Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CWVCa1KnldBFUejP072FocQTifA.roa
File: CWVCa1KnldBFUejP072FocQTifA.roa (raw, json)
Hash identifier: lbhgdAIxrRTaV4ozgtEHUe9wKTG8TomSc5DZOLuvDEU=
Subject key identifier: 09:65:42:6B:52:A7:95:D0:45:51:E8:CF:D3:BD:85:A1:C4:13:89:F0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194282502B1D5BFA2431692CE329E9188D4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CWVCa1KnldBFUejP072FocQTifA.roa
Signing time: Thu 02 Jan 2025 17:51:41 +0000
ROA not before: Thu 02 Jan 2025 17:51:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206728
IP address blocks: 193.124.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:02:b1:d5:bf:a2:43:16:92:ce:32:9e:91:88:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0965426b52a795d04551e8cfd3bd85a1c41389f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:89:1e:db:80:df:7b:2e:02:d3:39:1a:05:
7d:78:7a:11:1f:95:1f:3a:5c:26:06:61:54:ac:9f:
3f:51:5e:d8:7a:b8:07:8c:f8:f2:08:67:b0:76:62:
7e:f9:bb:9f:b2:bb:77:b7:27:a4:a4:c5:4d:2e:b8:
90:04:13:f2:a9:7f:4e:f6:6b:35:0c:4b:ef:96:cb:
0e:7c:ed:2d:b3:0a:75:7c:20:5b:0d:b0:1d:ac:80:
71:6b:f7:fd:d9:f7:e2:24:ec:69:91:b4:3a:38:a4:
5e:e6:ce:66:79:ee:10:b0:6b:5e:c7:0a:47:12:4d:
6f:74:72:36:3d:0e:18:12:b1:00:c1:68:b9:e5:5b:
19:ec:6d:34:1b:53:82:84:df:2f:78:15:29:88:a9:
f3:10:c8:20:52:7c:13:70:e1:77:28:0b:b5:66:45:
39:3f:98:15:73:cb:0b:5e:b5:45:ac:82:ea:dc:2c:
bc:75:5b:5d:9a:6e:4c:48:e6:87:a5:24:8d:67:2e:
62:d2:1c:77:f3:33:d5:fc:b1:c1:ea:b3:d3:50:47:
fb:4e:fc:40:28:05:b3:a4:b3:aa:ea:9b:c7:b8:6f:
37:2b:34:f7:29:39:4d:e4:3c:a6:4a:f2:7a:6b:b8:
f9:54:a5:16:0a:64:d6:1b:f8:3d:5d:92:f5:cc:15:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:65:42:6B:52:A7:95:D0:45:51:E8:CF:D3:BD:85:A1:C4:13:89:F0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CWVCa1KnldBFUejP072FocQTifA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
65:74:9d:87:e6:0e:2c:b7:c1:bb:16:15:ae:ce:80:7f:d9:6d:
9f:66:21:c6:6f:ca:ca:99:e5:96:d7:7b:20:85:80:3b:07:36:
7c:eb:29:b7:93:7b:42:29:a9:9e:9d:af:a6:a2:7a:0a:a0:e5:
e4:85:ca:e2:81:2d:e8:93:06:31:b7:31:66:02:24:0e:57:82:
7f:20:40:fa:8b:c7:03:4b:17:a0:6e:f0:c7:21:19:f5:93:31:
b2:9e:e2:48:f7:60:16:f2:a5:eb:7a:3d:1c:1c:83:fc:a4:72:
bc:3e:49:fd:51:a4:98:32:65:ce:76:66:2f:b7:26:2a:f0:64:
ae:39:37:5f:eb:eb:d3:c1:ac:2b:5a:24:ff:45:f7:ab:4e:1b:
3c:2d:81:99:d3:02:17:15:61:b7:27:da:58:af:a7:43:39:12:
a2:ee:8c:d4:8d:36:b0:b2:d2:21:9a:54:27:82:fe:aa:db:35:
9a:6b:f8:3a:68:27:79:85:98:20:41:6e:06:aa:ab:50:b8:f3:
3d:bb:8f:c7:09:3d:ce:94:04:9b:cd:ad:d3:21:cd:34:06:be:
f7:b2:1e:6e:f7:d6:ca:f4:c9:22:55:52:1d:58:6e:47:3e:71:
8c:6b:e4:21:d8:f0:f6:12:5d:da:c1:2a:d6:5b:ae:ea:c5:21:
25:8e:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:48 2025 by rpki-client