Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa
File: wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa (raw, json)
Hash identifier: 4A93zZwDOnQwirXpLmuckQTZrNNze07clVzbWfefS6s=
Subject key identifier: C2:6D:56:55:45:D3:F6:95:54:AD:B8:2D:BA:F5:09:8C:D0:B0:EC:72
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01941FFA565EF562003B0EA34BB91D0E434E
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211279
IP address blocks: 178.175.160.0/23 maxlen: 24
178.175.162.0/23 maxlen: 24
178.175.174.0/23 maxlen: 23
178.175.174.0/24 maxlen: 24
178.175.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:56:5e:f5:62:00:3b:0e:a3:4b:b9:1d:0e:43:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c26d565545d3f69554adb82dbaf5098cd0b0ec72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:72:c6:36:61:ca:f5:95:24:b5:6e:89:80:
bc:2a:2b:6e:64:41:d1:ff:bf:5d:bf:cc:79:e5:4e:
20:22:66:9f:cc:2c:98:1c:28:53:8e:81:80:8e:30:
d6:12:b7:2a:6b:b0:88:20:5e:51:aa:f0:8f:c4:da:
41:e0:2d:1d:9b:5a:72:e5:0f:86:48:58:16:01:cc:
7c:36:95:48:0c:ac:64:28:4c:f1:27:fb:eb:84:d6:
ca:81:44:0d:11:49:2f:83:b1:f3:e1:04:2c:31:54:
d3:d9:86:cc:cd:be:36:25:bf:93:d4:df:f1:de:56:
7d:40:c4:b8:ac:30:28:a6:c7:62:17:5e:9c:9d:28:
a2:a8:76:e8:0b:70:f5:3a:f4:cb:a6:45:b9:63:46:
cd:f5:19:51:46:7c:1b:f0:6b:5e:cd:47:8d:b5:c3:
ab:e3:db:8e:11:8c:f5:2d:d6:ae:72:9e:e1:e6:6d:
b3:ec:72:76:c9:57:d2:4a:5d:c0:19:b6:5f:6c:e5:
53:17:7c:26:a5:86:18:3d:09:b8:db:af:59:77:ec:
81:cf:f5:63:5d:8a:b1:a3:4c:79:a4:db:d7:e2:ff:
af:44:fa:f5:8d:50:92:d4:f3:73:94:e5:73:4b:fb:
37:cf:81:09:13:38:c9:c3:cd:a5:b1:6f:f7:87:9a:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6D:56:55:45:D3:F6:95:54:AD:B8:2D:BA:F5:09:8C:D0:B0:EC:72
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.160.0/22
178.175.174.0/23
Signature Algorithm: sha256WithRSAEncryption
20:37:58:e4:95:d7:06:3b:cb:ec:4e:55:b9:a4:a3:93:b1:80:
3a:60:1c:6d:c5:2e:82:bf:a3:66:9d:e1:07:08:d6:7c:a9:56:
d6:99:1f:b5:83:19:0c:33:b5:9a:78:1e:b3:23:8a:c7:bc:99:
60:3e:4a:18:bb:3e:6b:0b:a6:dd:ef:d0:a6:f3:5b:a4:cf:01:
a5:19:2f:d1:e0:31:7c:38:f5:e4:47:34:59:a7:61:bb:59:ef:
97:c9:11:bd:ee:85:5b:be:ed:d6:0a:fd:fe:c7:d8:7b:6b:1c:
c1:57:b2:59:d2:b6:11:11:3d:55:35:0b:f6:bf:e9:16:e0:a8:
a0:ee:e9:76:ec:18:96:1b:ea:7e:4f:89:35:69:56:06:7d:49:
bd:65:5f:5e:3d:1f:47:6d:ab:e2:3c:68:f8:6a:4a:18:59:7f:
c2:2e:e8:42:ae:ad:b1:95:ee:ce:e2:1a:a3:ef:d5:ca:6c:ef:
9b:44:8b:af:a0:4c:a2:86:59:86:e3:86:da:7e:0c:53:ee:a8:
75:b4:e2:58:b7:28:f8:2e:28:24:4d:14:cd:0d:dc:75:99:91:
08:10:0a:49:11:10:27:a6:40:fd:7a:48:13:eb:9c:f1:52:65:
a3:bd:ab:d3:fb:a7:df:4e:20:bc:9c:4f:3c:8e:97:f5:23:46:
ea:8e:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:53 2025 by rpki-client