Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa
File: wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa (raw, json)
Hash identifier: ReqT7jsHEoa7AvfRGw7Yv2wPcS9GQjwhHtVeUywingA=
Subject key identifier: C2:D8:CD:EF:C6:3F:77:56:FA:3B:A5:03:B5:25:36:07:52:37:BF:D6
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 01942748922B81E466E5511F976DE3E4F91E
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21050
IP address blocks: 94.187.160.0/24 maxlen: 24
94.187.161.0/24 maxlen: 24
94.187.162.0/24 maxlen: 24
94.187.163.0/24 maxlen: 24
94.187.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:92:2b:81:e4:66:e5:51:1f:97:6d:e3:e4:f9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2d8cdefc63f7756fa3ba503b52536075237bfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:8e:3a:85:9b:7e:aa:da:7b:af:4d:d7:67:
3f:13:ea:1f:24:aa:4e:cc:fd:93:b8:d2:6e:2f:35:
ba:5b:3b:78:b0:01:95:ee:7f:c7:b7:26:dc:7a:d7:
ac:d4:bc:db:19:ff:f1:15:a4:be:ec:bb:3b:95:bb:
9c:3c:a0:c4:d1:58:92:ce:59:80:fc:ad:c8:33:6c:
e1:76:96:26:40:68:3d:9c:5e:2b:af:fa:89:f2:f3:
73:04:1b:84:c1:4d:b2:ee:54:48:e3:0b:9c:bb:07:
42:e6:f2:3f:d9:ee:e0:f1:ab:b3:da:17:04:ec:9f:
05:87:a3:98:af:4c:89:b5:cf:ce:18:78:73:ca:c6:
7e:11:f5:12:51:97:36:be:de:ed:dc:81:84:92:03:
5f:92:9b:f6:fc:67:e7:a3:d7:f3:08:7d:3b:7f:4e:
37:f9:64:cb:cb:fd:5d:dd:73:82:b8:a2:ca:a5:85:
44:9f:df:d3:6f:57:03:0d:87:f5:d8:a9:68:ab:71:
f0:0d:22:11:47:bc:ae:22:24:51:10:c7:e5:44:eb:
85:18:b9:53:c4:32:c2:4e:61:94:54:95:eb:67:71:
45:6f:f5:3c:6a:8c:65:db:21:b8:5f:67:82:d2:45:
f2:50:a0:47:ff:2e:b1:fb:5e:b7:02:b9:01:90:77:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:CD:EF:C6:3F:77:56:FA:3B:A5:03:B5:25:36:07:52:37:BF:D6
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.187.160.0-94.187.164.255
Signature Algorithm: sha256WithRSAEncryption
b3:47:c9:58:21:34:2c:bb:d0:3c:94:3e:c4:59:9c:7c:e1:e7:
d3:ff:f1:29:83:ef:06:f6:2f:1a:6e:e8:67:48:ea:e2:03:45:
e9:ae:a6:ef:00:4c:df:f7:bb:d8:28:b6:21:c4:0d:20:fc:9d:
be:c5:1f:2f:f2:94:ef:9d:05:3f:f0:7c:18:bd:44:c6:9a:bb:
1a:67:3d:da:cf:8c:1b:ad:d4:a9:29:d8:08:66:3a:0d:26:c4:
69:f9:5d:f3:be:e5:4a:66:72:29:06:3c:24:21:aa:31:0a:03:
9e:59:99:0d:e2:ee:c0:27:8d:71:c8:8e:19:96:d5:e9:d9:34:
d2:e0:fb:5c:8e:80:87:a7:3d:a1:86:8d:53:61:b5:bf:d4:4c:
c2:a4:00:04:b7:9e:4f:cf:1e:10:e0:cb:1b:ea:12:85:03:9c:
78:0c:3f:33:09:d5:4c:40:0e:d9:92:fa:94:17:ba:da:0c:0f:
61:13:c3:82:ec:7a:f8:7e:0b:83:e7:dd:e0:98:ac:d4:07:99:
71:a8:20:b5:08:74:a5:91:ea:f5:21:1b:af:54:17:5f:7a:ee:
9d:fe:58:32:22:1e:2f:9d:cd:06:31:b8:f3:d9:1e:62:1b:e6:
01:71:f5:0e:3f:61:77:28:b5:08:b8:fd:2c:f6:b2:b0:3c:ac:
1d:6e:cb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:29 2025 by rpki-client