Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/wOkYAGqpSPBGigfUEv7El852HGA.roa
File: wOkYAGqpSPBGigfUEv7El852HGA.roa (raw, json)
Hash identifier: jGAVgltAX4k1B+fH3k6Z7JMTyuIFNv8n6kIlzZB4Zww=
Subject key identifier: C0:E9:18:00:6A:A9:48:F0:46:8A:07:D4:12:FE:C4:97:CE:76:1C:60
Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Certificate serial: 0194221FB0D7538259B7CC3513FDAADD7E4D
Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/wOkYAGqpSPBGigfUEv7El852HGA.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24889
IP address blocks: 46.253.176.0/20 maxlen: 20
80.254.64.0/20 maxlen: 20
93.94.240.0/21 maxlen: 21
109.205.168.0/21 maxlen: 21
185.196.120.0/22 maxlen: 22
2a02:200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b0:d7:53:82:59:b7:cc:35:13:fd:aa:dd:7e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0e918006aa948f0468a07d412fec497ce761c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:17:f2:0f:da:d8:f6:45:f3:18:fc:7c:d7:
77:6a:4a:c1:6f:00:9c:8d:1e:0b:16:e5:17:34:45:
c8:30:60:44:36:ab:a5:29:62:c4:51:49:b8:82:e0:
49:e0:88:12:33:f0:8b:e3:ef:0a:c2:52:70:c6:88:
e4:f0:af:2e:6c:cb:70:f2:d5:6a:17:0d:11:72:58:
c9:85:75:2f:f4:0d:3a:66:67:ed:45:89:20:77:df:
e7:82:01:c5:cb:5c:ff:06:57:be:1e:88:1b:d1:d1:
cc:1c:0c:95:04:3c:ff:2d:0c:17:d8:47:56:fb:33:
c6:03:07:f1:60:52:b7:9c:98:aa:fe:ee:03:6a:de:
f7:8f:e6:5a:d4:95:42:5b:ae:ff:a1:43:12:20:ff:
31:df:c3:f4:02:47:34:4b:a8:4c:3e:c9:08:d7:ce:
4e:4c:fd:7d:d1:41:7e:68:59:ad:01:f0:7e:ef:21:
d5:0d:8b:33:0d:09:c4:30:3e:1a:2b:43:0e:e3:16:
17:22:bd:b0:6f:f8:37:77:83:4b:b4:2d:ec:51:f8:
18:d7:52:db:48:2f:69:b6:e0:07:5f:5f:18:f6:65:
38:32:81:6b:be:be:d4:d7:63:bd:2f:71:1d:ed:ee:
5a:89:96:d1:21:18:da:85:6e:66:58:c7:8d:4e:af:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E9:18:00:6A:A9:48:F0:46:8A:07:D4:12:FE:C4:97:CE:76:1C:60
X509v3 Authority Key Identifier:
keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/wOkYAGqpSPBGigfUEv7El852HGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.176.0/20
80.254.64.0/20
93.94.240.0/21
109.205.168.0/21
185.196.120.0/22
IPv6:
2a02:200::/32
Signature Algorithm: sha256WithRSAEncryption
8f:0a:f2:40:91:77:6b:a4:24:e2:84:99:e6:65:15:f0:58:8d:
ca:84:79:7b:c4:bd:04:03:7e:1f:76:f3:42:f1:42:38:b5:dc:
5e:d8:68:83:0a:be:44:46:f3:0a:cb:82:75:1f:d9:5f:22:e9:
b4:f3:02:7b:7a:b9:70:27:0f:68:36:f3:91:ed:38:a1:7a:74:
72:a8:e3:7f:c9:fb:c8:29:a3:4e:24:a4:82:d6:26:49:f8:60:
ed:c4:99:92:85:65:ec:3a:50:7c:f1:ef:63:92:9d:a6:eb:89:
7e:21:23:b0:e2:cc:25:46:e7:cd:ae:08:3d:0b:3c:e9:e6:cd:
ae:18:9d:5b:70:fd:3f:1d:7d:c1:51:b2:e1:36:29:30:ae:a9:
7f:5c:8f:8b:2b:7b:7a:26:69:73:f7:10:58:55:aa:4a:5e:97:
4b:c5:d6:5e:d9:d2:c5:0f:c9:16:fa:9c:82:87:a7:15:2e:ed:
c5:22:64:43:c4:c5:f0:c6:cc:82:4c:de:c8:da:45:93:f7:ee:
96:80:66:f6:2f:d2:34:09:dd:52:e5:49:55:ee:2c:26:eb:67:
49:53:d6:3a:26:f4:5c:e2:c3:0f:44:1d:57:6e:2b:ba:f8:3f:
76:c8:f5:1e:2e:65:4c:81:0a:e4:92:ec:d6:d1:6d:97:6f:b0:
af:e3:4b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:33 2025 by rpki-client