Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/wrGzB70sU_9SIqxlx-1pOzK4ufs.roa
File: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (raw, json)
Hash identifier: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=
Subject key identifier: C2:B1:B3:07:BD:2C:53:FF:52:22:AC:65:C7:ED:69:3B:32:B8:B9:FB
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 019426D8FF277E2B85267DDD0A63249F610A
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/wrGzB70sU_9SIqxlx-1pOzK4ufs.roa
Signing time: Thu 02 Jan 2025 11:49:02 +0000
ROA not before: Thu 02 Jan 2025 11:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47536
IP address blocks: 45.12.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 14:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:ff:27:7e:2b:85:26:7d:dd:0a:63:24:9f:61:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Jan 2 11:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2b1b307bd2c53ff5222ac65c7ed693b32b8b9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:82:b5:da:05:d9:8d:a6:2f:f8:bd:ef:dc:
ac:93:10:b5:33:53:df:28:8d:10:f5:90:74:94:03:
9c:f2:ca:90:c2:43:79:24:06:9e:e6:b9:7d:b2:5a:
e6:c0:9b:31:a4:4f:27:76:da:7b:00:a1:51:8e:47:
b7:54:df:85:e1:3c:91:03:34:a5:6b:49:6b:65:aa:
c1:ba:fb:af:3e:de:b4:36:83:ec:75:93:6f:e0:ef:
f4:35:bc:da:44:77:e2:7f:82:28:e3:26:24:25:3b:
a8:b8:77:29:d1:ec:9f:29:e3:21:3c:fb:fa:64:66:
04:6a:e9:bc:da:99:82:eb:1e:8e:d1:2c:83:58:dc:
cd:66:38:52:ca:8e:1b:59:8b:bf:33:33:fe:5f:3c:
29:5f:4d:de:45:bf:ad:a8:31:86:fe:58:54:ef:da:
1e:ef:45:25:93:20:99:2c:04:7a:9e:b7:fc:3e:2a:
bd:dc:e6:ef:34:9a:02:88:f7:9f:eb:40:b8:36:42:
b0:a8:ae:28:76:fc:78:b9:66:3e:53:30:9f:cb:25:
6f:70:25:9b:31:2d:cd:ef:79:29:8c:81:89:d0:5b:
5d:35:62:96:5d:5e:fc:1c:ca:4a:c7:5b:40:ea:ab:
57:d6:bb:0c:77:a0:65:b2:05:0a:ab:c7:2d:52:0a:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:B3:07:BD:2C:53:FF:52:22:AC:65:C7:ED:69:3B:32:B8:B9:FB
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/wrGzB70sU_9SIqxlx-1pOzK4ufs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:8a:0e:5e:ac:9f:be:7f:bb:db:a9:14:9a:31:6d:36:34:16:
43:9b:ea:82:83:49:8b:98:10:94:76:39:fc:8c:45:d1:8f:db:
fd:68:03:55:86:e2:77:8f:0f:b7:15:c7:98:2e:c8:bf:31:a5:
fe:01:bd:2f:63:f2:f4:a1:1c:1c:9e:15:3a:b0:79:4b:fa:ac:
c2:47:4d:34:b0:74:0e:86:3d:f7:78:c4:dd:c7:10:0f:39:58:
2b:bc:bc:15:a9:80:cb:ed:96:ef:67:21:6b:4f:0d:eb:24:f7:
31:73:b0:55:9b:36:db:e3:ca:e9:66:b7:15:ee:55:36:db:55:
8d:e2:41:79:e5:45:5f:b8:f5:2b:c5:b9:3c:5f:95:fa:42:4f:
7f:20:35:91:38:7f:33:d6:6d:54:5f:01:18:38:7a:2a:cb:1b:
67:e2:4c:10:45:a0:1f:22:5e:a5:6a:3e:60:77:c5:56:c2:1f:
96:f8:6e:59:00:5e:e4:5a:9f:95:bf:05:3d:7c:96:38:a9:b7:
32:45:2e:10:46:b4:2c:29:76:1a:e4:64:80:70:1b:69:24:83:
84:77:22:aa:fc:06:c9:ab:27:b8:c6:8c:d3:e8:3a:4b:e2:20:
87:56:75:45:c3:6a:bc:98:91:85:af:61:fc:8e:22:9b:02:31:
94:29:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:32:04 2025 by rpki-client