Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/wrTzzYkG5LOMXtKZWk2jBf3LA_Y.roa
File: wrTzzYkG5LOMXtKZWk2jBf3LA_Y.roa (raw, json)
Hash identifier: 45WK1sV6GaRDvSfuryou71nLUkmNtAjtTqBWp6wTaJI=
Subject key identifier: C2:B4:F3:CD:89:06:E4:B3:8C:5E:D2:99:5A:4D:A3:05:FD:CB:03:F6
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01941F8C624CFC5CB4F2E4080AC7E0449744
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/wrTzzYkG5LOMXtKZWk2jBf3LA_Y.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 147.185.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:62:4c:fc:5c:b4:f2:e4:08:0a:c7:e0:44:97:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2b4f3cd8906e4b38c5ed2995a4da305fdcb03f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:33:22:a6:ea:f5:c3:d1:ee:9a:56:50:15:
1c:47:47:7b:5b:33:ef:b5:4e:ee:79:88:81:8e:3a:
59:07:bc:2d:7b:98:e7:a9:a3:fd:0a:ba:0b:39:85:
d2:1b:3b:b3:f7:76:5e:ef:b4:32:2f:ba:67:73:a8:
90:c2:48:ed:6a:fa:89:86:51:7e:e1:61:ff:42:e8:
eb:ba:33:26:88:0e:eb:d2:0b:11:43:31:4b:17:5a:
06:36:c5:ae:5d:13:14:04:f9:b3:8f:40:7e:24:92:
e7:09:1c:0d:5e:a7:6e:2a:b7:30:c3:aa:e1:b2:f9:
e2:a3:0f:ff:c8:2d:55:38:e2:af:40:ce:86:2b:c5:
5d:0b:69:ab:f1:dd:a8:f0:86:42:65:6a:7f:7e:47:
73:e9:dd:78:43:8a:08:b8:c0:2f:d8:66:c5:16:eb:
20:82:56:8a:8a:65:b1:99:d5:e2:ab:68:01:2e:65:
38:8d:47:51:06:67:88:00:d7:30:d1:ae:b3:c6:5b:
6c:f6:54:f2:8f:40:f8:96:a1:6a:56:cb:bd:85:b9:
cf:6f:e2:a6:b1:13:b3:d6:db:1a:fd:17:a9:ba:fb:
58:4f:fa:a0:21:93:25:a3:d0:2b:dd:1b:59:5d:62:
15:eb:67:89:65:be:88:ba:d3:fd:38:bc:e8:77:5f:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:F3:CD:89:06:E4:B3:8C:5E:D2:99:5A:4D:A3:05:FD:CB:03:F6
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/wrTzzYkG5LOMXtKZWk2jBf3LA_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.107.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b5:74:72:44:9d:67:4c:ea:4c:c0:47:db:fc:a3:3c:58:ca:
df:27:01:8b:72:67:51:05:b1:6f:26:53:46:fb:c2:af:97:9c:
ba:93:8a:6c:58:df:56:e4:e5:d3:57:f1:a8:97:f1:c7:b4:68:
77:7f:27:2b:d5:f6:6f:d8:83:d0:4d:bb:82:57:4c:6f:aa:5a:
f4:1f:b8:47:77:42:5b:da:ee:f3:92:c0:a0:67:cd:60:27:75:
72:02:65:ab:22:e1:21:54:e2:ef:1b:f4:85:9b:bb:21:cb:71:
f5:9c:16:4c:a5:b9:57:d5:7d:5b:a7:3c:fb:4c:7f:6e:7b:27:
00:df:20:15:b0:6d:6c:29:4c:27:15:68:b2:57:a8:fd:dc:14:
5a:0c:de:26:91:39:e2:1d:79:9c:95:ab:9f:23:91:85:e9:45:
47:ea:0f:ce:77:b6:6c:81:d7:97:12:df:9e:29:09:b1:34:63:
d6:bb:d2:9b:66:1f:bb:91:22:75:27:89:e9:2b:57:ca:5e:48:
43:cf:c9:eb:8d:81:44:51:2d:0b:e0:2d:3b:45:bc:df:24:0f:
ee:10:bd:56:e2:f2:73:7e:ac:e6:a6:0e:49:8d:72:1c:68:b8:
46:2d:9a:01:fb:05:88:6d:76:e0:fb:cd:b6:41:f5:6f:80:ea:
00:a6:b6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:19:12 2025 by rpki-client