Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/wllNqt1P393lVw_WgHLjVq0jQ3M.roa
File: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (raw, json)
Hash identifier: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=
Subject key identifier: C2:59:4D:AA:DD:4F:DF:DD:E5:57:0F:D6:80:72:E3:56:AD:23:43:73
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 019420D63D373067C52215465CD1591B4C73
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/wllNqt1P393lVw_WgHLjVq0jQ3M.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57375
IP address blocks: 185.232.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3d:37:30:67:c5:22:15:46:5c:d1:59:1b:4c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2594daadd4fdfdde5570fd68072e356ad234373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:42:1d:72:37:c4:18:ff:35:9e:8c:a9:5e:
3d:dd:9b:44:7c:5f:33:e0:1d:8e:9a:ef:82:44:59:
1e:7d:c6:69:70:3e:f2:7c:c4:d6:16:5b:5e:ca:21:
ff:f3:b2:dd:5d:29:2a:8a:d6:4f:bc:34:51:fc:5f:
ff:04:85:65:e3:cd:dd:ad:c0:9f:99:68:98:95:d5:
5e:a9:5d:65:4c:51:00:f8:e7:f7:73:ed:c0:5d:9e:
8b:77:0a:79:01:98:74:ca:8b:3f:a0:06:4b:39:7a:
2b:55:04:20:2d:63:fd:54:69:c7:5c:07:b6:b2:c0:
fd:3d:5b:ed:2e:d2:cd:fc:43:1e:fd:28:6f:f4:aa:
6f:99:1b:65:a2:8d:1b:73:39:8e:0d:b4:94:8c:e4:
ff:93:ea:a2:90:f4:2e:ed:45:49:55:f4:4a:42:df:
2e:ce:16:a2:e4:d7:9c:ef:a3:ed:9d:1f:90:37:cc:
3e:c5:7e:a5:f9:5d:65:d6:56:e9:00:ad:98:98:cf:
3d:64:fd:93:2c:ec:1f:45:54:08:96:bd:53:df:b5:
fe:c0:13:d2:fe:87:0a:e3:9c:08:fc:2f:cf:fe:cf:
3b:46:bc:c8:2b:f2:ce:b1:1c:ea:d9:33:d5:65:bf:
7f:23:87:65:e6:2a:db:1c:f3:c5:e3:c4:49:29:55:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:4D:AA:DD:4F:DF:DD:E5:57:0F:D6:80:72:E3:56:AD:23:43:73
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/wllNqt1P393lVw_WgHLjVq0jQ3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.233.0/24
Signature Algorithm: sha256WithRSAEncryption
69:d6:b8:e6:41:cf:7a:f4:84:28:a5:8d:6a:e6:67:70:76:08:
6d:da:bb:27:07:fd:b7:bb:57:08:d4:64:06:46:10:08:33:56:
76:ae:cc:f2:7c:1b:99:08:c6:bf:ac:77:9f:e4:28:e8:78:e1:
26:98:51:46:8e:25:7a:a2:43:5e:f6:44:ee:b1:f8:ca:ac:bc:
af:ed:3d:f9:3c:0b:40:de:23:ef:12:3f:46:93:06:87:1b:94:
f7:fe:76:32:9f:3b:d7:a2:82:cf:08:82:c7:e5:b8:2c:e1:64:
1d:b4:29:d7:56:a4:a7:2b:c0:47:c3:8d:92:ef:28:67:1f:b0:
3e:14:5f:31:4e:43:f1:75:87:18:b2:b4:09:01:b8:5c:1b:ba:
10:52:22:ed:87:86:4e:48:d6:d7:d1:39:ed:f1:24:bb:d5:ee:
6b:6c:10:74:be:29:27:44:53:5c:f1:03:a6:fa:88:66:30:e1:
75:bf:51:f1:0b:35:2f:a9:97:1d:04:be:91:c7:5b:9f:c0:a7:
95:30:56:05:ae:28:6f:4d:c9:1b:b2:59:00:3a:ca:59:8f:8c:
90:b3:a9:ce:8f:07:d5:93:9e:84:64:80:b6:da:75:a0:f3:b9:
ec:56:93:6f:a0:d8:46:5d:a3:55:2f:b3:be:dc:38:9e:1f:85:
15:f6:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:59:40 2025 by rpki-client