Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/WTZTgFi28jLlym6OE35mFLAhldM.roa
File: WTZTgFi28jLlym6OE35mFLAhldM.roa (raw, json)
Hash identifier: jSGkSx+xIVrc/nZDnmv+Qse1KJ3JV2HCFfbdRdP+Xro=
Subject key identifier: 59:36:53:80:58:B6:F2:32:E5:CA:6E:8E:13:7E:66:14:B0:21:95:D3
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 019427B3BBA9765B50DA4064FB86AEC8EF3A
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/WTZTgFi28jLlym6OE35mFLAhldM.roa
Signing time: Thu 02 Jan 2025 15:47:57 +0000
ROA not before: Thu 02 Jan 2025 15:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201877
IP address blocks: 45.13.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:bb:a9:76:5b:50:da:40:64:fb:86:ae:c8:ef:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Jan 2 15:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5936538058b6f232e5ca6e8e137e6614b02195d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:b0:a5:33:02:c2:c7:36:c0:80:a7:65:6c:
ae:d1:27:17:53:a0:93:aa:1a:04:41:30:0e:c8:db:
ec:c4:f9:c9:f2:be:9e:8d:db:a0:db:7f:92:69:de:
46:be:cd:a2:19:32:94:24:07:63:e2:43:85:a4:d7:
d0:7a:ae:d8:17:d9:b2:22:02:e0:1e:c7:ee:28:40:
a3:41:01:f2:86:72:5b:9b:14:39:ce:f1:58:6a:40:
72:43:5e:64:99:63:d2:1f:77:2d:af:9d:70:9e:03:
73:9c:fa:1e:fe:9b:7c:10:72:c0:a0:e6:d1:8f:41:
f6:d9:11:18:29:11:82:e7:2c:24:db:cc:74:f5:86:
f7:d6:8a:4a:2b:3a:dc:30:14:e5:d0:88:89:ea:41:
18:50:a2:37:67:c8:48:ff:f0:63:71:3a:6b:a9:da:
5f:0a:2d:69:d8:bd:7c:73:42:30:69:96:7d:96:03:
77:cf:21:19:ae:86:36:ab:f3:17:23:f7:1d:86:80:
8b:09:e7:2b:df:04:89:ef:47:7e:b1:ed:2c:46:22:
22:df:41:34:e6:44:af:7f:f1:48:4a:94:93:16:66:
3c:17:45:57:b9:43:3e:b6:a5:9d:69:fe:2e:a8:3a:
f6:d8:ef:02:c3:37:91:25:12:30:54:17:18:b9:42:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:36:53:80:58:B6:F2:32:E5:CA:6E:8E:13:7E:66:14:B0:21:95:D3
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/WTZTgFi28jLlym6OE35mFLAhldM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.120.0/22
Signature Algorithm: sha256WithRSAEncryption
45:97:d9:68:c5:1b:c6:ea:4c:78:a9:7c:58:02:d0:9c:d6:46:
d7:76:85:98:40:a1:32:3f:c4:f0:1e:4e:72:22:45:1f:a2:b8:
11:51:cd:ee:df:1c:2c:ef:5a:87:4f:84:95:cb:a1:55:51:d2:
68:20:a1:58:cd:96:e7:3c:e3:91:20:06:cf:ab:f4:e8:34:4a:
a0:89:84:ed:e1:73:30:6b:39:49:5d:76:a2:07:0b:42:91:97:
2c:38:66:02:05:29:fb:c2:eb:bd:3f:5b:e7:40:09:73:cf:ce:
1d:0b:41:5a:f4:8c:e3:9e:a3:7c:e1:1a:45:09:c5:75:1b:7e:
16:99:f5:40:b3:46:8e:4a:95:39:dc:c3:df:2f:1f:53:01:d2:
e7:17:3a:41:74:dc:08:ac:c6:6e:19:a9:94:1e:6e:4f:ae:77:
3a:d3:0a:d1:da:5b:0e:11:87:a0:25:c6:0d:8f:ef:30:c2:8b:
a7:c3:3d:9a:53:de:f7:50:66:44:d9:ab:ec:2a:b1:0e:3d:93:
9d:aa:c0:5a:e4:4b:f3:5d:11:b2:81:cd:03:fc:e6:3b:b4:4e:
4e:05:2f:f0:2a:2b:f2:69:cf:c4:e7:56:67:51:31:36:43:e8:
71:4b:22:8f:0b:ea:ec:ed:7f:e1:bb:e6:e3:37:0a:48:a3:91:
e0:19:6f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:25 2025 by rpki-client