Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/28vwddYYnn-BejsfrgsHjSgfzQ4.roa
File: 28vwddYYnn-BejsfrgsHjSgfzQ4.roa (raw, json)
Hash identifier: UAZDR9r94HPPd9OVOKpoGQIjU2FUXfM+rJVeuMGWG0Y=
Subject key identifier: DB:CB:F0:75:D6:18:9E:7F:81:7A:3B:1F:AE:0B:07:8D:28:1F:CD:0E
Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial: 019652F402E17DC173CAE36104370DAD45F1
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/28vwddYYnn-BejsfrgsHjSgfzQ4.roa
Signing time: Sun 20 Apr 2025 11:27:25 +0000
ROA not before: Sun 20 Apr 2025 11:27:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 185.241.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:f4:02:e1:7d:c1:73:ca:e3:61:04:37:0d:ad:45:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
Validity
Not Before: Apr 20 11:27:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbcbf075d6189e7f817a3b1fae0b078d281fcd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:33:52:be:58:ce:23:48:6b:77:4c:ba:a5:
2c:65:6e:5e:b8:98:97:90:a3:bd:38:a0:49:e2:c1:
58:87:f9:6a:b3:61:e3:ef:26:21:82:ca:8b:80:8b:
87:a5:38:35:5e:76:99:ef:d9:79:ca:d7:86:95:34:
70:48:7a:65:d1:51:a4:67:7f:60:cc:58:07:f4:6f:
04:a9:dc:13:fb:46:25:1b:1e:83:0b:2d:e3:02:e9:
67:4f:0e:25:d8:4d:b9:3e:31:f8:c2:bf:cb:9d:80:
d6:9a:75:2d:89:54:cb:d1:75:4d:b5:c5:12:b4:7a:
d6:88:67:c1:d2:e1:7e:ba:d2:40:d2:ce:e6:9e:6e:
36:be:7e:f0:0e:c3:6e:eb:01:05:61:91:b3:12:0b:
57:db:56:dc:09:36:d5:e5:27:cd:dc:b1:9f:5d:15:
b5:49:a9:5e:95:60:fa:db:93:bb:a8:97:bf:71:0e:
d8:05:2d:17:71:d2:0e:cd:38:b9:be:47:33:27:6f:
bb:79:d2:f0:61:73:9a:f1:07:32:5c:a9:e6:74:cf:
b7:13:c4:0b:0f:37:c0:36:0a:75:41:e3:76:56:95:
8b:86:50:23:35:59:c9:a1:72:ab:2b:78:9e:96:96:
f0:df:63:20:fb:e8:db:8c:1e:c1:5f:df:3f:3f:68:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CB:F0:75:D6:18:9E:7F:81:7A:3B:1F:AE:0B:07:8D:28:1F:CD:0E
X509v3 Authority Key Identifier:
keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/28vwddYYnn-BejsfrgsHjSgfzQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.204.0/24
Signature Algorithm: sha256WithRSAEncryption
02:8c:f8:e4:5b:42:70:1d:02:65:01:d2:ac:24:e9:d0:b8:b7:
5c:5a:ff:34:a5:c0:e2:ef:dd:0a:2a:ec:2d:7e:b6:2c:61:28:
f5:57:d9:35:ee:4b:b7:47:04:2f:79:a7:1d:80:bd:80:57:fa:
c2:87:9e:35:8c:2b:c3:99:c4:3f:df:46:58:e4:be:9c:56:fa:
c3:d1:76:1c:1b:e8:a4:8a:67:fa:37:ca:5c:d0:78:71:75:c1:
bb:6c:80:1b:2c:1a:21:19:a2:cb:29:6e:b5:63:c4:85:3e:a9:
8d:64:ff:58:56:1a:97:de:f1:f4:a4:d1:c2:0b:c6:d7:09:42:
08:ef:d1:24:b5:55:16:f1:f6:c2:4e:34:48:0a:09:d4:83:d0:
69:71:d3:b6:33:46:4f:cc:94:7a:72:09:cc:53:d1:5d:d0:e3:
55:b8:e2:d0:e5:2f:92:32:ae:35:cd:2f:e2:9e:54:7c:35:a0:
08:e2:e3:80:c9:7e:20:72:b9:d6:99:d5:c2:14:ec:6a:d3:a4:
e9:d9:e7:ed:a2:37:01:04:f2:ee:68:a4:91:8e:23:c5:98:b8:
28:35:2d:84:1b:64:0b:f8:d4:c6:df:cf:0e:25:8f:d4:da:01:
84:d3:d8:ca:ac:a1:bf:83:b9:92:36:df:ff:ac:83:0f:14:66:
c8:8e:6a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:11:14 2025 by rpki-client