Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/Wwvcf_CdHRy8gkrOQZUQURuseiI.roa
File: Wwvcf_CdHRy8gkrOQZUQURuseiI.roa (raw, json)
Hash identifier: xkPyebxyoo94+1+QeBv80ewSsDDTwjJTGd/zo7NXJ5g=
Subject key identifier: 5B:0B:DC:7F:F0:9D:1D:1C:BC:82:4A:CE:41:95:10:51:1B:AC:7A:22
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 01941F8C547EE35E0725EA5D9FEE17283DF9
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/Wwvcf_CdHRy8gkrOQZUQURuseiI.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206331
IP address blocks: 185.189.108.0/24 maxlen: 24
185.189.111.0/24 maxlen: 24
185.229.180.0/24 maxlen: 24
185.229.181.0/24 maxlen: 24
185.229.182.0/24 maxlen: 24
185.229.183.0/24 maxlen: 24
2a0b:e480::/29 maxlen: 29
2a0b:e480::/32 maxlen: 32
2a0b:e481::/32 maxlen: 32
2a0b:e482::/32 maxlen: 32
2a0b:e483::/32 maxlen: 32
2a0b:e484::/32 maxlen: 32
2a0b:e485::/32 maxlen: 32
2a0b:e486::/32 maxlen: 32
2a0b:e487::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:54:7e:e3:5e:07:25:ea:5d:9f:ee:17:28:3d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b0bdc7ff09d1d1cbc824ace419510511bac7a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:e4:31:a7:b0:54:6c:d1:27:ba:55:1b:82:
48:3c:f0:51:8e:cb:02:e2:85:ed:69:c8:b2:5c:db:
c8:38:ba:7d:9c:f1:9b:23:19:94:50:69:23:52:60:
40:a9:bd:4d:6c:cd:a8:9f:4d:f1:70:b7:c6:72:ac:
7d:6d:32:e6:bc:73:34:b8:9e:8c:59:7f:55:ed:e2:
69:3a:f7:7d:2a:2a:0a:3f:0c:14:b9:be:ce:43:00:
cb:3e:d3:8b:6a:de:65:d4:77:5b:38:27:d0:87:16:
d4:8e:6d:97:64:e7:b6:de:70:78:95:e1:66:a8:5c:
0f:60:a0:5a:8c:84:bf:b2:41:1d:90:29:bf:2a:20:
17:93:34:6a:85:21:43:50:14:fb:e5:86:b1:3f:76:
af:f8:54:87:df:2d:40:cd:f9:8b:dd:f8:64:b3:b2:
b2:8d:3f:c6:07:19:2e:86:0e:57:f7:d6:53:6c:4b:
27:58:0d:cd:00:0f:ac:30:fb:a9:b6:a8:82:55:cb:
cf:e5:54:2f:71:32:87:91:4f:1d:55:d5:37:ff:86:
d1:9b:e5:40:b4:bd:1d:ce:21:da:d5:1b:0b:cd:a4:
08:89:39:58:9a:b0:bc:43:cb:68:4f:98:5c:96:14:
08:66:26:9c:c8:30:3e:50:9c:11:07:97:6e:4d:a3:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:DC:7F:F0:9D:1D:1C:BC:82:4A:CE:41:95:10:51:1B:AC:7A:22
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/Wwvcf_CdHRy8gkrOQZUQURuseiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.108.0/24
185.189.111.0/24
185.229.180.0/22
IPv6:
2a0b:e480::/29
Signature Algorithm: sha256WithRSAEncryption
4f:b5:18:ce:c1:b1:46:0d:ec:c3:bc:17:63:93:70:65:0b:c0:
a3:be:f4:d2:85:00:f5:ad:55:9a:c9:a6:8f:ac:90:fd:0e:7b:
3a:63:80:dd:d3:f9:97:05:ea:2b:72:b8:8d:21:90:a7:ad:11:
57:0c:0e:9d:2d:71:df:ca:9a:e7:ef:08:a2:e3:2d:ae:95:57:
da:97:20:bd:f1:f6:de:68:a4:23:60:21:98:c7:72:76:66:a2:
82:4e:23:93:c0:b9:4b:33:38:93:19:c3:fe:96:f1:d6:c0:0a:
95:31:4d:d7:11:4f:a8:c9:8e:ab:fd:5c:69:ec:dd:7f:cd:cf:
e2:73:08:1b:3a:e1:c7:8f:77:f6:e4:e9:4b:1a:56:f5:a4:cf:
a9:c9:1b:94:da:f3:40:da:d1:68:14:8f:d4:ee:06:e3:29:13:
03:ed:40:b8:87:ea:c5:61:1a:9a:e2:6e:6b:3a:7d:e5:4a:6d:
08:35:69:ac:d8:52:b1:2d:5e:8e:12:93:74:b5:2a:23:9d:d5:
d3:09:4c:0b:1d:bf:77:6c:6c:73:47:19:69:5e:dd:74:a8:7a:
30:88:99:fb:c8:c7:9a:11:f4:0a:f6:06:25:21:cc:c6:49:1f:
2e:5e:b3:ab:4a:41:78:3a:ce:59:46:b9:4e:e5:60:78:c9:53:
4c:85:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:26:22 2025 by rpki-client