Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/WBeAt2UOvPgAdfpllYF8DBrXsx8.roa
File: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (raw, json)
Hash identifier: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=
Subject key identifier: 58:17:80:B7:65:0E:BC:F8:00:75:FA:65:95:81:7C:0C:1A:D7:B3:1F
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 019427B58DA4F861948758B4290F4F47254D
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/WBeAt2UOvPgAdfpllYF8DBrXsx8.roa
Signing time: Thu 02 Jan 2025 15:49:57 +0000
ROA not before: Thu 02 Jan 2025 15:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202492
IP address blocks: 185.162.88.0/24 maxlen: 24
185.162.90.0/23 maxlen: 24
185.165.152.0/23 maxlen: 24
185.165.155.0/24 maxlen: 24
185.170.128.0/24 maxlen: 24
185.170.130.0/24 maxlen: 24
185.172.36.0/23 maxlen: 24
185.174.41.0/24 maxlen: 24
185.174.42.0/23 maxlen: 24
185.175.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8d:a4:f8:61:94:87:58:b4:29:0f:4f:47:25:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=581780b7650ebcf80075fa6595817c0c1ad7b31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:73:03:e3:8d:c3:48:f6:b1:46:5c:3a:d2:
a3:2b:16:0f:ae:0f:93:89:b8:92:f7:98:02:0e:6b:
ca:af:b9:d0:98:cc:9f:95:24:09:1a:96:d2:aa:b1:
4b:81:0b:a9:85:c9:c5:81:85:42:b3:60:a9:a0:7e:
cb:cf:0c:9d:00:e3:2f:d7:27:cd:7c:06:45:47:56:
da:37:fa:50:e7:c1:32:06:fc:02:ac:37:81:7e:16:
dd:e6:a4:e4:b8:e3:00:6f:2e:ca:a4:f9:f3:47:4c:
e5:91:43:f4:f6:04:d4:56:ae:13:67:df:b4:6c:9d:
2d:06:85:05:18:01:f1:1f:14:1f:64:53:8a:da:68:
f9:e9:fd:da:b4:9d:fc:52:4a:2c:95:d3:2f:6f:60:
bc:35:10:71:10:a2:a7:70:56:9a:4b:3a:63:95:56:
9c:6b:39:cd:7c:96:c8:cc:b0:cc:88:81:dd:bf:8f:
fa:d7:51:cf:5e:9f:c2:53:ad:f0:89:af:29:ec:13:
dc:e6:8f:84:7a:e4:35:fc:c5:10:da:2e:cd:c4:1d:
c7:11:fe:7c:ba:11:57:34:f4:e2:b8:36:c5:f2:a0:
82:14:b4:55:ca:f1:a5:bf:b1:f8:08:f5:c5:97:67:
2c:85:d8:c6:40:09:a7:56:7c:97:52:61:ed:2e:43:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:17:80:B7:65:0E:BC:F8:00:75:FA:65:95:81:7C:0C:1A:D7:B3:1F
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/WBeAt2UOvPgAdfpllYF8DBrXsx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.88.0/24
185.162.90.0/23
185.165.152.0/23
185.165.155.0/24
185.170.128.0/24
185.170.130.0/24
185.172.36.0/23
185.174.41.0-185.174.43.255
185.175.164.0/22
Signature Algorithm: sha256WithRSAEncryption
22:bf:71:f7:76:d5:09:81:12:89:03:de:08:ff:95:33:79:67:
f7:1a:6c:00:f5:4f:e0:3b:81:23:8d:aa:c5:64:4c:63:bc:41:
c8:05:9e:c3:10:2b:25:e5:1f:85:59:76:0b:36:28:16:cb:cc:
fc:96:ce:e3:6c:a7:8b:32:6a:af:bf:38:57:61:74:ad:05:92:
b4:95:4b:f6:48:e8:3a:30:04:a2:d0:67:6b:91:4b:b4:a3:4b:
92:4a:ca:dd:cb:99:14:e8:47:fb:13:bb:e5:5a:7a:a9:a8:57:
23:38:f3:af:02:5c:05:e4:e6:ff:e5:e4:ea:1b:48:c7:05:c8:
53:9d:e0:39:fd:e9:20:01:2a:55:06:ce:1f:e5:c2:63:30:31:
ca:1d:1a:45:75:16:d3:d0:bc:da:e6:f3:20:31:22:ce:b1:14:
15:21:17:a3:5e:3a:4c:5e:2a:93:2e:da:72:a4:da:cc:cc:49:
bf:c2:32:1c:ce:32:6d:07:73:c8:27:4f:99:de:09:e7:3a:90:
bb:77:40:50:35:4f:64:2e:71:fa:83:73:7b:be:af:34:b0:c8:
07:44:0f:3b:64:25:a0:7e:33:15:03:e1:41:db:62:bb:2a:d7:
65:44:42:df:fa:e7:16:1f:71:8d:cb:e7:2e:84:58:9b:46:ef:
11:11:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 20:44:32 2025 by rpki-client