Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/WSR-O9b0gsJsQFSKXSTL8eJBMpA.roa
File: WSR-O9b0gsJsQFSKXSTL8eJBMpA.roa (raw, json)
Hash identifier: a3d83I3OM26Rcumlwo5C8tjA1sldnSwvJlMfN0DSpuw=
Subject key identifier: 59:24:7E:3B:D6:F4:82:C2:6C:40:54:8A:5D:24:CB:F1:E2:41:32:90
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01970DF1B96C376D220627ED093ABA303D93
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/WSR-O9b0gsJsQFSKXSTL8eJBMpA.roa
Signing time: Mon 26 May 2025 18:53:54 +0000
ROA not before: Mon 26 May 2025 18:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8342
IP address blocks: 91.226.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:f1:b9:6c:37:6d:22:06:27:ed:09:3a:ba:30:3d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: May 26 18:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59247e3bd6f482c26c40548a5d24cbf1e2413290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bb:23:5d:3e:30:fb:eb:c7:b1:6d:ff:8e:fc:
b1:90:1f:26:30:3c:ef:93:20:c4:54:e9:33:5d:60:
70:74:50:98:f6:52:52:70:e7:d0:61:05:bb:f4:35:
11:e6:d7:11:66:f1:c5:32:d4:c0:bc:d6:73:02:92:
f7:e7:f1:2b:11:b4:7c:06:bb:23:e4:dd:63:ae:4c:
d6:16:64:76:e6:81:54:37:fe:69:a7:00:a5:a5:55:
e0:16:18:ca:24:44:6c:6b:2b:a0:3d:72:77:97:1b:
b2:b9:c1:bc:a5:14:46:38:4e:cb:14:39:3b:a8:c1:
4f:0a:71:f1:9a:25:16:99:9a:ef:d6:65:d3:e7:42:
dc:ef:56:c6:9a:a5:5e:8a:20:82:1a:19:e3:f2:42:
cc:db:e3:50:02:5b:d2:17:f7:6d:05:8e:e4:14:47:
89:21:58:ec:d5:b3:67:27:57:8b:80:fd:23:a5:e0:
a7:fb:ef:01:2c:4d:17:a9:6d:50:0d:62:4c:9c:bd:
d6:81:d0:17:45:ca:55:f4:c2:d7:1f:d6:b1:b9:bb:
c9:93:13:b4:0c:24:6c:a1:94:3a:e0:d9:13:2b:6a:
16:5a:e6:6a:5b:64:90:bf:a0:05:b7:8b:b2:f8:4e:
ae:65:99:4a:b3:03:1e:e8:4c:1e:ab:db:31:0b:ee:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:24:7E:3B:D6:F4:82:C2:6C:40:54:8A:5D:24:CB:F1:E2:41:32:90
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/WSR-O9b0gsJsQFSKXSTL8eJBMpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.30.0/24
Signature Algorithm: sha256WithRSAEncryption
86:cd:f8:bf:c4:1e:39:c5:4c:d4:c9:4d:76:67:7b:64:65:1e:
0b:48:3e:62:5b:69:9e:c2:07:1b:41:1d:19:f9:78:67:81:f6:
39:ac:de:d0:4f:7e:ad:66:8b:d6:a2:da:30:7f:8a:2a:50:6d:
b4:b6:bb:2a:f0:c5:32:67:00:36:63:4d:19:d0:3c:3b:3c:a6:
92:88:4e:a1:ba:32:c3:df:69:45:e5:51:cc:19:26:d8:4f:f3:
c4:36:7f:1b:d0:69:e0:e9:b8:cc:54:2b:4f:0b:fc:e3:f2:01:
4c:5e:5e:de:75:e4:7e:9e:6c:c4:e2:aa:a2:ba:5b:5e:c2:c1:
28:91:c9:7b:01:1d:f7:d8:ad:93:d1:b3:75:bd:63:9a:98:a4:
89:9a:31:4e:a9:e5:8d:86:2e:85:a9:cd:21:ba:ee:4e:2d:29:
94:e9:a0:70:36:97:c3:74:a7:6c:a5:ff:9d:fd:2b:86:25:b7:
07:1e:f5:e4:24:48:e9:85:e0:5f:46:ec:d2:d8:91:d8:a5:d0:
b1:6f:e6:e2:3e:0f:49:f8:2b:25:22:ec:28:a3:b7:0f:58:f2:
32:e6:eb:23:7b:da:36:89:3a:95:97:c0:ea:08:0c:a3:af:f9:
49:01:cd:ba:1b:d5:cb:d6:fa:ca:3b:bd:d0:ff:31:1c:fe:e4:
23:22:ee:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:16:14 2025 by rpki-client