Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/WxZu6Qfwxi79xA37VkSZ-J20u_M.roa
File: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (raw, json)
Hash identifier: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=
Subject key identifier: 5B:16:6E:E9:07:F0:C6:2E:FD:C4:0D:FB:56:44:99:F8:9D:B4:BB:F3
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 019425FC9622DA098679948E14DAA696F798
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/WxZu6Qfwxi79xA37VkSZ-J20u_M.roa
Signing time: Thu 02 Jan 2025 07:48:17 +0000
ROA not before: Thu 02 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31081
IP address blocks: 193.28.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:96:22:da:09:86:79:94:8e:14:da:a6:96:f7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Jan 2 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b166ee907f0c62efdc40dfb564499f89db4bbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:dc:e1:b5:73:3d:da:16:1b:ee:0e:6c:a0:
98:d1:65:99:7f:6c:f0:39:00:fa:0e:81:a4:aa:44:
8d:8e:37:3a:6c:c9:5f:8e:4d:dd:71:5e:6d:50:2b:
10:a6:91:d1:2d:96:4d:b1:ad:64:ca:ec:aa:7e:47:
6e:17:e6:96:08:82:51:69:2e:f3:4a:67:76:08:43:
e6:a6:fe:3b:71:d4:c8:58:f7:25:49:d0:8b:fe:5f:
13:28:8e:ef:60:be:ba:74:62:4d:27:73:e0:c2:a5:
33:2f:b0:b9:f7:62:b1:eb:87:2e:77:46:4f:bb:71:
1b:47:80:34:4e:91:eb:58:9d:5c:a3:6f:25:5b:1c:
64:e1:1b:f6:a4:9d:09:33:a3:c5:47:0f:7e:5f:bd:
e2:96:79:30:cc:f0:11:fd:ca:82:03:6d:5d:11:48:
ff:14:16:bc:21:6a:4e:58:5d:ca:1e:10:ba:13:e5:
58:7d:2f:0c:65:85:7e:b7:27:4b:0e:a7:82:20:24:
d8:61:da:c3:e9:ae:b2:dd:9a:45:f1:27:07:a7:17:
a3:1e:a6:49:cf:21:a5:b3:16:57:e5:95:5f:12:58:
9c:83:97:e5:80:a2:b5:a7:37:1b:c7:9f:b8:8f:69:
42:85:70:29:1c:12:b4:b3:8d:e7:12:09:25:67:94:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:16:6E:E9:07:F0:C6:2E:FD:C4:0D:FB:56:44:99:F8:9D:B4:BB:F3
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/WxZu6Qfwxi79xA37VkSZ-J20u_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.254.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0a:27:ae:68:ed:95:85:c6:f1:00:53:32:d3:91:86:12:70:
d4:92:fe:e8:01:f4:b2:3f:e1:f6:35:33:a9:4e:66:52:19:be:
06:11:83:7d:fa:25:c2:7a:ad:98:19:86:89:e6:59:0a:ef:5a:
8d:0e:e2:03:3b:98:4f:b9:c5:2e:d4:bb:a0:cc:d0:52:27:ce:
73:bc:bd:c6:3c:77:90:26:85:ac:47:56:32:aa:cb:6e:b6:f4:
fb:58:ea:de:d3:aa:e7:6c:a3:92:f8:b7:34:e3:1d:03:13:29:
26:91:2b:8a:de:85:f6:3d:49:5d:2b:ad:a5:3d:e3:09:21:82:
e2:eb:03:40:28:32:25:2a:03:1d:3a:f7:31:39:13:d0:4b:54:
e9:66:bc:ba:c3:bb:05:fa:16:0d:f5:e9:e7:0c:a2:57:c5:98:
b3:fa:ac:86:eb:e4:29:fc:f5:31:3f:b7:fe:9f:fd:61:21:81:
f3:d3:6f:72:33:58:22:16:bb:af:58:d8:6a:e6:eb:e8:f0:1a:
bb:e1:f9:9c:be:e6:5c:e1:46:8a:74:f0:42:6d:46:8f:30:c5:
e3:3d:4a:07:55:da:eb:39:f1:d7:5c:00:dd:f3:20:21:2d:1c:
40:46:79:b7:be:58:66:69:f6:bb:2a:bd:40:8d:63:d5:cb:fb:
af:11:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:58 2025 by rpki-client