Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa
File: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (raw, json)
Hash identifier: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=
Subject key identifier: FB:09:0C:5D:23:A0:0A:C0:1B:7D:C4:C9:A1:0F:4C:FF:D9:84:6B:C5
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 019425212F5F6AEEB8EBFF76ABDDC5F892FC
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa
Signing time: Thu 02 Jan 2025 03:48:39 +0000
ROA not before: Thu 02 Jan 2025 03:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 155.105.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:2f:5f:6a:ee:b8:eb:ff:76:ab:dd:c5:f8:92:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Jan 2 03:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb090c5d23a00ac01b7dc4c9a10f4cffd9846bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:b0:ff:e7:f8:74:73:5e:ed:50:21:e0:e1:
fa:6c:2b:a4:0c:7e:cc:56:95:14:3b:d6:22:c6:63:
99:26:f6:57:22:fa:16:05:ae:aa:7b:09:99:4a:d7:
8c:56:44:92:2e:66:fd:c8:d0:af:66:c3:d2:c1:fb:
1e:24:1d:f8:e0:dc:90:a8:6c:18:1e:18:c5:73:22:
d0:b3:fb:df:bf:7e:c8:75:37:2d:98:a8:da:4f:92:
2c:f8:07:a4:31:b8:a2:05:e9:7c:ab:a6:d0:3b:94:
38:0f:49:fd:95:bd:30:9e:ec:8c:1a:a8:10:e6:5b:
cd:74:54:b2:4a:7c:16:06:ed:24:a6:41:86:58:b1:
46:42:df:a6:43:a8:e4:f8:c7:bb:68:b8:a5:bf:b0:
c9:5a:2f:ab:84:ce:d2:d5:b5:df:51:d0:87:49:2e:
ad:e4:46:90:bd:12:db:c3:69:b1:a8:18:34:1f:52:
5a:42:0e:e1:6b:f9:80:3e:8a:bf:c8:ca:1e:6d:fe:
5d:b4:4b:2c:dc:2a:40:a8:d4:08:2e:ec:f5:6c:ef:
aa:12:18:ae:50:e4:5f:a4:a3:94:ce:cf:66:d7:25:
98:53:cd:f6:13:55:f1:73:d7:1c:67:ee:cc:d2:fc:
4e:41:12:7d:88:a1:ac:e4:fe:0a:ce:6e:4d:a3:6d:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:09:0C:5D:23:A0:0A:C0:1B:7D:C4:C9:A1:0F:4C:FF:D9:84:6B:C5
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:d2:22:38:93:bd:d3:45:08:39:14:ee:d7:ef:74:4b:71:27:
cc:b1:22:64:30:71:d0:05:06:ef:3a:18:62:d1:53:25:8d:c1:
56:aa:8e:3e:d0:72:34:93:46:24:75:8f:bf:e8:15:13:16:ae:
3d:9c:a3:12:c5:94:1b:f3:a3:d5:7c:ee:f1:42:24:ae:ba:5c:
e5:21:a4:c7:e8:68:79:bc:15:3d:e8:37:48:00:3c:32:a2:49:
c0:70:28:8e:09:43:27:34:6d:8d:03:14:4b:a4:db:29:5d:66:
e3:82:c7:9f:7b:80:d4:d7:84:c3:cd:27:1e:87:73:96:27:d2:
05:38:93:53:28:88:be:60:95:12:b2:a6:a5:c0:17:3d:d3:4c:
3e:cb:8c:26:93:cc:9a:73:45:a3:98:75:9d:c4:21:b3:84:14:
17:be:9f:14:1c:b1:ca:28:23:a5:21:8d:ed:2e:a7:3b:72:a9:
f4:57:9c:49:ee:df:d7:1d:fc:92:02:8e:80:f6:a4:2d:43:2a:
a0:8f:f8:10:c3:e5:75:51:56:10:23:09:ab:82:b8:16:5a:12:
f3:48:53:c2:e9:cf:67:4c:66:a1:0b:0c:20:ca:bf:9c:5e:17:
94:89:f7:17:55:58:36:ad:34:57:b8:c1:86:99:29:17:c3:ba:
c7:4c:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:16:58 2025 by rpki-client