Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/Wi63x1CJXlZGfNJJvYSEjYX3SS4.roa
File: Wi63x1CJXlZGfNJJvYSEjYX3SS4.roa (raw, json)
Hash identifier: tSrW8yYQj/zhxzh9dR2YbQPqRj4MiI4gJVwxhewvr88=
Subject key identifier: 5A:2E:B7:C7:50:89:5E:56:46:7C:D2:49:BD:84:84:8D:85:F7:49:2E
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019427B58DC4F857F5768FF3A0CFFB028BE4
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/Wi63x1CJXlZGfNJJvYSEjYX3SS4.roa
Signing time: Thu 02 Jan 2025 15:49:57 +0000
ROA not before: Thu 02 Jan 2025 15:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56899
IP address blocks: 185.126.252.0/24 maxlen: 24
194.4.68.0/24 maxlen: 24
194.4.69.0/24 maxlen: 24
194.4.70.0/23 maxlen: 23
194.4.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8d:c4:f8:57:f5:76:8f:f3:a0:cf:fb:02:8b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a2eb7c750895e56467cd249bd84848d85f7492e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:60:27:81:d8:68:f4:db:95:b5:8b:b8:db:e5:
b5:9a:e1:fc:3f:44:9a:f9:e4:b8:a2:d1:0d:45:e5:
6a:c9:aa:d8:2b:a0:7f:ae:4e:ec:bf:e6:58:fa:07:
99:f5:fe:a9:15:87:2c:ff:2a:53:c1:0a:80:e6:2f:
d3:fc:28:7a:99:d8:4e:24:f9:e1:52:f3:97:8c:27:
24:f1:97:c9:f7:95:9c:62:e6:b3:d5:fe:e6:e4:9c:
9f:f3:26:36:24:2a:9f:fb:a3:3b:e2:60:bd:3a:ee:
d9:06:c5:85:14:54:64:e0:4c:cd:ca:7d:45:d8:b0:
f8:87:f4:e7:0d:27:af:18:a0:9a:e0:90:e5:e4:41:
95:25:27:0d:cc:5a:26:d5:d6:be:a5:7d:6d:86:2e:
51:63:72:0b:da:e9:5f:8b:6f:6e:4f:f1:e8:cf:67:
73:53:1f:b1:69:b7:72:9a:05:37:48:e5:8c:cc:40:
71:5f:f6:11:44:a9:ea:78:7f:d9:5f:66:0f:6a:ab:
19:3b:93:14:31:d1:71:bc:d0:c7:cf:93:06:cb:22:
e2:b2:29:95:15:59:c2:2b:40:f0:18:ff:4e:5c:47:
f3:c5:f3:4e:c5:2b:26:b5:73:2c:b0:9d:e6:f3:bd:
e0:9d:99:6a:32:d2:84:b8:2f:0b:07:03:22:6c:5a:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:B7:C7:50:89:5E:56:46:7C:D2:49:BD:84:84:8D:85:F7:49:2E
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/Wi63x1CJXlZGfNJJvYSEjYX3SS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.252.0/24
194.4.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:91:bd:22:15:9c:82:0a:18:e6:80:ec:21:29:db:0c:23:d1:
4d:4d:9a:cf:1b:25:18:92:6b:a3:d5:ae:9b:04:94:f0:f1:c6:
c6:66:af:66:aa:4c:af:cf:f6:0b:57:dc:c6:f6:8c:1a:29:59:
9d:29:a7:84:01:03:50:9c:d6:4a:77:52:dd:4c:62:f2:1d:6a:
0e:5a:4f:f4:b7:d5:ce:fb:81:5f:c4:66:45:1b:c2:98:b7:0c:
b2:c1:e1:60:90:c5:d1:d9:a8:18:e8:54:cc:09:a5:9c:35:36:
6f:94:98:1b:32:70:5a:ce:21:2d:72:64:26:56:83:9c:46:00:
70:84:06:5b:d5:74:19:d4:71:23:c1:13:24:be:1d:34:d8:05:
b9:69:b1:52:7f:54:cf:19:48:a3:d7:72:6e:50:e0:f2:94:4b:
a0:ba:04:f0:a3:2b:cb:d0:35:75:41:d4:3b:80:71:6a:eb:c1:
b4:fc:1d:89:18:04:89:f2:c8:cc:c5:0e:10:74:c4:3a:46:2e:
21:73:de:ab:30:da:99:db:cf:23:c6:83:0c:a2:91:be:c7:c2:
73:49:ae:b4:63:4c:a9:c9:e1:a2:19:dd:bb:0b:12:f9:7e:f7:
74:6d:6e:f7:76:6f:ff:d8:32:d5:ab:31:0f:f1:bb:4c:d2:b3:
e3:61:a4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:38 2025 by rpki-client