Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/WnALNRrXI0Grx_BAK6kv3Mum1nE.roa
File: WnALNRrXI0Grx_BAK6kv3Mum1nE.roa (raw, json)
Hash identifier: Tz9fvDCzAvAnN0unI4vmXWmPfScNaI+6SId8m9PyAVA=
Subject key identifier: 5A:70:0B:35:1A:D7:23:41:AB:C7:F0:40:2B:A9:2F:DC:CB:A6:D6:71
Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial: 01942823FA5E2C8FA218DB366AB970F7978D
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/WnALNRrXI0Grx_BAK6kv3Mum1nE.roa
Signing time: Thu 02 Jan 2025 17:50:33 +0000
ROA not before: Thu 02 Jan 2025 17:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31420
IP address blocks: 193.151.80.0/24 maxlen: 24
193.151.81.0/24 maxlen: 24
193.151.82.0/24 maxlen: 24
193.151.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:fa:5e:2c:8f:a2:18:db:36:6a:b9:70:f7:97:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Validity
Not Before: Jan 2 17:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a700b351ad72341abc7f0402ba92fdccba6d671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:25:0b:14:24:71:98:75:3e:21:0e:28:bb:86:
ea:37:e3:c5:02:87:3d:91:8e:c6:6f:3c:a6:fa:66:
76:7e:b3:85:5c:45:10:35:0a:73:bf:f4:87:50:36:
c9:b6:82:ec:67:41:d6:ec:e8:1b:57:2f:59:ba:b5:
f5:27:f9:0c:f8:e4:d3:f9:35:bb:af:60:56:4c:61:
6f:55:13:49:79:e9:67:f0:3a:54:12:e4:59:98:87:
be:73:a5:66:24:ef:3c:ce:43:bb:79:25:98:a6:e7:
fe:5f:a2:b5:2a:5d:68:e3:59:98:63:a9:62:d7:ca:
15:5d:58:10:8d:2d:03:3f:7b:c8:1f:ed:d1:c3:76:
33:93:de:76:57:06:d4:f5:f7:a5:49:af:90:a9:d8:
1d:d5:77:ba:6e:a7:1b:b8:b8:fa:12:17:4c:af:0d:
7d:c7:33:48:96:4f:9f:fc:f2:72:aa:0b:6a:1b:62:
99:44:07:da:70:3a:22:2d:f4:4e:09:8b:98:c2:81:
83:fe:69:19:b7:55:62:93:13:36:8e:86:2d:78:4b:
b7:9e:18:96:1e:ba:15:3c:e9:0b:08:5a:f5:3e:e5:
b0:0a:35:c7:b2:36:13:25:fa:d5:ac:0b:d7:f4:27:
8b:db:86:a9:a2:21:e7:6c:e6:74:ed:ce:0e:5d:1b:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:70:0B:35:1A:D7:23:41:AB:C7:F0:40:2B:A9:2F:DC:CB:A6:D6:71
X509v3 Authority Key Identifier:
keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/WnALNRrXI0Grx_BAK6kv3Mum1nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.80.0/22
Signature Algorithm: sha256WithRSAEncryption
07:66:84:58:50:e8:d4:64:d1:90:2c:4b:ee:65:e7:dd:f1:7e:
e0:8e:5f:4f:ec:66:15:30:be:5b:3b:70:ec:51:c3:7d:54:38:
45:3f:1e:9e:bc:1e:77:de:a8:87:be:7d:04:4c:61:90:27:5b:
97:9a:93:25:d0:fe:d5:ee:7c:1c:84:f0:06:5e:da:b4:87:9b:
25:e2:cf:ea:1d:bd:8d:7e:e8:12:b0:bd:40:8b:10:6a:57:65:
c2:c4:7b:56:24:0e:57:f9:a4:73:15:6f:b2:b8:c5:b5:75:f5:
10:97:b9:98:ee:e9:38:22:90:ef:8f:0d:82:ad:1b:6c:3d:de:
27:2b:f7:d4:06:63:33:8b:93:a9:3b:cc:be:a1:90:ce:6a:1e:
d1:c3:e3:48:25:9b:aa:7f:d9:79:69:f0:d8:42:a2:ef:fb:5b:
a4:ba:c9:45:f2:39:64:85:62:42:36:25:c0:af:a4:fe:6d:56:
5f:40:97:fe:b0:86:66:b3:70:81:f9:01:42:85:44:f2:2c:bd:
ed:f2:df:fe:10:6d:81:81:e2:27:2d:68:89:ea:a5:bb:62:cd:
76:40:ab:0c:9f:cb:b4:6e:97:b0:c2:1a:60:0e:70:d7:00:15:
5a:44:c1:b8:5e:7c:4d:d9:9d:8a:44:38:90:a8:de:eb:ec:77:
35:c2:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:36 2025 by rpki-client