Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Wo7cBKbAs9u8S4SVJ3-l67jGwYM.roa
File: Wo7cBKbAs9u8S4SVJ3-l67jGwYM.roa (raw, json)
Hash identifier: oKk2du3XesafVCaeuT8l0tzTai4bCgh0qNTFPpfoKhU=
Subject key identifier: 5A:8E:DC:04:A6:C0:B3:DB:BC:4B:84:95:27:7F:A5:EB:B8:C6:C1:83
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746F1CD74CD40204C96C34895E3BAB9
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Wo7cBKbAs9u8S4SVJ3-l67jGwYM.roa
Signing time: Thu 02 Jan 2025 13:49:08 +0000
ROA not before: Thu 02 Jan 2025 13:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56876
IP address blocks: 194.233.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:f1:cd:74:cd:40:20:4c:96:c3:48:95:e3:ba:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a8edc04a6c0b3dbbc4b8495277fa5ebb8c6c183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:e6:78:10:c7:12:8d:5c:c8:7e:45:25:a3:
57:10:be:26:27:70:4b:0c:9b:0e:1a:7e:34:1f:0f:
15:d1:7e:33:b1:a3:ec:01:b5:85:29:ac:2f:80:8c:
ca:a6:d2:b3:98:92:a0:8d:b2:2a:fe:52:e8:c1:8a:
93:10:8f:fd:71:cf:ea:83:78:92:65:d1:7d:54:3e:
56:80:0b:cb:ff:93:96:0d:e6:3c:85:f6:94:2e:a2:
62:3e:17:cd:2a:70:7b:36:ee:45:c6:ce:83:3a:b6:
4d:15:82:a5:aa:8f:e9:6c:35:c9:16:d7:68:61:26:
bd:a1:0f:d1:4d:9d:0d:42:73:39:5a:63:4d:33:12:
bf:06:6e:71:c1:c8:bb:63:3f:a4:87:97:68:1c:ca:
a2:1a:bc:7a:b4:c5:3d:cf:ef:9f:aa:3c:ae:0a:ad:
85:97:fe:0a:68:37:48:c0:82:0b:ef:0a:c3:34:de:
67:35:aa:da:77:f8:84:5f:a5:82:03:84:73:dc:75:
e4:82:82:be:3a:36:d2:d1:f3:ce:63:c6:a3:38:8a:
1e:10:c2:30:54:d0:0a:9c:fa:49:87:da:13:da:89:
f2:28:06:f8:87:c3:68:75:85:e0:cb:21:58:41:c5:
fa:f3:b1:e1:6a:28:1c:3d:b6:c8:57:39:ae:00:0b:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8E:DC:04:A6:C0:B3:DB:BC:4B:84:95:27:7F:A5:EB:B8:C6:C1:83
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Wo7cBKbAs9u8S4SVJ3-l67jGwYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.0.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:0e:b4:2b:72:42:a5:82:23:45:55:8d:9c:37:d1:5c:ca:50:
78:5a:0b:5a:a8:cf:11:75:92:3f:87:b6:94:7d:0e:59:14:47:
28:26:37:7b:31:1c:d1:3d:a2:a6:70:ae:2d:8c:8d:4c:b2:b3:
40:16:a5:b5:a8:0b:bc:68:0e:34:c3:f6:aa:a0:78:74:07:3b:
da:2f:8a:0e:5b:bb:f9:1e:b8:95:1c:70:2e:ca:9c:be:e0:2c:
1a:70:de:41:14:d0:1b:2a:b6:93:eb:fb:d5:4a:9e:63:71:0b:
b7:16:ac:be:64:de:8b:01:03:a4:8a:44:f9:a2:cf:a9:ce:8d:
5c:54:7f:cf:cc:96:27:34:62:f8:89:1a:7b:b0:93:b9:b5:00:
a5:2e:23:e1:83:80:9c:62:3a:18:dc:f8:b0:5f:4f:4c:38:72:
24:ef:df:ba:7a:92:4d:b6:e4:ca:5e:27:92:fb:1d:fa:95:2f:
73:73:c1:6a:37:5e:38:f8:2a:50:7b:a6:74:3c:54:7b:47:c0:
e9:57:59:3e:88:a0:96:fb:44:ed:c3:4d:e3:3c:4c:e3:62:31:
5d:65:1d:43:5a:8a:b0:f6:6b:76:22:ba:6f:62:5e:91:3a:f6:
de:b6:66:1a:fe:a4:68:0e:9a:a2:19:ce:b6:7c:7e:84:01:fd:
48:04:5f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:13 2025 by rpki-client