Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/_WlES2eSPPAcdb99IjbgTsc5Xro.roa
File: _WlES2eSPPAcdb99IjbgTsc5Xro.roa (raw, json)
Hash identifier: EOl3gK+o3EL4dSF6oUVZ6VSDAeYTaurQvmfArpGviOI=
Subject key identifier: FD:69:44:4B:67:92:3C:F0:1C:75:BF:7D:22:36:E0:4E:C7:39:5E:BA
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 019422FBA9A107C3F9DFB6C1E21756DA6E9A
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/_WlES2eSPPAcdb99IjbgTsc5Xro.roa
Signing time: Wed 01 Jan 2025 17:48:25 +0000
ROA not before: Wed 01 Jan 2025 17:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 164.18.96.0/21 maxlen: 21
2a07:b982:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a9:a1:07:c3:f9:df:b6:c1:e2:17:56:da:6e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Jan 1 17:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd69444b67923cf01c75bf7d2236e04ec7395eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:9c:12:00:e7:29:3c:c2:69:cc:53:3a:36:
a6:e1:ed:ec:54:3e:53:eb:ec:92:9c:ec:b5:a2:55:
9c:23:db:89:2c:1f:f4:9f:e6:26:ab:ec:ad:5e:51:
f9:0d:91:69:e6:d9:76:df:8b:03:5d:47:1d:23:42:
21:c6:48:a3:c0:f2:4a:1e:23:02:6c:f6:85:a6:e0:
9b:c5:f3:53:ee:e2:e4:7d:22:3f:e0:bd:12:98:30:
a7:ab:89:30:cd:21:3c:0c:ef:bd:47:3a:f6:75:14:
52:37:0f:bf:ef:9f:6c:ff:10:eb:b5:3f:5c:6e:09:
34:f2:65:f4:e8:8d:85:7a:df:2d:7b:5c:a5:54:50:
bf:6a:59:de:4a:49:4d:e4:a7:7f:03:4a:49:b6:dd:
dd:cf:e4:1d:1c:b6:e9:df:27:2b:27:0f:a8:b0:ad:
da:81:f7:76:a3:2a:c8:b0:3b:7b:e9:f5:45:25:c8:
f6:a9:57:98:d1:ba:1f:a5:6e:8f:1b:79:07:58:96:
7e:c3:26:3b:a0:9f:c3:6a:cf:00:35:e9:40:99:ac:
a5:d2:7b:d4:53:75:63:0e:a8:63:c0:da:a8:73:27:
99:6d:3e:37:8f:56:39:34:40:0d:c0:ef:63:f8:80:
a4:c3:ee:be:c4:6a:5c:22:8b:45:ba:cf:95:0e:a9:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:44:4B:67:92:3C:F0:1C:75:BF:7D:22:36:E0:4E:C7:39:5E:BA
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/_WlES2eSPPAcdb99IjbgTsc5Xro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.18.96.0/21
IPv6:
2a07:b982:c000::/48
Signature Algorithm: sha256WithRSAEncryption
79:2b:b2:4b:fb:5d:0e:3b:1f:f5:84:0e:bb:c2:59:5f:11:26:
97:37:d3:21:72:b9:09:2a:75:ab:72:6c:57:15:2d:b4:ed:28:
07:0d:1b:18:44:23:1a:70:7b:f8:14:c9:54:9e:e9:e1:ce:09:
74:0f:16:b7:0a:24:bd:aa:57:b8:2b:40:a6:9d:1b:79:0f:c8:
5a:83:90:8d:27:82:1e:74:7f:4a:34:a4:b1:62:cc:36:df:6e:
8f:0d:46:85:96:c7:65:2a:de:77:c5:01:af:cb:4a:21:09:e9:
b2:4e:ae:66:a9:86:34:1a:34:10:13:17:5f:f7:e9:33:d5:f2:
14:71:4a:08:ac:ae:53:f6:7c:3e:1f:70:29:27:bd:a0:47:0d:
d8:12:2c:9e:03:44:90:52:28:f0:43:b5:bb:c9:77:4e:cc:22:
73:6d:94:ad:e6:5a:62:e8:00:73:0d:fe:0e:f5:b2:1a:be:5d:
88:76:cd:01:a3:c2:99:47:81:63:12:a2:b5:2f:3a:65:41:d4:
6e:81:41:84:0a:84:54:a0:b6:14:9a:5e:d8:9d:e5:07:d3:43:
f2:8c:9e:b5:af:88:e5:e2:d2:e0:ef:32:e3:e8:72:5b:bf:1d:
d7:00:ea:f9:6d:70:90:cc:6c:52:e9:70:51:7c:c9:b1:8d:b9:
b1:75:77:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:11 2025 by rpki-client