Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/whaXv3m2KXUyLqTDL7uFEenX45U.roa
File: whaXv3m2KXUyLqTDL7uFEenX45U.roa (raw, json)
Hash identifier: 4I07kPqNYvHv2/46zJ8GoUsaXFdHKGqhCU3Tx9Bw2+U=
Subject key identifier: C2:16:97:BF:79:B6:29:75:32:2E:A4:C3:2F:BB:85:11:E9:D7:E3:95
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBB4E01A85290E594A127E429C25F7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/whaXv3m2KXUyLqTDL7uFEenX45U.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50751
IP address blocks: 195.62.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b4:e0:1a:85:29:0e:59:4a:12:7e:42:9c:25:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c21697bf79b62975322ea4c32fbb8511e9d7e395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:44:8a:05:5b:7a:65:b7:f9:68:aa:05:27:
01:69:93:6e:cb:dd:1e:0f:29:49:99:b7:fa:a2:0d:
85:e0:ab:e6:ae:42:87:7d:ee:59:6f:01:56:77:14:
b7:23:9f:83:83:3d:27:95:15:9b:21:84:a2:8e:35:
62:8e:89:a0:89:a0:35:f9:76:4d:8e:78:c3:76:24:
45:60:e9:61:80:40:b3:c3:39:aa:db:8c:b6:6a:87:
f2:d8:e7:6c:97:c4:2d:a4:fc:f3:8a:58:0b:da:98:
5f:31:a0:4f:b2:9d:01:c2:fb:0f:d6:d8:57:96:69:
41:25:bd:d1:89:3f:1a:f9:72:d0:7c:42:7d:7d:57:
8c:b7:6d:58:16:5a:39:73:06:37:6b:22:e9:d9:f4:
a4:ed:57:d8:11:96:58:e3:06:50:46:53:f5:a2:71:
6c:19:86:c0:35:91:d3:09:07:37:ab:68:65:0c:40:
de:c2:96:48:20:48:1f:14:24:86:69:ee:fe:2e:e8:
45:eb:de:f5:03:74:99:87:40:aa:d2:2c:8f:ed:87:
24:7d:7d:da:43:97:c7:c9:41:db:59:47:0d:59:0b:
f1:4b:d4:d6:08:73:77:24:40:2a:17:e0:a0:ad:ff:
71:4d:1d:9a:8f:63:9a:8e:16:00:66:c6:75:36:8b:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:16:97:BF:79:B6:29:75:32:2E:A4:C3:2F:BB:85:11:E9:D7:E3:95
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/whaXv3m2KXUyLqTDL7uFEenX45U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d7:de:64:e2:68:87:1a:03:aa:ba:9d:f9:c1:2d:a5:25:df:
73:7e:55:5f:7e:75:a6:40:32:2a:0b:43:b1:41:34:2a:c5:be:
74:ca:40:e2:bb:cf:cc:33:34:1d:30:9b:9e:3c:4c:47:9f:1c:
01:01:67:b3:ca:b5:a0:58:8e:8f:25:d3:fc:a5:89:7a:6c:9d:
59:b4:d7:74:65:1a:69:cf:46:f7:ae:ba:3c:a3:3a:45:74:47:
db:2b:82:e3:eb:9b:a6:72:4d:30:5a:f8:38:69:34:21:c0:37:
ab:37:73:75:f7:5f:f0:e9:bd:2f:0c:b8:12:b2:6d:b2:29:6c:
e0:1d:d2:eb:56:1c:8b:a7:44:4d:0c:5d:6e:e1:93:cc:4d:41:
3c:7d:2b:a8:28:94:52:4f:18:d3:51:86:d9:35:45:20:f2:87:
44:33:75:89:11:03:e6:10:20:5f:a8:6e:ce:fa:af:8f:24:12:
83:4e:64:29:ee:5e:45:20:49:2f:2d:43:cf:bf:b2:75:64:cb:
be:e7:b0:34:f4:8c:ff:b8:c6:7c:e2:d9:5a:ab:8a:b5:63:8c:
1d:95:04:a7:3a:e5:9f:fe:91:a0:09:50:8a:5b:cc:6c:c8:e3:
24:3b:2f:a9:bc:d0:5d:ba:ee:93:83:00:49:5d:1f:b7:3a:73:
39:ce:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:51:03 2025 by rpki-client