Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa
File: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (raw, json)
Hash identifier: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=
Subject key identifier: C2:6B:91:98:F0:6F:FC:89:64:7C:10:55:FA:11:7B:A3:A5:14:20:B4
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 01948F01C9AE4A06453B16B49123807D235A
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa
Signing time: Wed 22 Jan 2025 17:14:06 +0000
ROA not before: Wed 22 Jan 2025 17:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 193.105.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:01:c9:ae:4a:06:45:3b:16:b4:91:23:80:7d:23:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Jan 22 17:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c26b9198f06ffc89647c1055fa117ba3a51420b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cc:1a:7c:bb:d7:f7:26:95:6d:eb:8e:41:b9:
09:67:a5:bb:8a:5a:64:da:af:e8:85:62:18:ba:6e:
3c:27:ec:95:61:be:c0:4a:ad:53:4f:e6:70:c3:88:
0f:1e:06:34:38:d3:dc:f4:54:fd:45:50:95:49:59:
83:0f:37:55:bc:6c:44:1f:5d:b6:e4:ec:ec:80:dc:
a5:2a:9f:0b:3f:4d:18:18:6e:00:75:33:4f:e4:50:
7b:30:83:da:bf:23:26:9d:7f:cd:99:df:9b:9e:b4:
09:cf:9b:4e:d1:4f:a2:e5:16:b2:dc:9c:ba:ab:0b:
bd:cd:16:9b:ba:41:f8:86:a5:a9:2d:01:fe:ab:6b:
2f:fd:7d:63:ae:2c:df:72:5d:b9:d5:bf:6b:49:83:
4d:6e:18:d3:91:55:c0:9a:56:0b:ff:c6:c3:69:ca:
0d:4b:0c:0d:4b:3f:07:a0:06:df:08:f7:46:ba:0e:
d5:02:96:3e:2a:d0:5f:95:44:ca:5e:8a:53:ef:39:
ba:fb:d2:8d:cf:e9:8e:be:e3:b6:22:fc:cd:44:d3:
0e:48:51:e5:1a:d3:79:33:1f:04:70:74:45:9a:d1:
42:6e:24:8c:03:70:3c:67:06:ad:05:9d:e6:08:66:
81:50:82:88:e8:92:d9:50:25:c9:28:6f:6b:46:34:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6B:91:98:F0:6F:FC:89:64:7C:10:55:FA:11:7B:A3:A5:14:20:B4
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:80:04:d2:1e:13:c7:43:dd:d1:23:bc:89:e6:f2:c6:9f:ff:
7e:75:1b:60:51:b4:06:1d:92:87:d3:54:d7:4b:ab:d4:fa:48:
74:e6:14:8c:b6:a8:5a:14:8f:e1:ea:24:b2:df:59:11:33:c4:
ae:e6:0d:31:f5:47:5b:1d:18:0f:d5:b6:06:85:e1:fb:d2:21:
66:df:de:62:78:cf:fc:0c:57:b3:37:04:70:74:43:3e:2c:d6:
a6:63:32:79:d2:54:1e:e4:19:47:58:28:b7:b0:b6:9f:af:ee:
be:ad:3d:42:0e:78:97:d5:d5:23:6e:11:6c:6a:69:6f:57:e7:
54:34:cd:7f:cd:fb:ef:bf:b2:c3:26:fb:12:c8:1a:5e:ae:a8:
b6:47:45:0c:bf:26:73:14:15:f5:e6:5d:05:76:a1:f7:24:ae:
e9:92:2e:fc:0c:b2:4a:45:e2:99:f4:9e:d6:2d:86:5e:bc:52:
57:cc:60:5e:78:df:c7:84:f4:c5:10:f7:47:86:7e:54:a5:4d:
52:00:d9:17:d5:7d:45:16:b9:b9:8c:8c:3b:d0:cc:81:15:3f:
dc:e1:3d:4f:18:08:8e:0f:7e:e9:c4:25:fd:29:90:d8:1b:39:
44:7a:32:56:62:f2:27:49:6e:f5:52:f5:ab:a5:17:32:85:d3:
87:9b:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:45:44 2025 by rpki-client