Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/wUIfpC982TJe9LEoT5KiHIBTzE0.roa
File: wUIfpC982TJe9LEoT5KiHIBTzE0.roa (raw, json)
Hash identifier: mKOmsceJTmagxAo1ahsYNgNzHVzNic1bNHliaS0QOGk=
Subject key identifier: C1:42:1F:A4:2F:7C:D9:32:5E:F4:B1:28:4F:92:A2:1C:80:53:CC:4D
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA8E8122C400554FDFF6EC5730F014
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/wUIfpC982TJe9LEoT5KiHIBTzE0.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 109.111.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8e:81:22:c4:00:55:4f:df:f6:ec:57:30:f0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1421fa42f7cd9325ef4b1284f92a21c8053cc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:11:0f:ed:85:d5:4b:d0:d1:cf:77:ed:e1:
7f:f5:1e:02:3f:37:05:42:bc:8d:ac:9f:8c:f8:ea:
32:c3:2d:2a:42:0f:1d:d4:72:12:57:2d:36:6d:2e:
f8:ab:91:07:e5:e0:68:b7:27:71:13:fd:cc:c2:41:
aa:32:93:a7:0b:e0:24:a2:6c:cc:ef:de:3a:a5:35:
ed:16:18:cb:69:ba:69:37:c0:da:c5:bb:99:10:a0:
3b:ad:01:a9:ec:00:3a:c1:a5:d5:d0:1f:81:3c:23:
e5:e9:7f:73:bd:68:03:e6:46:b7:e6:66:f6:b7:83:
83:de:6d:7d:cb:28:36:59:48:13:90:5f:66:e2:3d:
3f:8b:90:ce:92:d5:26:31:b5:97:30:22:7b:3f:cb:
dd:81:3b:f9:25:f0:40:97:5e:b7:cf:7c:b8:85:9e:
9f:fa:be:48:57:ed:30:93:fb:d4:38:ae:f5:be:33:
56:c5:1a:e6:ea:ad:ab:b5:bd:d0:a3:c8:cd:fe:e7:
0b:11:16:76:79:8d:2a:d2:4c:36:a1:85:db:02:cc:
04:4d:c3:e7:2e:28:89:94:f5:2d:a7:2e:b7:5e:be:
67:88:a3:0b:2e:16:9c:ed:10:d5:f1:c5:b9:27:40:
3d:b8:83:a1:44:c4:1d:14:dc:60:5c:ac:1c:fd:0d:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:1F:A4:2F:7C:D9:32:5E:F4:B1:28:4F:92:A2:1C:80:53:CC:4D
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/wUIfpC982TJe9LEoT5KiHIBTzE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.60.0/22
Signature Algorithm: sha256WithRSAEncryption
66:8c:a3:d4:37:e6:f2:a3:7b:22:a5:f8:57:57:34:cf:cd:17:
fc:b8:43:2c:cf:3e:09:b0:56:03:a7:44:b9:d0:29:40:ae:25:
04:b0:87:28:e9:b1:52:37:33:97:b0:9f:36:c0:f5:2e:4c:e6:
ce:b2:e7:e1:5b:66:9d:ae:35:c9:73:38:fa:dc:f5:76:9b:6e:
e2:7b:0c:4f:45:c9:a9:8c:14:f9:4e:71:1c:83:98:e5:9d:68:
3f:74:96:de:2f:7a:ec:e3:d7:be:00:0f:5f:a7:a9:c3:82:a9:
86:58:f6:d0:e0:66:bd:3f:bc:f3:22:2c:6e:38:8b:9a:d1:6d:
82:8f:d3:b0:52:0d:02:58:2b:ff:5a:2b:ee:f2:43:6b:dd:0a:
b6:0c:ca:ca:26:ce:26:f9:ec:4f:00:71:70:b0:09:b5:68:e2:
d0:db:fb:38:54:8f:6b:0b:1a:49:0e:b1:46:ff:28:39:f3:77:
bf:e2:06:50:56:fb:e0:35:b6:6f:68:24:c7:9f:64:aa:f1:2e:
25:a7:e2:25:d3:0c:59:c7:a8:8a:1a:31:b6:c3:72:7b:22:e9:
d1:64:8e:90:fc:35:d2:8b:1e:f8:94:ae:92:be:48:b2:02:61:
5c:9f:3f:41:d1:62:f6:04:b5:31:39:07:a7:4f:cf:13:2d:82:
a9:97:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:24 2025 by rpki-client