Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/W0hh9fYP1wBw9ymd6jWUhZc3TSg.roa
File: W0hh9fYP1wBw9ymd6jWUhZc3TSg.roa (raw, json)
Hash identifier: 9fnzXaQKbPD2tmB/4Jx1f8muC/i0JY7hK/AaC91lAgY=
Subject key identifier: 5B:48:61:F5:F6:0F:D7:00:70:F7:29:9D:EA:35:94:85:97:37:4D:28
Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial: 019425FD6394CC868BA6576D7D8E8FC0C5AF
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/W0hh9fYP1wBw9ymd6jWUhZc3TSg.roa
Signing time: Thu 02 Jan 2025 07:49:10 +0000
ROA not before: Thu 02 Jan 2025 07:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34306
IP address blocks: 185.161.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:63:94:cc:86:8b:a6:57:6d:7d:8e:8f:c0:c5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Validity
Not Before: Jan 2 07:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b4861f5f60fd70070f7299dea35948597374d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:51:12:33:6d:25:03:2d:e3:98:8a:9b:ed:
56:3f:85:20:6b:f7:b4:40:93:e3:a3:70:18:d1:a8:
f8:b9:a1:43:29:21:b4:5f:3e:1f:28:89:b7:51:72:
e7:3e:72:56:43:43:5a:d0:ad:41:ed:8e:15:b7:4d:
c5:f0:ff:f0:5f:7d:14:76:86:1e:da:f1:e0:53:3a:
47:d5:9d:91:84:28:5c:df:cd:07:d8:a6:92:fb:dd:
a1:32:a9:a4:c9:93:82:55:c0:46:c0:8b:e5:89:bc:
3e:2d:bc:e2:0e:00:65:89:ec:bf:a9:f8:10:17:ee:
9c:4c:6e:b5:47:ce:e4:9b:6b:01:3a:b0:08:cb:6a:
6d:96:e2:f5:44:24:2e:11:c8:13:2d:e4:4f:02:5c:
19:22:4f:e8:a6:fe:60:8f:19:2c:51:b6:85:95:4b:
b2:92:d2:07:67:9a:4b:3d:87:10:fc:5b:41:e3:e4:
96:7b:2f:ea:ea:69:7b:ea:1b:6d:55:5a:50:79:68:
61:9d:24:81:c5:d8:18:ce:17:a9:09:d1:9a:d9:88:
6a:a1:1f:c8:37:1b:38:04:e6:ec:df:63:69:1b:6e:
0b:a9:8a:9e:62:d1:1c:45:72:fc:3f:9e:7d:e3:8a:
a5:4b:e9:5f:5e:70:b5:ef:3a:48:56:82:14:7c:3b:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:48:61:F5:F6:0F:D7:00:70:F7:29:9D:EA:35:94:85:97:37:4D:28
X509v3 Authority Key Identifier:
keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/W0hh9fYP1wBw9ymd6jWUhZc3TSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.9.0/24
Signature Algorithm: sha256WithRSAEncryption
25:00:c2:c7:ad:dc:78:fd:8b:69:2d:70:0e:a6:ed:5c:0f:87:
2a:26:b9:62:2a:bf:24:b8:99:d4:82:ad:17:e1:e9:63:29:34:
c6:24:21:02:cf:49:10:9a:3d:7f:6c:9e:bc:4b:44:87:20:db:
71:7c:0e:a4:30:a7:6c:f0:e9:ab:2e:e3:80:e9:2e:27:64:a2:
b0:a0:7e:a7:e4:6f:80:a0:db:a8:c4:3b:c1:82:bf:43:f9:58:
82:1f:f9:8e:f1:e8:2d:9f:35:f3:02:98:6c:ef:23:03:52:b7:
88:01:69:ed:6c:57:1f:09:34:d7:e3:1c:56:53:79:5f:f3:a0:
44:ff:91:8c:c9:e2:71:ba:a0:91:a1:78:51:19:a8:a0:f6:90:
b5:9f:e1:60:1b:be:d3:e1:60:51:92:40:ed:7c:9e:6e:e9:94:
f8:cd:02:86:7e:09:7b:11:1d:26:d1:68:c4:1d:88:dd:71:4a:
13:6b:12:b8:b4:10:61:5f:1d:e5:87:e7:8b:48:a4:c0:b3:21:
fa:3b:0c:90:a5:50:a3:3c:13:45:a1:b3:0b:0f:41:02:d0:89:
23:8e:ae:96:55:3d:74:59:69:a0:06:e9:1e:97:8d:48:b2:4c:
34:37:c5:7a:a6:63:9a:d9:82:ab:7a:28:3e:be:43:84:46:ed:
42:0c:de:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:40:36 2025 by rpki-client