Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/wacKSVeFcrTyL4jcOjnOwrcddYQ.roa
File: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (raw, json)
Hash identifier: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=
Subject key identifier: C1:A7:0A:49:57:85:72:B4:F2:2F:88:DC:3A:39:CE:C2:B7:1D:75:84
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 01961AC4432D018898AE03E43EAB7F2846DA
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/wacKSVeFcrTyL4jcOjnOwrcddYQ.roa
Signing time: Wed 09 Apr 2025 13:36:31 +0000
ROA not before: Wed 09 Apr 2025 13:36:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 109.107.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:c4:43:2d:01:88:98:ae:03:e4:3e:ab:7f:28:46:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Apr 9 13:36:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1a70a49578572b4f22f88dc3a39cec2b71d7584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:71:9b:d5:2b:a3:65:f5:8f:aa:9f:eb:56:
c9:0a:92:e5:3f:ee:29:11:51:9d:59:44:07:c0:69:
15:4a:d0:88:99:01:f5:60:45:f5:2d:b1:cd:d5:86:
be:1c:95:23:0e:a1:02:b5:4e:bf:ac:18:7b:0b:78:
87:31:64:8f:62:7e:1d:1a:ab:d4:30:6e:99:7d:96:
d5:1d:72:77:d3:11:4f:9d:fd:25:43:3e:5a:72:b2:
eb:51:b2:74:36:11:a1:75:05:a9:58:6d:f5:08:d3:
81:b0:d4:9b:bc:2f:5c:45:5c:6c:02:1a:38:0f:3f:
48:8c:9e:fd:64:23:ce:c6:23:5d:fb:41:b3:bd:b4:
20:b6:6d:6c:a8:7e:a3:90:e9:a2:f6:d1:3a:ad:ed:
02:1a:60:16:ec:12:3f:dd:e5:52:af:23:02:e1:7d:
36:15:60:90:8c:b9:48:cb:4c:03:b6:ce:6a:7a:b8:
4f:aa:c6:90:c0:0b:2a:4a:b6:8a:89:e5:4b:f0:19:
a5:e1:4a:c8:4a:74:0e:89:c0:39:bb:00:c0:dd:90:
c9:7f:a4:41:e2:ff:5f:8a:8a:53:07:6b:da:e6:90:
cf:19:6f:67:5c:28:f8:a1:57:27:9b:75:59:8a:42:
79:50:e1:cc:1f:64:3f:72:73:f9:ad:0e:f1:39:99:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A7:0A:49:57:85:72:B4:F2:2F:88:DC:3A:39:CE:C2:B7:1D:75:84
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/wacKSVeFcrTyL4jcOjnOwrcddYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3f:91:bd:ba:9c:c1:ea:75:7b:29:77:5b:ef:8e:23:c5:08:
27:19:76:91:0d:63:ac:8b:05:c4:77:a7:62:2f:5b:82:bf:f9:
bf:1c:f9:32:76:ed:76:f8:3c:b2:0f:e9:3a:4b:c7:fd:73:f8:
f5:d9:ea:2c:ea:cd:3c:a7:14:2a:0d:fc:2c:5a:61:6b:d0:9d:
a9:d9:df:e5:2c:0d:4d:e0:0b:07:9f:ef:91:e6:9e:bb:94:15:
6e:9b:6e:bb:03:f0:73:0d:eb:64:bd:19:d3:e8:59:b2:34:09:
a8:68:13:2d:bf:c2:94:2f:00:dd:cd:88:c6:0c:c7:c0:d1:a9:
2d:9a:17:c8:ae:c4:05:5f:a2:6a:ae:85:db:ba:62:7a:42:7b:
a4:06:2a:0e:5c:78:17:95:a4:5c:dd:eb:59:d3:51:97:db:2d:
af:f1:3d:21:83:9e:4d:c5:26:27:b8:49:0a:21:0f:00:a3:a1:
cd:79:29:71:8b:83:b5:fd:23:65:1d:44:d9:a3:8f:56:2c:56:
57:75:95:79:d0:4b:96:fe:43:25:87:5d:6c:d3:af:df:7d:05:
4d:fb:87:11:52:5f:88:d5:55:33:45:36:e3:b9:23:e0:4d:6a:
f3:53:b1:f0:ab:46:07:9f:33:65:32:c5:63:4c:af:3d:68:3e:
71:74:4f:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYaxEMtAYiYrgPkPqt/KEbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4
ZmU0NTYwHhcNMjUwNDA5MTMzNjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWE3MGE0OTU3ODU3MmI0ZjIyZjg4ZGMzYTM5Y2VjMmI3MWQ3NTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB9xm9Uro2X1j6qf61bJCpLlP+4p
EVGdWUQHwGkVStCImQH1YEX1LbHN1Ya+HJUjDqECtU6/rBh7C3iHMWSPYn4dGqvU
MG6ZfZbVHXJ30xFPnf0lQz5acrLrUbJ0NhGhdQWpWG31CNOBsNSbvC9cRVxsAho4
Dz9IjJ79ZCPOxiNd+0GzvbQgtm1sqH6jkOmi9tE6re0CGmAW7BI/3eVSryMC4X02
FWCQjLlIy0wDts5qerhPqsaQwAsqSraKieVL8Bml4UrISnQOicA5uwDA3ZDJf6RB
4v9fiopTB2va5pDPGW9nXCj4oVcnm3VZikJ5UOHMH2Q/cnP5rQ7xOZlvDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMGnCklXhXK08i+I3Do5zsK3HXWEMB8GA1UdIwQY
MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt
ZGVlM2VkNDk3YWVlLzEvd2FjS1NWZUZjclR5TDRqY09qbk93cmNkZFlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl
LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuoMA0G
CSqGSIb3DQEBCwUAA4IBAQCdP5G9upzB6nV7KXdb744jxQgnGXaRDWOsiwXEd6di
L1uCv/m/HPkydu12+DyyD+k6S8f9c/j12eos6s08pxQqDfwsWmFr0J2p2d/lLA1N
4AsHn++R5p67lBVum267A/BzDetkvRnT6FmyNAmoaBMtv8KULwDdzYjGDMfA0akt
mhfIrsQFX6JqroXbumJ6QnukBioOXHgXlaRc3etZ01GX2y2v8T0hg55NxSYnuEkK
IQ8Ao6HNeSlxi4O1/SNlHUTZo49WLFZXdZV50EuW/kMlh11s06/ffQVN+4cRUl+I
1VUzRTbjuSPgTWrzU7Hwq0YHnzNlMsVjTK89aD5xdE+t
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:05:38 2025 by rpki-client