Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/rwJAWB7JMzjkUl1opg99OiU2log.roa
File: rwJAWB7JMzjkUl1opg99OiU2log.roa (raw, json)
Hash identifier: v3d/3gurUc92Br7LmVwpg2hXVDtjq6rSRW9Jz23yCEY=
Subject key identifier: AF:02:40:58:1E:C9:33:38:E4:52:5D:68:A6:0F:7D:3A:25:36:96:88
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 0194266BB20C42BC0EA3F03B32ECBD8704A4
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/rwJAWB7JMzjkUl1opg99OiU2log.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 88.81.160.0/22 maxlen: 22
88.81.164.0/22 maxlen: 22
88.81.168.0/22 maxlen: 22
88.81.172.0/22 maxlen: 22
88.81.176.0/22 maxlen: 22
88.81.180.0/22 maxlen: 22
88.81.184.0/22 maxlen: 22
88.81.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b2:0c:42:bc:0e:a3:f0:3b:32:ec:bd:87:04:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af0240581ec93338e4525d68a60f7d3a25369688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:f5:7f:06:45:4b:0b:0b:1c:a8:70:df:aa:
40:5b:b1:d7:eb:5b:85:b0:26:d4:1c:da:0d:5b:6c:
35:40:f0:0f:b9:05:88:e1:36:0e:e2:04:1b:cd:6f:
a1:58:88:16:55:b3:d7:55:cb:ce:e5:a2:c3:2e:06:
13:cf:ea:12:c0:3e:31:71:18:ee:b5:cf:a3:4f:0d:
8e:b3:e5:74:c3:66:68:bd:c6:5b:05:f3:af:74:34:
6b:d9:2c:91:2f:15:14:26:b7:6e:f1:ad:25:64:77:
85:3c:f9:08:94:93:a5:be:4b:da:14:80:c3:bd:58:
55:c2:5b:b6:7b:98:4d:65:d1:e6:cb:26:4e:09:ed:
f1:f3:01:e4:ea:6e:bc:b1:0f:22:c3:7a:b8:0c:ed:
63:de:7e:9b:05:ed:74:af:bd:76:ec:c4:2a:9b:6c:
ec:34:3e:cd:69:24:db:0a:f9:28:6d:14:5d:a1:6d:
75:37:4d:46:c2:50:50:5f:22:24:41:b9:5f:ea:ff:
9a:4b:e4:89:7c:a0:ad:f8:6a:0b:70:0b:5d:cc:dc:
d9:99:05:ff:bf:e1:1d:aa:48:85:e9:d9:52:8a:01:
11:58:f7:1c:4c:f6:56:d2:26:44:86:79:5d:69:fb:
0c:7f:6e:28:e5:6c:1a:c2:a6:e6:9f:85:b6:26:d6:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:40:58:1E:C9:33:38:E4:52:5D:68:A6:0F:7D:3A:25:36:96:88
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/rwJAWB7JMzjkUl1opg99OiU2log.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.81.160.0/19
Signature Algorithm: sha256WithRSAEncryption
57:6d:c0:77:a4:64:7a:4c:ec:89:c6:a8:d6:e9:9c:c6:3a:51:
e5:42:a3:8a:81:f0:82:a9:b4:9e:51:04:88:28:5b:ce:ab:cc:
1a:f8:11:80:33:98:d8:8d:b7:69:b3:54:ff:3f:5f:47:86:37:
fd:26:39:cf:e7:74:68:a4:dc:f9:ad:70:b4:c0:06:d3:a6:e3:
20:78:17:2a:25:ef:d3:95:7a:54:5b:5c:59:8d:75:19:40:1f:
fd:f2:c3:43:86:75:e3:d5:e6:78:70:fb:ae:7d:35:98:f4:b5:
52:f3:45:02:3c:65:ac:70:25:d9:7d:21:4e:0d:ab:b3:fb:f4:
3b:ac:7e:b5:0e:f2:e6:35:78:b5:eb:29:24:bf:db:bb:d9:73:
f5:d0:87:9e:14:9a:e6:46:f6:61:f8:82:cc:18:e7:81:09:c6:
82:b6:c8:13:0d:46:d6:8f:f0:a5:7c:f1:a3:65:17:37:b9:b5:
95:a5:09:dc:f6:76:f0:c5:1c:48:68:46:4d:01:b0:85:a2:50:
be:05:4f:b7:3f:3d:ab:58:4e:4c:67:cc:ce:d6:0f:1a:47:ca:
b5:8a:e2:f2:3b:58:66:11:39:b8:a4:c3:fc:50:71:35:9c:54:
69:39:01:a7:2f:71:1c:db:15:7f:e5:8c:03:a6:d9:ef:db:05:
87:1c:4e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:20:48 2025 by rpki-client