Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/w9u-iq9HQmmSpA58usBGj5VWpns.roa
File: w9u-iq9HQmmSpA58usBGj5VWpns.roa (raw, json)
Hash identifier: ebZ703D4CGF85tWdcmJd8B3P1oiiNNvM6TpGRigzvuk=
Subject key identifier: C3:DB:BE:8A:AF:47:42:69:92:A4:0E:7C:BA:C0:46:8F:95:56:A6:7B
Certificate issuer: /CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Certificate serial: 0194244509B62E7C592B3DB24CF3583EFE79
Authority key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/w9u-iq9HQmmSpA58usBGj5VWpns.roa
Signing time: Wed 01 Jan 2025 23:48:11 +0000
ROA not before: Wed 01 Jan 2025 23:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 193.8.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:09:b6:2e:7c:59:2b:3d:b2:4c:f3:58:3e:fe:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Validity
Not Before: Jan 1 23:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3dbbe8aaf47426992a40e7cbac0468f9556a67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:10:e1:4c:29:81:e3:5a:64:c4:0a:30:23:
b6:7e:c3:d6:b0:b1:e1:7e:24:1f:d7:cb:d9:ac:ae:
7a:80:f2:c6:fc:ae:dc:47:c4:6b:89:94:03:74:05:
97:d7:21:ec:1b:bb:c9:6e:54:2a:ed:3c:6f:56:e2:
af:f6:bf:95:40:c1:ef:9e:fe:16:3a:42:24:21:52:
01:e3:10:78:d3:3c:5f:84:30:d4:d7:f7:08:a6:df:
48:65:cc:0b:b5:fa:41:85:39:20:98:0b:50:ad:1a:
cc:2e:21:dd:ec:6f:b4:47:6a:37:9c:e4:f2:d3:4b:
d6:2a:59:b0:e4:53:e3:24:93:ec:b0:0f:0f:03:ff:
5f:83:5f:fe:b4:ed:c2:61:02:02:db:84:06:7b:53:
18:b6:7c:ec:d7:55:fb:62:4e:a0:e7:fa:d9:c2:75:
b4:7e:61:ba:02:4d:0b:8d:2a:c2:f6:9c:c2:87:82:
1c:4f:91:b4:b9:0e:b2:19:3d:50:fb:b1:41:46:00:
9f:c1:73:7c:08:95:b3:5d:95:90:b5:f3:c7:3e:6a:
79:1a:72:49:f1:7a:d5:62:2c:08:dd:39:55:f9:16:
e9:be:8d:1a:73:65:bf:1e:1d:b7:e5:ce:77:ec:98:
4d:74:1f:8a:29:77:ae:c5:fc:5f:1d:24:db:9b:66:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DB:BE:8A:AF:47:42:69:92:A4:0E:7C:BA:C0:46:8F:95:56:A6:7B
X509v3 Authority Key Identifier:
keyid:51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/w9u-iq9HQmmSpA58usBGj5VWpns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:9e:6e:6c:30:a1:64:29:e0:ef:0d:11:b8:14:dc:e0:1a:40:
c9:14:fe:1c:24:ab:a2:38:66:2f:61:bc:b8:e2:11:cf:8c:dd:
31:b3:86:f9:b5:de:5b:ae:03:3d:51:4d:86:16:1e:85:49:f9:
10:fe:6c:87:3f:80:d0:50:6e:5b:f4:40:47:d2:5b:62:ff:e1:
8d:cc:50:18:9c:31:50:db:e4:d1:85:e1:9d:8d:6e:de:da:f5:
de:9e:66:1b:38:01:ab:53:e9:da:6d:54:05:c8:85:ed:1f:9a:
70:01:c4:ba:ab:de:c1:f5:ba:26:c9:92:36:08:e7:c4:09:79:
bd:d1:10:dd:f7:c4:ce:8e:6a:4d:9a:c0:3b:c9:d5:6f:a6:25:
9e:45:b8:bf:4d:97:2b:24:01:09:fc:1d:40:4d:b6:26:f8:c5:
de:5f:e6:96:f6:68:5f:df:5f:33:23:f7:6c:25:ad:2c:fc:b5:
73:d3:38:58:8b:d5:a9:d3:7e:fe:05:32:5d:b6:fa:94:e4:b6:
eb:8b:48:b2:c1:7e:ef:29:3f:bb:20:97:ed:7c:f0:ee:b4:a6:
5e:19:79:ab:13:08:0b:97:33:4f:1d:49:6d:6e:1e:9c:70:1b:
ba:a1:45:78:49:2c:fb:5b:13:da:d2:03:2d:12:86:d4:0c:50:
9b:8a:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:53:02 2025 by rpki-client