Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/W_W3DuCdWyh1NhDi85D3Q1QNefk.roa
File: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (raw, json)
Hash identifier: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=
Subject key identifier: 5B:F5:B7:0E:E0:9D:5B:28:75:36:10:E2:F3:90:F7:43:54:0D:79:F9
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 0194266C1413B28F5070C0A4793F8BC59CC9
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/W_W3DuCdWyh1NhDi85D3Q1QNefk.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49567
IP address blocks: 31.217.240.0/21 maxlen: 21
45.154.100.0/22 maxlen: 22
45.155.24.0/22 maxlen: 22
84.252.108.0/22 maxlen: 22
94.198.120.0/21 maxlen: 21
185.76.224.0/22 maxlen: 22
185.213.132.0/22 maxlen: 22
2a03:7100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:14:13:b2:8f:50:70:c0:a4:79:3f:8b:c5:9c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bf5b70ee09d5b28753610e2f390f743540d79f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:76:db:e1:ea:e1:7e:d0:ea:7e:64:0b:b7:
cf:a3:2a:c5:8b:8a:a7:ba:90:0b:f8:92:84:c9:af:
b1:f0:50:88:16:59:02:03:17:d6:b5:51:cd:c9:43:
a6:55:06:1a:b6:1e:3c:46:a8:7a:e5:76:18:ab:3b:
7a:da:88:c6:b3:78:c9:21:b9:5a:5b:77:22:a4:0c:
82:8a:e3:f5:42:82:82:d9:9f:a1:6a:69:49:98:fe:
de:da:20:c9:19:fe:ad:91:99:64:83:89:60:76:1d:
d7:8e:5d:f4:7d:b9:91:11:5c:74:dc:e3:45:2f:1d:
3d:2f:5a:43:f5:27:e2:f7:bc:dd:a6:0c:af:94:27:
a6:95:5b:a5:e4:a2:95:be:69:85:f2:5a:d6:36:a3:
d6:1f:8b:bf:99:ab:10:b5:e4:97:0f:7a:9c:da:ac:
f6:1c:dd:94:5c:37:05:22:6c:5b:67:1e:ab:c8:cb:
ac:32:ad:6b:82:6f:ac:a0:e9:73:8c:f0:fe:96:1c:
ed:28:e8:24:65:83:00:a1:fd:f2:d2:08:91:ad:e6:
d4:22:b9:8b:9e:97:ab:fb:5b:d9:a5:f1:d2:79:2e:
cc:97:e7:ab:a8:aa:1b:c5:5a:9d:97:1a:be:ff:eb:
a2:3e:09:aa:72:9f:aa:6e:3b:81:c2:6c:c8:40:77:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F5:B7:0E:E0:9D:5B:28:75:36:10:E2:F3:90:F7:43:54:0D:79:F9
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/W_W3DuCdWyh1NhDi85D3Q1QNefk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.240.0/21
45.154.100.0/22
45.155.24.0/22
84.252.108.0/22
94.198.120.0/21
185.76.224.0/22
185.213.132.0/22
IPv6:
2a03:7100::/29
Signature Algorithm: sha256WithRSAEncryption
95:d1:79:47:7e:54:88:61:61:5a:06:2d:d3:6b:26:74:15:cf:
dc:79:1d:81:71:69:14:85:b8:c1:f0:82:65:0b:af:bf:f9:ee:
1c:13:e7:04:52:e8:3e:ba:94:a7:e7:34:22:17:05:0c:1b:1e:
29:98:cb:5b:fb:f8:ec:23:9e:5a:b2:64:6d:cb:d3:7c:37:46:
67:89:6a:74:29:12:a3:c2:24:e5:f9:3d:da:ec:28:e6:9f:f6:
1b:19:84:d4:2c:08:d3:9c:5c:05:70:0f:c3:77:a1:dd:08:93:
33:bd:81:0f:bc:9f:ce:d9:20:24:cb:50:ae:01:cf:64:f2:98:
57:31:10:6a:c1:9e:aa:ef:ac:5d:cc:12:a6:8a:d4:42:c7:d3:
c4:57:26:f3:4a:2b:f9:b9:e1:d1:42:ec:85:82:56:eb:7b:31:
ab:b6:9e:f9:0d:5b:1d:28:ad:55:76:6b:c1:cf:22:a1:e1:26:
57:23:d9:92:82:92:92:22:33:13:ff:e6:37:27:ac:42:c3:cc:
1d:3b:64:41:45:6d:24:8e:f5:5b:2d:f5:58:4a:02:ae:76:7c:
cc:1d:f6:dd:17:7d:75:13:be:db:bb:29:38:dd:ce:1d:74:71:
3a:c5:4e:cb:c5:03:0c:d5:d5:54:ea:3b:84:9a:6b:2b:5d:ac:
e0:20:5b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:18 2025 by rpki-client