Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa
File: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (raw, json)
Hash identifier: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=
Subject key identifier: 58:B1:24:82:C3:4B:C6:12:CB:EF:A2:79:2A:38:19:E6:47:B6:33:36
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 019422FC3FA78645689429173FF43FAD2593
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.235.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3f:a7:86:45:68:94:29:17:3f:f4:3f:ad:25:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58b12482c34bc612cbefa2792a3819e647b63336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:00:85:05:76:6b:ed:93:1d:ee:92:ad:51:
b3:32:13:6d:7d:c5:e0:b4:22:1d:fb:8d:e8:7f:42:
b4:ff:37:08:1b:a6:66:38:73:1e:94:85:0d:c8:81:
58:7b:a4:c7:97:ee:ea:82:8e:9a:38:ca:57:6b:65:
7a:63:fa:b6:d8:fd:b2:9f:85:42:eb:2a:7b:60:98:
ba:57:e5:64:7f:ae:14:ed:17:a5:14:83:0c:65:70:
77:2c:3e:b2:ff:8e:4d:2c:a2:c5:f2:70:4b:32:5a:
8d:18:e0:60:9a:73:29:0a:07:4c:16:e3:6b:cd:1e:
ab:8f:1e:88:a6:aa:6e:62:d0:ed:cb:a7:51:bd:e3:
71:8c:ae:0c:80:e6:23:06:d8:fb:86:8a:95:a3:bd:
c4:e0:1f:7d:85:fb:41:a5:dd:78:dc:f3:2c:60:6b:
43:0b:33:b5:83:a5:ff:fe:d7:f3:61:59:ed:1f:26:
e8:0f:59:d4:d3:2c:13:34:02:2d:34:d8:8d:12:4e:
b3:2f:29:7a:ad:c3:2d:cb:c7:65:a7:16:94:bd:35:
98:db:3c:45:77:f8:6d:1c:5d:b1:4c:74:92:fc:54:
e9:0f:dd:09:17:9c:fb:a0:ff:f2:6e:27:eb:3b:b1:
7e:57:af:1a:a7:eb:94:b8:25:8c:f1:1f:5f:1c:93:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B1:24:82:C3:4B:C6:12:CB:EF:A2:79:2A:38:19:E6:47:B6:33:36
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.63.0/24
Signature Algorithm: sha256WithRSAEncryption
85:31:a1:2e:0d:89:e5:e4:55:f3:b1:0b:ed:fa:c4:7e:cd:64:
d4:0b:b5:8f:5d:5b:fa:0e:ed:1b:33:63:a8:6b:72:95:07:9b:
1d:ca:b9:27:60:af:4e:52:ff:83:75:60:ca:84:57:66:be:d9:
6b:cb:37:39:ed:90:64:8c:e9:92:00:07:26:06:22:34:35:ea:
40:1d:65:50:79:ff:96:66:d1:69:7d:8f:d3:58:99:d1:94:20:
cd:9c:77:33:5d:e1:9d:68:2b:df:e6:74:fc:b0:cc:29:5c:13:
39:5a:f0:f2:52:fe:26:6b:47:71:8a:76:f7:62:28:29:ba:ad:
11:3b:5d:62:cf:e0:7b:a8:5c:ba:1f:6c:88:d0:0e:d7:05:cd:
3a:64:ac:d3:bc:47:83:41:f2:66:3f:ad:65:be:0e:cf:78:53:
c4:b8:3d:b2:46:0f:62:b9:79:34:9a:fd:bb:d5:4b:d5:03:9f:
2c:e5:98:f1:92:38:a1:7a:ce:65:e4:a3:58:71:7b:76:c0:ff:
14:5d:29:39:b9:43:b1:73:35:ad:2b:15:7a:79:62:4d:fe:eb:
6b:1c:c5:93:50:fc:94:a6:a0:6e:ee:00:96:24:87:05:12:83:
6b:92:fc:b1:74:bc:8f:63:03:43:5e:84:3a:04:11:de:78:8b:
27:a2:42:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:07 2025 by rpki-client