Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa
File: WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa (raw, json)
Hash identifier: eRbcD2eGlg7uugMn/bCwDLTg5dFFAb5lQYD2uRhlGzs=
Subject key identifier: 59:76:17:E7:10:22:63:32:63:F8:9D:5C:24:94:49:32:B3:E5:D6:57
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01942444F64005F80C4EC09C75B744510A52
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa
Signing time: Wed 01 Jan 2025 23:48:06 +0000
ROA not before: Wed 01 Jan 2025 23:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210244
IP address blocks: 195.184.6.0/24 maxlen: 24
212.108.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f6:40:05:f8:0c:4e:c0:9c:75:b7:44:51:0a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 23:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=597617e71022633263f89d5c24944932b3e5d657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:a8:62:e3:b4:e7:03:e3:85:ff:a7:bf:32:
1c:1c:c7:00:83:3e:fd:41:1b:43:87:f1:f3:34:11:
a4:05:c5:a6:35:b8:73:a9:b4:9f:f0:b8:d5:b3:ee:
f2:3e:4e:92:f2:68:5a:1c:94:78:56:df:51:46:6b:
9a:85:d0:ff:dd:6c:3e:96:fa:8c:75:42:88:a0:0f:
29:cf:5f:ff:d4:08:39:ee:32:69:34:23:57:c5:3f:
51:f9:5a:f5:07:ee:3d:dc:b4:47:2a:80:1e:d1:10:
66:78:15:c8:f0:8d:17:ca:9f:0b:cd:9c:e9:cc:c6:
a7:76:c4:92:fc:a5:ee:7a:33:8e:b9:6f:30:6c:eb:
57:6b:65:59:af:53:9b:95:30:b2:2f:20:f9:65:63:
79:fe:ed:f5:b5:31:ec:07:9c:5b:32:e3:ec:c7:1e:
d0:bd:ce:05:0a:3d:2b:4f:d0:a4:c6:b9:3c:21:fa:
94:32:35:22:9b:2d:e5:bf:67:08:79:2c:22:7a:f7:
cb:6b:5b:3c:b1:cf:c7:dc:d9:eb:ae:a3:4e:f6:ae:
82:0b:22:63:00:77:2e:58:06:c7:54:86:be:f5:e3:
eb:75:6b:b1:66:a6:4f:47:20:e2:12:d3:91:12:9d:
d1:d8:c4:fd:96:eb:fd:ee:7e:da:78:28:2e:3b:82:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:17:E7:10:22:63:32:63:F8:9D:5C:24:94:49:32:B3:E5:D6:57
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.6.0/24
212.108.238.0/24
Signature Algorithm: sha256WithRSAEncryption
53:57:3f:75:60:31:e3:47:b1:cf:38:d8:2b:66:10:16:c0:07:
5c:c0:a3:03:a3:d4:e2:a1:bd:e9:37:26:45:cf:9d:7b:97:26:
0c:02:28:e7:3b:e3:c6:47:cc:8c:44:e6:79:71:58:3b:8c:7f:
c2:6a:b0:99:9c:61:49:83:f9:8b:d4:81:36:1f:ff:02:ed:87:
b3:fc:3a:29:c6:7c:b1:1b:f9:f8:3d:aa:c2:d3:6c:60:76:92:
d5:24:91:48:ce:1c:4c:67:86:da:23:31:cd:c4:38:dc:62:f8:
8d:47:f5:24:38:52:dc:3c:2a:6c:a9:09:a0:62:6e:7c:04:d5:
0c:13:1e:50:67:ca:ba:52:69:9d:d9:a3:48:44:08:3b:83:5b:
01:8c:84:5a:8a:34:cb:bf:a1:44:92:94:63:5f:d5:fd:c3:60:
ad:7d:d4:dc:50:57:a5:03:b2:46:5b:13:a0:63:6a:70:ba:9e:
30:0f:31:83:d5:b1:51:e8:11:6d:ee:3c:14:b0:00:ab:8f:e6:
f5:27:cf:a3:6c:b6:d0:1b:58:f0:6c:7f:c5:e2:5d:d0:8a:d3:
9b:d5:d9:c8:f4:8e:67:7f:69:68:b6:ce:29:ad:9f:54:b0:79:
84:10:ea:f4:33:0c:33:11:55:65:ee:57:e3:83:a0:81:71:a7:
79:2b:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:42:22 2025 by rpki-client