Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/wuly6VhJIsSAyHq7fjz1Z6QjJqQ.roa
File: wuly6VhJIsSAyHq7fjz1Z6QjJqQ.roa (raw, json)
Hash identifier: lMMmuwoNIyRh0DsxwMyk2Lg/6d5F9SCOHWKuG9VUVgI=
Subject key identifier: C2:E9:72:E9:58:49:22:C4:80:C8:7A:BB:7E:3C:F5:67:A4:23:26:A4
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428280CB50F0D2F5078E505C6AEAB51FD
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/wuly6VhJIsSAyHq7fjz1Z6QjJqQ.roa
Signing time: Thu 02 Jan 2025 17:55:00 +0000
ROA not before: Thu 02 Jan 2025 17:55:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18214
IP address blocks: 212.36.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:0c:b5:0f:0d:2f:50:78:e5:05:c6:ae:ab:51:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2e972e9584922c480c87abb7e3cf567a42326a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:43:f7:96:c6:5f:49:2f:34:bb:00:72:88:
6c:5d:b9:28:44:f4:8c:ec:cf:b3:aa:9d:3f:38:02:
28:9e:89:01:5c:46:32:a0:2c:9c:45:1f:a7:3e:b7:
1d:14:43:c7:33:97:6c:44:a5:94:b9:d8:f7:4d:37:
26:35:c2:e8:ac:da:92:a6:68:34:c2:3b:86:d5:2a:
09:85:69:1c:56:24:5d:5c:96:50:f9:e2:55:bf:e5:
66:f0:49:33:9e:b2:f1:0d:e4:a0:e8:b6:51:33:8c:
08:78:16:35:73:0e:c5:c4:30:ca:a0:df:26:11:a7:
84:6c:92:3b:0b:cd:c8:1a:98:14:f3:43:1c:11:92:
41:4a:80:f4:96:6c:09:ac:b2:be:90:e3:d1:8f:10:
61:86:01:0e:df:fe:66:d1:b2:b2:d4:1d:0a:7b:9b:
79:7a:82:ca:6d:cf:e9:08:ad:55:a6:cf:31:8a:17:
fe:f6:31:32:61:e2:01:3b:5d:ca:84:ba:20:c9:ac:
a4:2c:46:31:e8:06:c5:b3:25:85:a5:7c:9e:87:be:
74:9f:87:7a:92:2d:29:00:58:4e:a9:fb:0f:10:6a:
66:a4:8d:a1:96:46:ab:26:fb:6a:33:ed:5d:74:0b:
05:9d:cd:83:3c:82:33:56:61:dc:72:48:ec:98:08:
92:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:72:E9:58:49:22:C4:80:C8:7A:BB:7E:3C:F5:67:A4:23:26:A4
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/wuly6VhJIsSAyHq7fjz1Z6QjJqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.36.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c0:33:83:43:1c:a9:23:18:ba:f6:10:97:f9:e3:72:e4:b4:
37:aa:b7:8b:d1:35:e2:1e:5c:41:03:ad:ee:7a:74:c5:e2:4f:
bf:c1:88:b2:8f:45:8c:d4:69:95:19:40:6e:ae:8d:ff:d4:98:
5d:46:d0:96:03:be:ce:9e:09:76:c5:0a:13:e0:5d:99:2e:46:
28:61:fb:52:95:6a:45:4f:53:18:2a:4d:3a:ab:2f:bb:32:13:
cb:57:53:0d:ca:af:e4:a9:8f:4e:ea:ec:c7:fe:4b:bb:4b:99:
10:77:98:1f:51:a5:9f:ec:04:77:3c:d6:df:09:3e:9a:e5:7b:
12:cb:4a:89:c5:a4:0c:63:31:92:15:25:f6:43:64:f7:80:99:
3a:10:da:32:fb:98:64:2b:d6:28:93:8a:9e:72:78:6e:05:9e:
3f:38:1f:ad:47:7c:e2:d8:d3:95:57:9d:23:80:c1:dc:7c:13:
08:ab:0b:50:44:d8:f3:7d:e5:fd:85:b5:16:2c:1d:b6:96:71:
5a:e4:5d:78:28:aa:0e:57:78:16:c9:bf:0b:4a:70:c3:ff:f1:
c9:f0:ea:b8:94:af:ab:d6:01:5e:e7:b5:58:d2:95:68:d7:64:
07:ea:34:49:1a:93:76:e0:ce:98:f3:23:82:7c:cf:cf:37:0d:
0f:e5:4f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:57 2025 by rpki-client