Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WY-LIzz8YOkUDfvCdTpjGOalvhw.roa
File: WY-LIzz8YOkUDfvCdTpjGOalvhw.roa (raw, json)
Hash identifier: d3dGwTO4i6ikQdUoN3c6nn9PTo1ndnv7DIcWgPudIUs=
Subject key identifier: 59:8F:8B:23:3C:FC:60:E9:14:0D:FB:C2:75:3A:63:18:E6:A5:BE:1C
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143FBD87D6A6F54227ED41825833D6F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WY-LIzz8YOkUDfvCdTpjGOalvhw.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41718
IP address blocks: 195.216.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fb:d8:7d:6a:6f:54:22:7e:d4:18:25:83:3d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=598f8b233cfc60e9140dfbc2753a6318e6a5be1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:cd:6d:28:8c:19:c7:25:00:73:1c:5f:7c:
61:d0:30:de:a9:9d:ed:82:e2:d7:01:30:20:95:47:
25:75:97:3a:b5:24:01:29:84:5f:e0:ef:56:9f:9d:
fa:30:85:82:52:36:1e:e9:77:77:12:fb:c2:e6:51:
87:40:bc:14:33:76:28:3d:bf:1e:44:15:fa:c1:b6:
19:c4:86:01:a9:34:8a:6d:89:5f:72:f2:54:c0:b0:
8b:09:26:4c:0c:09:14:fc:16:92:03:be:06:59:85:
f8:89:0d:3e:f0:7f:c8:65:6d:2a:14:96:34:33:46:
bb:69:7f:83:54:0e:47:8d:c9:4c:a8:85:ff:7c:27:
b9:dd:f9:87:69:42:7c:2e:e3:c0:4f:0e:24:4f:70:
1d:78:b7:42:66:80:62:d9:08:39:88:a3:5c:0b:72:
c6:bd:58:90:ce:ac:ac:4f:12:fa:c3:b2:9e:40:d5:
53:c7:b3:d0:f3:9e:d1:d1:68:b8:7a:8e:55:77:d3:
8b:b7:4e:bb:bb:db:cb:94:9c:13:c4:89:af:1d:4e:
0c:cd:22:d8:83:3f:61:7e:cd:8d:d7:62:85:a1:d4:
4f:d4:61:a1:73:47:29:61:fe:f6:18:cf:6e:29:fd:
81:b7:d6:e0:26:e5:36:21:63:c7:a6:4c:61:98:22:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8F:8B:23:3C:FC:60:E9:14:0D:FB:C2:75:3A:63:18:E6:A5:BE:1C
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WY-LIzz8YOkUDfvCdTpjGOalvhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.153.0/24
Signature Algorithm: sha256WithRSAEncryption
75:aa:f8:38:18:c6:cd:9e:9f:68:12:77:30:45:9b:82:12:ea:
b6:ba:44:07:4f:49:71:38:a7:99:45:ab:e4:ec:e9:80:a6:8e:
6e:a4:61:c4:54:13:d5:5e:6f:e9:5a:5e:f2:94:cb:31:be:cd:
24:b1:d7:3c:4c:ab:83:35:dd:af:ef:18:db:ab:ba:e9:dc:6b:
79:b8:79:2d:c9:50:4b:05:aa:9a:08:5a:71:11:a8:79:ff:09:
6c:0f:2c:eb:ef:b3:83:22:b6:03:60:40:dc:67:88:a2:84:b0:
e2:52:2e:36:6f:bc:84:09:a1:c0:8f:e2:c3:4e:6f:e2:47:f6:
2d:4b:e3:b1:4f:c2:aa:3e:da:d7:9b:d8:40:f6:d0:56:4c:49:
10:6c:80:39:32:50:6c:00:ea:4e:64:b7:88:f8:f7:b8:a8:5d:
9e:47:ab:b8:ee:d7:ab:e0:4c:a3:19:d1:c6:8b:1d:14:44:c2:
75:b1:b6:dc:42:30:94:73:0a:e5:c7:e5:41:6f:31:bd:63:99:
6d:93:7a:d8:4a:2a:ac:8a:82:e5:ea:4d:da:62:b8:33:a1:e8:
20:35:ec:60:7d:5d:5c:b3:13:0f:a3:d1:ac:f0:77:a4:ff:19:
60:40:2f:98:b0:5a:73:8b:2e:3b:68:9a:b7:07:f0:d3:82:32:
33:a7:93:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:38:26 2025 by rpki-client