Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WAfE9_jM-xCvd3HHls_Zfv7Hu7Q.roa
File: WAfE9_jM-xCvd3HHls_Zfv7Hu7Q.roa (raw, json)
Hash identifier: Tu0feRJBbDwmR+Q4s/vb+A78051tyZr/hpuCcPN+btw=
Subject key identifier: 58:07:C4:F7:F8:CC:FB:10:AF:77:71:C7:96:CF:D9:7E:FE:C7:BB:B4
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282820C838AE826D69A6F2BA37A2F9D7
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WAfE9_jM-xCvd3HHls_Zfv7Hu7Q.roa
Signing time: Thu 02 Jan 2025 17:55:05 +0000
ROA not before: Thu 02 Jan 2025 17:55:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62411
IP address blocks: 92.247.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:20:c8:38:ae:82:6d:69:a6:f2:ba:37:a2:f9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5807c4f7f8ccfb10af7771c796cfd97efec7bbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:01:ea:25:3b:ed:08:de:47:42:c5:30:4e:
dd:e1:66:47:3b:5c:ef:2b:9f:d0:d0:08:e3:3c:ad:
b7:56:97:99:ac:96:10:3a:ae:3c:d4:c2:cc:49:75:
f5:89:97:42:73:50:ba:55:92:1b:b4:3d:77:a3:ee:
d7:d7:df:a5:ed:48:44:ff:cb:81:96:b8:61:57:b9:
cf:d3:31:b3:83:00:28:0e:33:74:70:ef:f3:3c:85:
77:8b:d5:22:d4:24:96:ea:99:a2:8e:c1:82:f1:dc:
04:01:4d:24:33:1f:de:88:e9:41:de:72:ae:c7:7a:
0e:2a:6f:fd:40:f3:2b:7d:30:68:8c:47:3d:82:7c:
08:a0:ef:55:97:56:3f:a9:65:8c:34:00:bc:d8:67:
4c:96:4c:98:5f:57:b9:a4:ee:bf:25:54:96:00:a9:
6a:25:39:bf:f0:96:24:ab:37:ce:3f:96:ab:48:d6:
24:4f:a5:15:ad:de:83:e7:2d:6e:b7:21:73:5e:f5:
39:4a:7c:02:71:89:37:46:13:a5:e4:47:65:52:11:
87:93:fe:34:48:59:69:31:b5:9b:ad:7f:0c:1e:72:
7e:5b:38:37:a5:5d:d8:a4:a0:ae:14:21:fe:21:fd:
05:8f:04:8b:83:41:a2:5f:6d:3f:c6:0a:13:54:0f:
82:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:07:C4:F7:F8:CC:FB:10:AF:77:71:C7:96:CF:D9:7E:FE:C7:BB:B4
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WAfE9_jM-xCvd3HHls_Zfv7Hu7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:45:de:db:1e:cc:39:1f:d4:5c:c7:30:88:eb:a1:85:e4:85:
c1:b8:18:a1:98:63:c7:2d:64:60:4a:16:a6:8c:9e:70:0c:70:
55:1b:97:9c:c7:0d:08:29:1a:41:28:97:15:04:e6:29:4e:4d:
95:51:91:5b:ee:8b:e7:de:99:51:3d:a4:98:e8:47:9d:86:98:
42:46:0b:f7:e8:ab:c8:68:12:f5:0f:48:53:e4:5f:e1:81:5d:
c7:37:52:37:00:61:35:a9:a7:a3:9e:ca:d7:96:f2:cc:e5:bf:
ac:30:e7:21:44:d6:10:20:02:e0:5c:56:e8:59:08:b3:c8:40:
b1:8d:57:40:c1:b6:8a:3a:7b:d9:e5:e3:26:36:b8:29:1c:cc:
55:34:dc:59:0f:8d:d5:e6:d4:21:54:6c:e1:b2:90:7e:82:6b:
e0:fe:5e:02:39:04:ca:fa:a8:78:bb:4b:de:8c:43:0f:45:ab:
58:d6:18:e7:79:70:8f:ae:87:d4:0d:0b:1c:98:b7:4b:34:0e:
a6:99:84:10:9d:a6:62:60:af:16:11:81:dc:c4:f8:ec:fe:4a:
12:aa:27:f4:a9:e7:e1:1a:9c:5a:ac:ae:04:89:81:12:1a:bf:
fb:93:0b:9a:0f:12:db:89:6f:1c:39:bc:b8:c8:85:6a:7f:77:
69:8c:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:57 2025 by rpki-client