Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ws143xLtm0DjKr2BAAMIdPDuTPw.roa
File: ws143xLtm0DjKr2BAAMIdPDuTPw.roa (raw, json)
Hash identifier: WDymD6SRG0DdEqEO+G/CZ4mTc6jgQVw+EA/P2rYtX88=
Subject key identifier: C2:CD:78:DF:12:ED:9B:40:E3:2A:BD:81:00:03:08:74:F0:EE:4C:FC
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0195D30D7876F97A08573C817D03771AF10C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ws143xLtm0DjKr2BAAMIdPDuTPw.roa
Signing time: Wed 26 Mar 2025 15:23:50 +0000
ROA not before: Wed 26 Mar 2025 15:23:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51150
IP address blocks: 194.180.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d3:0d:78:76:f9:7a:08:57:3c:81:7d:03:77:1a:f1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 26 15:23:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2cd78df12ed9b40e32abd8100030874f0ee4cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:b6:43:17:9e:e5:10:a5:d9:73:ed:ca:57:
dd:9b:95:8d:d5:ce:69:da:05:5d:da:87:90:22:a5:
10:bd:6a:83:93:df:8e:6e:ff:1f:45:81:c4:63:fd:
87:f7:3b:a3:9d:60:73:3e:57:9a:d8:d7:ea:45:2a:
b6:fd:8c:e3:c1:71:d8:a3:f8:2e:39:02:57:28:5b:
a7:2d:4d:ee:f5:e4:2b:80:5a:27:de:29:b8:2d:c1:
21:74:f8:82:15:6c:f9:06:3f:4b:cb:b3:67:6f:1d:
b6:a0:84:7e:4b:a3:72:6d:ef:34:2e:56:72:a9:a2:
22:e2:18:c3:5f:80:ef:9d:70:8f:e0:a1:bc:4e:35:
ae:b4:6e:23:11:29:e5:56:0a:9e:ed:d5:da:26:98:
33:30:4e:72:41:1b:4f:62:89:b8:ce:80:07:fa:50:
8b:f9:ff:99:1f:a4:f0:38:5c:1b:20:93:79:b4:61:
1d:0b:21:7d:dd:5c:25:95:d2:fd:ba:08:58:42:14:
35:90:d1:61:eb:c1:25:4e:13:21:23:b7:a3:0c:74:
46:8d:e6:43:84:af:3c:5f:f3:d2:dc:f5:22:5e:41:
6e:78:b3:6a:b1:99:d1:3e:1a:30:25:ae:da:45:c3:
01:39:c0:ef:75:5b:94:bd:23:3a:e7:fd:13:fd:92:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CD:78:DF:12:ED:9B:40:E3:2A:BD:81:00:03:08:74:F0:EE:4C:FC
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ws143xLtm0DjKr2BAAMIdPDuTPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5a:14:6b:b1:bb:a0:7b:f0:7b:66:d9:f4:3b:8e:ec:52:84:
b0:28:4a:01:10:5a:9e:91:44:42:05:b8:5c:86:d9:09:1f:13:
07:5a:3c:5d:60:c4:fb:69:78:5f:14:e4:9f:a2:a2:97:f5:d3:
52:b4:fd:6f:f4:a7:6c:e3:15:74:5b:0a:8a:86:d3:ac:d0:3c:
08:22:45:dc:29:18:cd:ce:5e:b3:ed:d7:c5:e8:83:3f:b6:c8:
94:3b:c7:2f:60:10:49:7a:dd:a8:e8:c5:d4:37:e8:6a:54:2e:
17:26:78:03:6d:c2:ed:d9:44:d9:86:33:9b:4d:31:56:bf:47:
2d:5a:50:73:c7:23:94:2e:2f:1f:da:96:5f:a0:d9:01:10:f1:
a0:0c:b5:de:e2:85:f5:91:d3:73:a2:7a:2a:57:34:e7:8b:a2:
ab:d3:b7:7b:b5:5e:29:d5:e9:3b:a7:dc:9e:09:54:97:85:a9:
10:50:f8:aa:57:dc:13:c8:ca:14:c1:fb:ce:66:a8:a5:95:3d:
5f:08:73:01:b8:6d:6b:7d:22:7e:76:e3:91:ec:0f:5f:29:d9:
50:14:3e:cf:54:31:b3:da:06:63:df:f2:1c:40:4b:9e:2f:be:
01:a8:73:e1:ad:8a:76:4e:21:c2:fa:58:19:6f:a3:2b:78:ef:
cc:d9:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:13 2025 by rpki-client