Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wBJyWsYbg5aEC3h1afJu0rFt0wY.roa
File: wBJyWsYbg5aEC3h1afJu0rFt0wY.roa (raw, json)
Hash identifier: H2AEXvCQQ92dKizooqjFWZjWA/KEkrnttt3To5snb1Y=
Subject key identifier: C0:12:72:5A:C6:1B:83:96:84:0B:78:75:69:F2:6E:D2:B1:6D:D3:06
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428249825DA8B095F39EAED30F332FA03
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wBJyWsYbg5aEC3h1afJu0rFt0wY.roa
Signing time: Thu 02 Jan 2025 17:51:14 +0000
ROA not before: Thu 02 Jan 2025 17:51:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 87.121.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:98:25:da:8b:09:5f:39:ea:ed:30:f3:32:fa:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c012725ac61b8396840b787569f26ed2b16dd306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3f:8b:8a:65:db:2a:f9:6f:93:83:4f:18:5d:
8b:c5:fc:95:59:2a:97:0d:52:91:0a:30:f8:4d:2d:
1d:48:e9:fe:b4:a7:26:33:6f:41:0a:be:10:bb:5f:
d0:6d:6a:ac:29:db:44:86:22:1c:a6:31:f3:d8:43:
3b:10:75:4f:d4:86:f2:fd:58:d7:2a:0b:94:80:64:
18:3f:4e:68:2a:a6:ca:cb:2a:31:f4:fe:98:cd:43:
d8:6f:a4:55:9d:1e:c2:17:ad:6c:2a:c0:3b:aa:a5:
a7:57:59:8f:05:c3:88:5c:2f:24:39:40:49:f7:3a:
06:b0:08:66:aa:be:13:65:f5:0c:0c:73:2f:2a:b9:
a5:8f:8f:c6:84:5d:cb:3b:80:bd:11:a3:fb:e3:35:
8c:1e:8d:5b:2a:e8:56:fe:c1:d2:9e:de:1e:cf:ad:
c4:2c:fe:2d:db:1d:9d:7b:32:86:0e:ef:f3:c0:16:
b3:11:ff:35:af:d5:b9:18:ea:00:01:a5:98:3f:25:
9f:f2:86:45:90:56:ee:3e:f7:fa:cb:bf:d3:69:43:
76:f9:01:62:67:c8:f6:cf:ec:56:0d:e1:87:94:13:
67:df:a5:c0:c1:e4:94:da:42:9a:33:cc:5c:d3:a6:
39:df:6f:5f:dd:76:51:9a:64:71:3a:cb:67:6b:31:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:12:72:5A:C6:1B:83:96:84:0B:78:75:69:F2:6E:D2:B1:6D:D3:06
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wBJyWsYbg5aEC3h1afJu0rFt0wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.147.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c1:2d:07:06:df:eb:5b:b7:c9:2c:3f:43:e9:72:90:39:1c:
8e:76:7c:88:9f:61:56:00:51:95:a0:39:79:dd:8d:6f:e1:10:
24:51:db:53:ca:48:87:97:fd:f9:b0:2f:f6:c9:06:d8:ce:47:
a2:82:fb:e3:6b:0a:82:8d:ee:fe:d6:f4:2d:5d:5e:ab:a0:db:
1b:54:e3:ea:2b:77:cc:4c:a8:83:89:fa:5a:84:4f:2a:bc:fa:
6a:29:50:3e:14:27:e5:32:e0:df:5c:90:e3:3b:b9:aa:a9:ba:
ed:30:38:39:b5:23:42:65:52:af:58:ba:d8:a0:2d:f2:87:25:
df:83:18:97:7e:30:d2:a9:60:05:3e:ee:d0:4e:52:11:4c:ab:
17:aa:4f:35:75:6b:0a:5f:6b:fd:60:7c:0f:01:6d:75:37:99:
ed:b3:8d:07:23:49:c4:d7:81:e4:80:36:19:99:26:21:e1:2e:
37:26:63:5b:54:51:dd:c4:c1:7d:4a:0e:87:74:1e:ed:fb:00:
14:f1:9d:76:2d:21:91:cd:91:6f:ec:15:6f:b8:bc:7a:7f:7c:
82:a8:02:ee:86:c0:fa:f7:fd:82:73:36:de:8d:9d:18:19:69:
72:82:61:90:b0:95:3d:92:a2:d3:24:6c:0c:e7:89:3d:ed:4a:
c3:ef:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:57 2025 by rpki-client