Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/021wafyO7WolJU4l--xXVdGeCgc.roa
File: 021wafyO7WolJU4l--xXVdGeCgc.roa (raw, json)
Hash identifier: n0rgBucIXReFU2+OERLUEhh/Tg6Q+uBwnRpegZjnGts=
Subject key identifier: D3:6D:70:69:FC:8E:ED:6A:25:25:4E:25:FB:EC:57:55:D1:9E:0A:07
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C17167AF119B6B7B3E38B3E840DE6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/021wafyO7WolJU4l--xXVdGeCgc.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31017
IP address blocks: 80.97.125.0/24 maxlen: 24
85.120.34.0/24 maxlen: 24
193.226.60.0/24 maxlen: 24
193.226.63.0/24 maxlen: 24
193.231.242.0/24 maxlen: 24
217.156.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:17:16:7a:f1:19:b6:b7:b3:e3:8b:3e:84:0d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d36d7069fc8eed6a25254e25fbec5755d19e0a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:23:6e:25:9a:ed:e1:50:90:3e:0c:08:f2:
01:5a:0d:9e:4e:d3:22:de:9e:bf:3b:e1:2a:63:01:
a5:3c:ee:61:81:c2:ce:bd:39:1e:d5:2a:9e:c1:44:
89:c2:6a:34:fe:0e:1f:86:12:16:fe:fa:77:9f:32:
c4:3d:02:68:bb:44:e5:31:36:56:59:ad:55:d7:5a:
e9:12:89:48:0e:2c:af:47:2c:b6:81:b5:0a:af:f5:
2e:93:a6:8e:9b:ff:62:ef:f3:29:93:48:83:cb:67:
78:e3:1a:2f:30:93:75:6a:8b:c1:cb:89:29:99:2c:
36:3d:bc:36:3b:67:2c:7a:62:e5:6a:68:d4:50:0e:
ca:4f:a9:c9:17:88:03:61:b9:e2:24:1e:a2:9a:c6:
aa:da:56:ea:d4:33:a4:26:68:89:c1:19:6a:61:b0:
7b:23:f2:98:31:b3:dd:75:46:b8:39:d4:54:5a:64:
e0:7e:b9:b4:e1:8d:c2:8f:71:32:1e:29:dc:81:23:
ce:84:fb:ca:9a:90:2e:9a:ab:22:e2:47:f7:14:2f:
de:70:c1:5d:3e:01:3c:83:2c:88:46:14:c9:65:76:
d7:cb:d2:09:8c:63:a8:3e:16:4f:39:1a:d1:75:8e:
c3:b8:3d:5c:92:10:25:5f:a4:59:45:16:45:e6:d7:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:70:69:FC:8E:ED:6A:25:25:4E:25:FB:EC:57:55:D1:9E:0A:07
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/021wafyO7WolJU4l--xXVdGeCgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.125.0/24
85.120.34.0/24
193.226.60.0/24
193.226.63.0/24
193.231.242.0/24
217.156.76.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:8f:07:aa:bb:f9:8e:ed:e6:da:db:dd:c0:42:b0:73:72:69:
68:1e:a3:12:c0:53:0b:2f:78:d5:b1:39:c0:08:48:6c:bd:6e:
bb:e0:4b:26:22:68:44:a5:8a:97:cb:4d:13:55:6d:82:42:6b:
96:53:5d:e4:d9:11:82:49:54:d2:86:cb:27:26:be:a3:78:cf:
b4:46:2a:5d:83:58:da:d1:e3:fe:bc:e7:17:4d:43:44:14:db:
44:07:f5:79:f9:70:09:5a:b0:53:f2:e4:c7:19:ea:de:e0:89:
8a:19:1c:da:5d:3a:04:14:5f:04:de:9c:1f:25:57:96:aa:bd:
f0:9d:89:01:8e:c2:d3:86:88:7f:8a:f1:9a:7f:b4:84:d5:77:
5e:a9:24:93:09:a5:89:ef:ca:13:4a:c8:bb:f1:c6:2f:f6:6f:
9e:fd:fc:fa:4b:3f:22:e5:fc:be:82:39:19:77:f0:1f:8f:65:
ac:09:ee:a2:9a:f7:c0:fc:b4:fc:9c:58:3b:e2:94:22:c4:da:
5d:e8:f2:98:97:3d:5a:c9:7d:6d:59:a6:be:ad:e4:5c:16:63:
df:78:d5:bb:e4:88:62:8f:b7:b9:fc:cd:6a:be:a8:5e:41:3a:
c7:c3:72:e3:c9:4a:66:0e:ec:e6:7a:56:f7:b4:3e:13:55:72:
5a:cf:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:35 2025 by rpki-client