Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/WibstNWW6k-lvYl4Qh5sNtmSYhw.roa
File: WibstNWW6k-lvYl4Qh5sNtmSYhw.roa (raw, json)
Hash identifier: E/2K/0j7Ly/9Z6jM3FsBVp9MBphb1aZ9lSBmqs0GOgs=
Subject key identifier: 5A:26:EC:B4:D5:96:EA:4F:A5:BD:89:78:42:1E:6C:36:D9:92:62:1C
Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial: 0196BB1272042757013A6D53950F7E9ED281
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/WibstNWW6k-lvYl4Qh5sNtmSYhw.roa
Signing time: Sat 10 May 2025 16:41:10 +0000
ROA not before: Sat 10 May 2025 16:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213499
IP address blocks: 194.242.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:12:72:04:27:57:01:3a:6d:53:95:0f:7e:9e:d2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Validity
Not Before: May 10 16:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a26ecb4d596ea4fa5bd8978421e6c36d992621c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:f4:c4:c8:49:86:92:c8:71:2c:78:04:44:
3f:f1:b6:54:52:68:79:e4:bf:70:c9:30:05:8a:24:
bb:43:3b:ef:03:de:ce:6e:e0:a5:b0:3e:f6:07:b2:
39:bc:5e:b9:99:7e:44:72:cc:a6:52:51:0e:ec:89:
1c:c8:9a:26:42:e1:d9:3e:9d:10:88:57:b5:a7:3b:
2b:41:7f:9b:5e:86:14:60:32:3e:b7:12:fd:a2:7c:
2d:c8:12:7b:6c:83:f3:29:a0:7c:dc:b0:2e:ea:f1:
06:a8:85:e9:a7:6d:82:d8:9d:28:81:62:5b:4e:5b:
a3:25:7e:19:15:cf:92:a7:7a:90:17:d5:15:ec:45:
73:d5:24:c7:6b:99:93:0a:37:e9:60:3c:78:d1:90:
3b:28:a5:b8:18:d6:d9:8f:93:3f:8e:b9:98:e1:94:
b4:1e:c7:55:9e:d7:6e:7f:4f:7c:bb:13:6d:68:55:
ae:fc:22:6e:6b:64:82:29:ef:98:67:c8:c1:da:30:
55:e4:98:63:99:89:e3:a4:3a:bb:ef:15:03:f9:03:
a6:d5:21:05:7b:7d:2d:d8:d5:e3:ca:fb:35:57:4b:
e4:35:73:32:4d:68:e8:1c:3d:76:b4:3b:dc:28:12:
03:48:97:50:84:0c:9b:dc:9f:a0:38:b0:8f:f0:4c:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:26:EC:B4:D5:96:EA:4F:A5:BD:89:78:42:1E:6C:36:D9:92:62:1C
X509v3 Authority Key Identifier:
keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/WibstNWW6k-lvYl4Qh5sNtmSYhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.6.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:fb:41:af:74:d6:ec:42:b9:a9:ae:63:16:91:ed:cd:36:5f:
81:e8:c7:b7:86:9b:10:19:15:73:28:a6:24:12:f5:f8:3d:10:
c8:22:2a:1a:19:c2:fe:01:69:00:c6:e4:75:24:df:97:53:b1:
41:ff:5a:20:ad:e4:37:71:6b:61:68:8b:15:cc:a9:db:f8:88:
d5:10:34:a1:f4:e7:0d:9f:58:17:a1:86:93:b0:96:33:a7:47:
c3:d0:67:bc:05:3b:b2:0c:86:37:a6:ab:75:f7:a1:1a:94:e4:
19:4d:88:09:e8:df:56:89:93:72:e3:c8:ea:ad:e6:e4:56:9a:
6f:f1:3b:1a:b1:b2:db:3d:9b:42:ae:fb:94:00:fb:23:88:7d:
20:ba:18:99:75:85:cd:08:e2:33:ac:e1:8a:57:a2:cf:c2:b1:
a4:57:da:23:0e:8f:7f:ac:e8:ae:c9:50:79:93:03:14:f5:f7:
b6:b5:df:a4:8f:11:17:f3:ca:da:7f:32:7d:9d:6d:a5:7b:81:
51:42:09:1e:c4:06:90:34:75:d5:83:03:18:c1:cf:11:d6:c8:
2b:f0:20:6f:62:72:1b:1d:62:da:20:ca:b3:1e:36:77:58:2b:
2e:03:b0:98:d1:85:a6:52:6d:05:8e:af:b4:9c:c2:c2:70:a1:
52:14:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:45:08 2025 by rpki-client