Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/woLw29-RG3GRgzF20cp1gId20nk.roa
File: woLw29-RG3GRgzF20cp1gId20nk.roa (raw, json)
Hash identifier: GBG9fMW8nfc0FTLP2myM9X+0j3gRBZ3yKsumioK++Rc=
Subject key identifier: C2:82:F0:DB:DF:91:1B:71:91:83:31:76:D1:CA:75:80:87:76:D2:79
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D7073C4ED9CC0A43DE0753699F15D2
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/woLw29-RG3GRgzF20cp1gId20nk.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48542
IP address blocks: 213.238.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:07:3c:4e:d9:cc:0a:43:de:07:53:69:9f:15:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c282f0dbdf911b7191833176d1ca75808776d279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:c4:2c:24:da:2c:4c:a2:24:87:b5:64:96:
a1:58:49:60:24:fe:8d:70:2e:2f:79:45:68:28:6b:
5c:4e:f9:78:03:45:aa:56:f9:4b:e0:9c:bc:86:85:
13:f2:c1:8b:21:ec:53:55:17:29:cc:6b:8e:d5:14:
54:7b:bd:2e:2b:fc:6c:13:0c:55:c1:54:ff:c2:66:
44:b1:95:4e:09:af:06:44:79:50:ee:43:14:c1:38:
6c:8f:e2:ab:7b:e1:28:5b:6b:80:32:bd:b7:50:2e:
66:49:8e:c2:bd:c4:df:98:c6:09:8d:13:5d:3f:13:
ad:3e:05:2a:0a:2a:b7:eb:70:48:03:2b:d9:65:77:
7a:9b:19:27:ba:d1:6b:e5:b2:fa:02:64:ec:dd:6f:
e0:d1:93:90:6f:53:c2:b1:6d:ec:ae:cb:aa:6d:34:
21:b1:c7:53:35:c1:e8:b9:82:05:04:04:d8:64:18:
39:74:9b:76:12:af:47:c5:50:90:9f:7b:d1:31:5c:
2d:bd:70:78:18:52:a4:3e:c9:7b:e3:59:1d:12:1f:
f1:0b:ce:d6:2b:90:e1:1f:ba:37:a4:76:11:8a:ea:
35:c1:6e:07:a0:72:61:56:57:0b:8f:16:ef:2e:a3:
9e:02:86:0e:5b:4e:df:97:7d:b5:08:5d:1e:0b:e8:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:82:F0:DB:DF:91:1B:71:91:83:31:76:D1:CA:75:80:87:76:D2:79
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/woLw29-RG3GRgzF20cp1gId20nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.170.0/24
Signature Algorithm: sha256WithRSAEncryption
51:38:50:2e:21:7f:95:b3:09:4c:ee:c7:0f:18:fd:07:9c:7e:
e5:97:e4:00:27:3f:ce:e2:1b:05:ee:3f:53:fd:23:2f:64:19:
ac:84:31:8d:77:b5:74:35:bb:ab:19:29:26:f8:1b:1b:cb:0a:
fd:9e:35:87:01:05:47:7e:18:5f:b8:07:49:7e:30:d8:36:d4:
c9:f3:d1:2c:d9:46:38:61:7e:b7:ee:30:87:e7:77:e3:47:a8:
59:3b:6d:f5:66:71:7c:8b:d1:16:72:a0:ff:74:44:d0:5a:b3:
c2:c4:3a:48:e9:90:bf:1f:d1:9c:5f:b9:f1:93:7c:5b:89:79:
75:ce:af:78:9e:cb:32:f9:ce:b5:ed:67:6c:e5:7f:38:17:de:
3e:81:2d:25:30:a5:5a:13:c7:5b:4d:ae:4c:bd:2f:1d:21:72:
e1:a4:be:a0:9a:56:60:7a:85:99:18:6d:51:4e:cc:0c:9d:88:
dc:01:ef:5b:30:87:34:e1:50:40:c0:cf:e9:08:ee:24:c3:d1:
2a:66:15:0e:fc:30:67:4d:11:cb:31:51:b3:91:ff:b2:f5:50:
a5:22:b2:06:c4:41:b1:a1:34:89:b7:39:65:b9:da:00:a4:14:
ab:9a:f7:3b:aa:c8:fd:cc:69:d3:00:ab:0b:2a:00:89:1a:fc:
77:3e:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:03:29 2025 by rpki-client