5a:67:70:93:
cd:09:91:b4:43:e1:65:89:53:2e:fd:b1:63:85:5b:
f0:88:88:27:1a:e5:24:c1:86:25:44:c4:76:7d:82:
71:b2:b3:de:53:65:87:9c:a1:2d:d7:de:67:c1:a1:
54:73:d4:56:07:ea:a1:ab:45:9f:38:b6:0b:e9:a8:
b3:6c:d9:05:f6:e1:62:09:28:be:ae:88:22:c4:b9:
6d:64:5f:92:c5:cf:33:b1:61:44:f2:bd:c6:16:26:
d4:8a:fb:0e:2b:f5:ff:d9:11:02:93:4e:92:0f:d8:
6e:91:a8:bf:77:3d:47:3a:2d:ef:3c:87:71:96:a5:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:7D:F5:71:9A:26:1E:EC:90:11:90:A1:7B:D8:0E:5A:41:2D:48
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WGJ99XGaJh7skBGQoXvYDlpBLUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5780::/29
2a12:5a00::/29
2a12:8100::/29
Signature Algorithm: sha256WithRSAEncryption
54:b6:90:26:44:42:58:86:73:19:d7:c5:55:50:b4:cc:ba:af:
5d:7d:6f:db:a5:2a:0b:69:89:ef:fb:86:37:c1:fd:f8:81:29:
4a:b3:0d:38:81:b2:16:13:90:26:9e:26:59:90:97:19:cc:2d:
c5:cb:59:27:1a:b1:e4:ab:4d:93:00:e5:62:7e:f0:ff:70:ec:
cd:c9:df:97:3f:99:46:a4:da:a4:18:4d:ac:aa:0b:f2:b8:71:
18:b8:8a:a5:1c:4b:a5:c7:2a:4b:61:db:83:6a:d1:08:df:10:
c4:ed:68:0a:9d:56:41:a8:89:bb:85:d7:80:e8:90:52:e0:a0:
d3:b1:d0:2f:87:77:00:b0:3d:16:04:54:e7:05:25:bf:eb:12:
e9:c3:95:3d:9c:81:af:56:b8:06:f0:79:d1:01:50:8b:91:7b:
8c:00:a7:e8:0f:c1:b2:96:da:ef:6c:2d:7c:b4:6a:d8:2e:77:
c8:00:94:28:b9:78:ed:be:43:c2:48:8f:c9:44:c2:a6:d2:71:
60:c6:ef:8b:7f:5e:ba:a6:69:06:6f:5b:6f:10:54:40:4e:da:
e6:1d:6d:48:60:d2:72:2f:ea:fe:5a:ae:fb:a8:bf:c8:43:5d:
5a:28:71:3a:25:18:30:a8:a8:9e:2f:60:93:ce:66:71:28:46:
fc:07:bd:2a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQntWOJ/grsEKiIAncObWnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjUwMTAyMTU0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODYyN2RmNTcxOWEyNjFlZWM5MDExOTBhMTdiZDgwZTVhNDEyZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDCgS4vcvBsNfHw/iIpUUT4UGxaM
oVKaErwmL1Y+N0yGc62jZKq/9JLuWlBSBFr2vQLlG1be6F2+K9cXv+iV67Y+pEOV
1FnHqvgz7OcaBy0DAtgyB/YGu0y9LDihEhqaaacMWBH13RWW7OVE+PtgZxVPfjh9
+EjSLDZAS5u9mvv23VpncJPNCZG0Q+FliVMu/bFjhVvwiIgnGuUkwYYlRMR2fYJx
srPeU2WHnKEt195nwaFUc9RWB+qhq0WfOLYL6aizbNkF9uFiCSi+rogixLltZF+S
xc8zsWFE8r3GFibUivsOK/X/2RECk06SD9hukai/dz1HOi3vPIdxlqVuNQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFhiffVxmiYe7JARkKF72A5aQS1IMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvV0dKOTlYR2FKaDdza0JHUW9YdllEbHBCTFVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKhFXgAMF
AyoSWgADBQMqEoEAMA0GCSqGSIb3DQEBCwUAA4IBAQBUtpAmREJYhnMZ18VVULTM
uq9dfW/bpSoLaYnv+4Y3wf34gSlKsw04gbIWE5AmniZZkJcZzC3Fy1knGrHkq02T
AOVifvD/cOzNyd+XP5lGpNqkGE2sqgvyuHEYuIqlHEulxypLYduDatEI3xDE7WgK
nVZBqIm7hdeA6JBS4KDTsdAvh3cAsD0WBFTnBSW/6xLpw5U9nIGvVrgG8HnRAVCL
kXuMAKfoD8GyltrvbC18tGrYLnfIAJQouXjtvkPCSI/JRMKm0nFgxu+Lf166pmkG
b1tvEFRATtrmHW1IYNJyL+r+Wq77qL/IQ11aKHE6JRgwqKieL2CTzmZxKEb8B70q
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:22:55 2025 by rpki-client