Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wbLb04oxBZLAhczoWUT_3DNF98o.roa
File: wbLb04oxBZLAhczoWUT_3DNF98o.roa (raw, json)
Hash identifier: fWzn08JlXnPAJmurH08YXBiUEt7zLJuvpq201ODIJbA=
Subject key identifier: C1:B2:DB:D3:8A:31:05:92:C0:85:CC:E8:59:44:FF:DC:33:45:F7:CA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01973EB9DFD14567F815EC3384CBBFF0FD4A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wbLb04oxBZLAhczoWUT_3DNF98o.roa
Signing time: Thu 05 Jun 2025 06:14:18 +0000
ROA not before: Thu 05 Jun 2025 06:14:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47392
IP address blocks: 89.144.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:b9:df:d1:45:67:f8:15:ec:33:84:cb:bf:f0:fd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 5 06:14:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1b2dbd38a310592c085cce85944ffdc3345f7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:94:7d:ed:ae:bb:d6:de:ee:e9:84:22:de:
ae:31:20:c3:f5:b1:b2:eb:9c:8e:2b:7d:b8:88:92:
96:5a:6a:18:a0:16:f6:01:ab:85:dd:81:b0:79:c8:
45:2b:02:46:9c:91:d3:60:7d:02:71:03:f1:64:44:
c7:ac:a0:89:5c:5d:79:19:bd:95:3e:32:7a:e6:19:
94:68:78:b9:c9:c8:d7:10:ad:df:21:58:fe:fe:46:
47:a4:de:ee:92:a8:61:6b:3d:ae:5b:4b:d2:3b:10:
e4:bd:a7:67:c2:0f:1f:50:5a:a9:6c:90:7c:6f:33:
8a:55:f3:69:e9:38:a2:51:ae:1b:52:8b:f4:50:c9:
64:01:80:4e:8e:f6:0b:e2:48:13:67:7c:30:3c:a7:
5e:15:2e:cb:9b:8e:03:53:07:7e:b1:df:2f:cc:1b:
24:93:06:1b:10:38:d9:f6:d7:cd:ab:1d:b8:ed:ba:
de:11:1c:24:34:dc:a7:d0:a9:44:ae:73:62:0a:ae:
02:00:52:77:60:96:95:c3:7e:f5:55:ed:b2:c4:97:
1f:69:c0:f4:99:8b:a7:a2:92:64:83:8b:a9:48:e7:
03:4f:3d:b5:76:64:03:be:9e:0c:03:da:78:fa:35:
a0:43:d9:4d:1b:6c:82:b5:85:e2:af:28:d6:5d:1f:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B2:DB:D3:8A:31:05:92:C0:85:CC:E8:59:44:FF:DC:33:45:F7:CA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wbLb04oxBZLAhczoWUT_3DNF98o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.40.0/24
Signature Algorithm: sha256WithRSAEncryption
59:04:c4:a3:0e:48:9d:f9:54:d5:c0:47:cc:b5:68:7b:03:99:
e2:30:f7:07:3c:97:d3:1f:5d:18:5b:94:27:46:fc:87:1d:5b:
68:02:35:b6:8c:fc:f5:96:74:a6:56:e1:3c:43:d9:93:94:06:
6e:97:54:bb:50:fa:09:3b:46:59:d8:6f:a9:00:2a:8f:81:f3:
7e:37:0c:90:a3:9e:4f:04:cf:ae:24:a6:94:5f:bf:7e:56:f8:
c6:ea:ca:23:66:8d:91:ea:44:f2:24:bc:dc:6e:9c:6f:bc:39:
f2:78:32:18:d7:fb:67:13:8b:0b:84:a5:5a:db:38:85:a6:d0:
0e:3f:67:7d:c7:46:0c:59:5b:06:89:09:38:5e:b9:fd:93:7a:
da:94:2c:c5:67:28:ae:38:78:c8:40:b1:30:5e:c4:82:fb:9c:
ff:82:aa:a6:c4:d1:4f:b2:67:54:3e:33:d1:f5:37:0b:4b:37:
fa:fb:18:25:e2:b0:93:b1:50:ca:41:ef:31:6e:cf:d5:ff:80:
b0:88:98:2b:35:67:1f:d7:d9:ad:57:74:c3:26:89:6d:b7:9e:
eb:b8:be:86:f2:28:08:8c:62:6f:6f:ce:f9:af:9e:fa:6a:2b:
18:c9:55:b4:d4:9c:82:7c:db:f5:94:7f:fd:11:e6:40:2a:d5:
ec:c9:82:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:59 2025 by rpki-client