Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w_cug9wK6IbhmOALDOsdSpbDiHQ.roa
File: w_cug9wK6IbhmOALDOsdSpbDiHQ.roa (raw, json)
Hash identifier: /IS6amDQpjsbOwcT/caCCUWvoTwASh0OCHT2Me3WudE=
Subject key identifier: C3:F7:2E:83:DC:0A:E8:86:E1:98:E0:0B:0C:EB:1D:4A:96:C3:88:74
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0195A9E852E1255C536003D4DE8395BD2B9A
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w_cug9wK6IbhmOALDOsdSpbDiHQ.roa
Signing time: Tue 18 Mar 2025 15:38:49 +0000
ROA not before: Tue 18 Mar 2025 15:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215898
IP address blocks: 185.132.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:e8:52:e1:25:5c:53:60:03:d4:de:83:95:bd:2b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 18 15:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3f72e83dc0ae886e198e00b0ceb1d4a96c38874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:81:79:b2:c4:a7:03:0e:55:9c:e0:49:cd:
52:a1:26:f0:42:1f:a6:d2:a7:b6:60:d2:a2:6f:22:
ac:c1:9e:99:5b:0c:df:b3:2d:77:ff:d2:48:13:a4:
16:f4:9a:f2:3b:c0:2f:cd:29:9e:e9:eb:95:19:be:
26:bd:25:af:31:ba:b3:ff:91:e9:1c:c6:6d:e6:bc:
d6:e3:3a:93:4e:f4:5a:80:6e:a7:48:b6:9e:90:bf:
47:38:10:53:62:6e:20:d5:53:c4:34:dc:8e:07:87:
0b:9d:78:44:44:8f:62:ad:ad:65:0b:c4:d2:23:b3:
73:15:cd:1c:af:b4:86:d0:99:87:b6:91:28:fa:46:
a9:c7:9b:64:03:8f:a0:1f:3e:b4:c7:5e:15:6e:81:
47:e5:c6:da:ee:97:e8:fe:02:9b:e4:ad:66:d4:ff:
3b:e0:af:51:23:51:1c:be:8b:a4:e3:05:67:e2:bf:
bf:f0:dd:aa:79:a5:1d:6b:1b:e0:0d:bc:29:04:28:
08:c9:34:54:54:57:f0:1d:03:2a:6a:e8:5a:b6:7e:
9f:74:59:4a:9c:9d:7e:bd:16:8d:e9:83:cc:ab:44:
bd:eb:dd:76:7e:9e:45:fa:fb:b3:df:ce:23:30:82:
05:26:d6:03:ac:33:ce:50:48:a5:d6:a5:7f:c2:89:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F7:2E:83:DC:0A:E8:86:E1:98:E0:0B:0C:EB:1D:4A:96:C3:88:74
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/w_cug9wK6IbhmOALDOsdSpbDiHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.53.0/24
Signature Algorithm: sha256WithRSAEncryption
56:9c:b5:40:91:b6:5a:a4:ab:eb:2d:05:55:3a:7a:14:5a:97:
a4:64:2a:a6:d7:68:ae:8f:d3:a4:a3:9f:dd:9d:36:a0:52:a8:
17:4c:58:8a:3f:27:af:6a:1e:c1:71:db:88:85:68:bc:74:81:
51:46:06:42:ee:7b:78:f8:6c:08:58:cf:2d:ab:37:7e:2b:99:
ed:21:47:8e:a4:af:94:18:14:85:c7:1f:32:a8:f1:2b:c3:9b:
c2:fc:e0:a9:0f:62:98:72:95:8f:3d:5b:c0:51:7c:7d:26:d5:
80:5f:91:4d:75:6d:52:d8:0a:c4:c7:01:92:84:bb:e6:62:77:
d0:f5:f8:6c:1c:91:cc:c7:d6:27:b2:5a:83:66:88:d4:d2:cf:
d7:37:e2:da:32:15:d3:48:5e:75:8a:43:6d:c8:54:70:26:11:
3d:c2:37:15:2f:48:d2:e1:c7:0a:45:ce:b4:48:28:61:e5:7c:
c8:19:a7:d5:cc:da:1e:98:e5:a4:b5:3a:75:cf:ad:21:f5:d0:
6c:e2:74:87:8f:b9:73:4b:f7:45:ac:e7:d8:79:78:3c:2a:ed:
bb:fb:e2:82:e1:7d:00:68:d5:e7:02:70:5c:38:b5:aa:35:43:
ec:35:2d:9f:91:a0:0a:ff:08:ff:51:9f:f2:c7:b4:91:21:98:
ef:4b:60:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:32 2025 by rpki-client