Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/WisrqhFtyIb2JbL0GIaBAVHWLTE.roa
File: WisrqhFtyIb2JbL0GIaBAVHWLTE.roa (raw, json)
Hash identifier: Y/GRGegzBf5aloGYHapUwpHTKh2vmOFKcBbghRvqMYw=
Subject key identifier: 5A:2B:2B:AA:11:6D:C8:86:F6:25:B2:F4:18:86:81:01:51:D6:2D:31
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019427B57EBE370ED2359AF6A7B2E8951FD2
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/WisrqhFtyIb2JbL0GIaBAVHWLTE.roa
Signing time: Thu 02 Jan 2025 15:49:53 +0000
ROA not before: Thu 02 Jan 2025 15:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205659
IP address blocks: 45.14.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:7e:be:37:0e:d2:35:9a:f6:a7:b2:e8:95:1f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 2 15:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a2b2baa116dc886f625b2f41886810151d62d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:80:d2:8b:8b:0a:18:bb:52:55:f2:0a:64:
66:58:d7:6a:a1:22:64:7a:52:54:68:8e:7f:70:a1:
46:f6:6a:e7:88:5f:dc:33:ce:71:42:44:9e:f2:76:
13:51:8a:4a:ee:4a:bf:29:a7:e1:d3:4e:5e:64:7e:
27:19:70:ee:91:8c:8b:f6:93:68:81:92:a7:6d:31:
78:96:8e:9b:82:05:ce:27:2e:51:e4:48:0d:dc:a8:
15:ed:42:42:60:79:12:65:61:31:8d:75:31:0f:69:
71:8f:6f:87:a1:67:3b:83:17:33:37:f3:36:ff:22:
7b:52:b7:34:b4:4f:7c:fa:6e:67:9d:82:91:11:c1:
33:a2:cc:75:7d:7e:40:ee:7c:4e:9a:f1:dc:6a:5d:
0a:ae:d8:2a:c5:92:fb:69:1e:7e:8b:4f:ca:a6:60:
36:8e:5b:f8:8b:99:4c:3f:12:d5:af:72:70:2a:7f:
11:d7:da:c0:1d:20:b5:bb:af:e2:7b:67:51:f6:f9:
aa:ca:23:67:43:bf:57:2f:de:37:02:55:59:fb:b5:
47:f1:dd:70:51:9e:ae:c7:4a:5a:c2:16:07:cc:ac:
10:c5:58:8d:c5:4c:bc:30:4e:be:4c:06:c5:40:3e:
e3:45:a0:d9:8e:31:d9:9a:29:5e:cb:95:f6:35:f5:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:2B:AA:11:6D:C8:86:F6:25:B2:F4:18:86:81:01:51:D6:2D:31
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/WisrqhFtyIb2JbL0GIaBAVHWLTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.74.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:6e:bb:b9:92:41:77:10:6b:82:02:1e:be:d6:85:a1:a8:ae:
5d:64:fc:e0:64:2d:a1:a9:62:d8:bb:8d:b1:ab:c0:a4:38:63:
12:cf:43:fe:a5:8d:45:53:97:dd:6b:3a:b7:2e:e5:f3:2a:22:
bd:67:e5:0d:b5:e9:4c:5a:13:71:64:90:bf:e9:96:58:27:12:
18:35:1d:f4:5f:29:bc:3c:cd:2c:72:ef:76:d9:55:ec:3d:23:
79:c5:4c:a2:e1:5d:e8:7b:88:06:a1:ea:92:38:63:66:1e:26:
28:be:fc:62:da:c5:77:eb:67:9d:19:e3:09:a7:3b:d3:ef:c0:
44:fc:c8:6c:81:1b:e0:b6:4d:71:70:a0:5b:a0:57:93:ab:00:
8e:06:58:24:83:f2:fe:4a:28:b7:cb:02:47:90:d5:c7:73:07:
19:a3:e4:1a:35:da:f1:c3:56:4b:13:f5:36:36:f5:91:2f:d3:
c1:6c:89:90:bc:22:e8:13:d1:6e:ac:10:84:6b:35:cc:c3:54:
51:5a:20:7a:04:fa:c3:e8:de:c7:53:31:41:3a:c3:64:f5:b5:
75:a6:d6:86:16:fd:78:25:20:4c:45:da:66:fb:b7:3d:83:72:
8c:3e:83:b6:2d:d8:31:0e:a3:ef:b3:39:19:af:8c:10:1c:d0:
ab:d5:64:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:56 2025 by rpki-client