Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/wFiWhGfsPPPiHPKgaPOOOuMQ59k.roa
File: wFiWhGfsPPPiHPKgaPOOOuMQ59k.roa (raw, json)
Hash identifier: kPUheiP/1RIkZMjes3RF7D1Dk6VSyteFka8OLwBciXU=
Subject key identifier: C0:58:96:84:67:EC:3C:F3:E2:1C:F2:A0:68:F3:8E:3A:E3:10:E7:D9
Certificate issuer: /CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Certificate serial: 0194228DC38237DB2D7F6BBD2DB216D04A3A
Authority key identifier: C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/wFiWhGfsPPPiHPKgaPOOOuMQ59k.roa
Signing time: Wed 01 Jan 2025 15:48:23 +0000
ROA not before: Wed 01 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42160
IP address blocks: 185.19.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c3:82:37:db:2d:7f:6b:bd:2d:b2:16:d0:4a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Validity
Not Before: Jan 1 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c058968467ec3cf3e21cf2a068f38e3ae310e7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8d:34:30:4a:56:74:94:8d:25:b8:1b:4b:5d:
05:80:44:f4:7b:45:c8:af:f9:de:8f:7b:28:56:4e:
00:62:54:6d:35:6d:57:11:84:8b:a6:3e:9f:39:5a:
70:9c:cf:9d:8a:94:83:26:a2:d7:e7:89:79:4a:f4:
4b:4d:45:6c:d1:10:06:bc:21:69:9e:58:dc:db:e6:
85:9e:3b:a5:d0:64:6b:66:e0:53:89:9b:7c:ba:10:
8b:59:b2:d1:a5:50:b1:bc:c7:98:78:7a:18:71:8a:
32:5b:42:b5:45:a4:9e:73:19:b6:54:b3:c2:32:41:
3a:90:9c:55:79:eb:6b:fb:22:a9:a3:aa:67:17:5e:
61:d3:8b:3c:79:fd:b4:c7:80:16:d7:47:d7:e3:a8:
ef:cb:0d:e0:59:69:f1:52:93:14:59:b4:27:91:d0:
f1:c7:35:f5:ee:1e:e8:cc:ba:80:70:05:a4:86:0f:
35:78:86:6d:3a:35:8a:f7:f7:12:98:9f:05:b0:a5:
19:bf:57:b5:70:34:1b:c0:97:7c:b5:d7:25:ea:ec:
76:04:e7:48:df:92:9a:46:f7:5d:a1:1b:84:3b:6f:
68:bf:3d:45:86:2a:f5:2e:83:c8:5c:f9:9c:17:d3:
3f:75:69:08:5d:81:87:2b:25:48:b5:5b:c7:56:97:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:58:96:84:67:EC:3C:F3:E2:1C:F2:A0:68:F3:8E:3A:E3:10:E7:D9
X509v3 Authority Key Identifier:
keyid:C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/wFiWhGfsPPPiHPKgaPOOOuMQ59k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:a7:99:b1:2e:13:c8:98:d1:b2:af:ab:23:83:98:b6:87:11:
a7:ec:b5:2c:7d:83:22:7a:02:0f:82:64:c8:e7:6e:54:b5:b2:
cc:b7:20:f7:64:0b:12:88:c7:f5:40:7d:25:1f:93:4e:18:a2:
93:4c:74:cb:dc:1d:c7:5c:93:e7:ae:ee:ca:4d:82:7f:06:60:
68:3a:9d:48:e1:06:34:c4:df:98:72:d7:88:05:0f:bb:d8:96:
e7:c4:c3:e5:8d:b7:d7:8c:72:37:58:98:9b:37:87:ab:55:fb:
02:eb:50:8c:5d:fb:f9:8f:ef:26:e2:a9:8b:84:a5:54:87:e4:
d4:85:88:4c:58:45:ed:09:3c:21:01:03:7f:89:cd:15:7a:97:
a4:84:11:ab:9d:1a:19:88:86:8c:06:ee:c6:b0:1b:73:85:9e:
d5:26:e7:91:9d:0c:e1:d3:67:84:9d:ae:e7:ee:bf:50:38:2b:
3a:e4:7a:8d:16:73:49:7e:0e:88:f0:17:e7:db:cc:6e:51:80:
00:2e:a8:1a:14:d7:7e:c2:9e:0b:d9:2f:eb:71:0e:6a:40:2f:
f1:91:4b:a6:a8:8f:70:c3:20:14:b3:71:0d:5d:40:66:22:37:
72:60:34:34:b4:57:0f:68:6e:99:40:c7:53:3b:cc:80:ef:12:
d9:46:86:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:19:47 2025 by rpki-client