Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/wj466oTxwmfvmkHt-zRaSV43cC0.roa
File: wj466oTxwmfvmkHt-zRaSV43cC0.roa (raw, json)
Hash identifier: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=
Subject key identifier: C2:3E:3A:EA:84:F1:C2:67:EF:9A:41:ED:FB:34:5A:49:5E:37:70:2D
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019420680E259F6ED96CCD01715958067809
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/wj466oTxwmfvmkHt-zRaSV43cC0.roa
Signing time: Wed 01 Jan 2025 05:47:57 +0000
ROA not before: Wed 01 Jan 2025 05:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 93.174.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0e:25:9f:6e:d9:6c:cd:01:71:59:58:06:78:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c23e3aea84f1c267ef9a41edfb345a495e37702d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:45:b8:ba:6c:2c:e3:8f:53:fd:fe:ff:7c:
fb:10:e8:0d:10:76:9e:cb:5d:15:cb:e9:5e:34:b2:
a7:90:cc:a2:0f:ad:57:53:c0:ed:c5:eb:e4:58:73:
a3:68:d4:fa:6c:aa:c4:56:94:49:57:42:ee:ae:42:
85:c4:b2:a7:f6:dd:6c:03:10:31:4f:97:f4:97:60:
62:8b:1b:36:1a:4a:16:a1:42:01:9c:a0:da:35:0b:
95:fd:68:aa:0e:b7:c3:16:13:eb:d4:49:f9:43:99:
5c:04:92:95:8a:b4:8f:9b:1b:31:26:0e:09:3f:5c:
88:dd:84:93:9e:1f:48:ac:41:3a:e5:01:fb:61:5d:
92:85:74:61:08:40:e4:ca:a9:e7:f6:5e:de:0d:3d:
63:54:ce:4f:04:aa:a8:db:0b:4b:d5:3f:25:9c:3c:
0d:71:9c:ef:ea:f0:f2:ad:97:36:07:ca:13:1e:62:
13:4d:5b:01:2c:77:11:67:16:d1:f6:af:28:7f:e0:
5c:17:e2:43:aa:34:1e:57:3c:72:e5:dd:95:11:e9:
d6:df:f0:b9:5c:c8:5d:32:2d:0b:72:a9:98:2f:e2:
54:4b:0b:1b:68:57:23:91:fe:da:8d:74:69:c2:ab:
0b:c4:6c:f6:6d:41:fd:90:68:ca:9b:33:db:d7:3b:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3E:3A:EA:84:F1:C2:67:EF:9A:41:ED:FB:34:5A:49:5E:37:70:2D
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/wj466oTxwmfvmkHt-zRaSV43cC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.96.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f0:85:55:93:91:c6:41:d9:5d:ee:03:39:ce:3f:5e:57:ef:
b6:0a:3f:cc:25:6b:b0:72:e7:52:99:51:98:31:9a:07:b0:bc:
c7:b0:ee:a9:dc:f0:5b:f8:19:5c:25:64:09:8f:e9:00:88:3c:
a7:9b:25:47:d2:16:19:39:06:75:3c:0a:28:1c:5e:8c:c4:b1:
18:f0:4d:51:ea:12:9a:1a:20:8c:3f:ec:0f:bb:c8:81:85:40:
a4:9d:a6:89:e6:2f:9b:7b:8d:f5:11:2b:a4:6b:e4:7a:4a:c2:
ae:62:0d:6e:f3:18:ed:eb:ae:8e:c3:7e:90:51:04:b8:83:b6:
dd:fe:0c:65:f1:f7:e6:94:6a:4b:7a:67:5e:5d:2b:c9:67:71:
8b:ba:35:e4:7c:0b:98:c4:a8:2a:bf:e4:2f:4c:ce:83:8c:3e:
b9:ed:30:49:71:95:f6:9f:18:89:73:97:9c:31:6b:e9:b6:00:
47:7e:f6:41:d0:4f:04:a8:3b:8c:48:c4:0e:53:e3:cd:aa:a9:
08:83:58:3f:c5:95:52:c6:e7:7b:12:ae:57:52:b4:93:34:53:
e7:2f:30:c8:ea:11:98:4a:0a:cb:68:8b:01:8e:58:40:d0:f7:
0c:dd:d5:54:8c:24:80:40:c4:58:ea:33:88:76:b9:4b:5a:94:
1c:82:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:08 2025 by rpki-client