Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Wc305TLcG6ipi4YG3pmtocQiH2Q.roa
File: Wc305TLcG6ipi4YG3pmtocQiH2Q.roa (raw, json)
Hash identifier: bIpc1gyDbj8Co03okk2diagetshwMOgbtSapVHm51GU=
Subject key identifier: 59:CD:F4:E5:32:DC:1B:A8:A9:8B:86:06:DE:99:AD:A1:C4:22:1F:64
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019424452AA0AEEFCA7B28A1765E31F26BC2
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Wc305TLcG6ipi4YG3pmtocQiH2Q.roa
Signing time: Wed 01 Jan 2025 23:48:20 +0000
ROA not before: Wed 01 Jan 2025 23:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209559
IP address blocks: 80.66.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2a:a0:ae:ef:ca:7b:28:a1:76:5e:31:f2:6b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 23:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59cdf4e532dc1ba8a98b8606de99ada1c4221f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:95:a5:8a:31:d1:0a:db:f0:35:b0:8f:6c:
37:15:db:52:a8:e8:6d:0f:8b:61:d2:48:0f:80:78:
51:87:ed:c4:8e:39:4c:6e:c1:09:3a:53:e9:29:ac:
5e:58:34:a5:06:d9:31:0f:45:4a:f4:99:b3:18:b7:
e0:10:bb:54:6e:50:53:bc:0f:7c:53:35:c0:15:b9:
b8:59:49:dd:0e:0a:9d:9b:c3:c4:77:ad:1a:d9:81:
29:6b:33:3d:1e:ec:bd:4d:74:90:a4:a2:78:61:3b:
4d:77:cf:63:22:70:a5:56:4f:e6:5c:4b:c0:c9:db:
49:10:a3:3c:a9:c3:4d:51:4e:58:80:a6:69:cd:18:
77:b3:87:78:24:e9:e4:b0:dd:6f:be:fd:cd:2a:fb:
3f:0b:c8:22:dd:8c:72:a4:56:3e:e5:fe:cc:0a:4d:
32:27:20:5b:20:cc:f0:02:b4:ec:72:a3:f7:53:26:
ca:d5:c1:5a:a3:c2:0c:a7:21:88:53:7f:74:48:d8:
8b:1d:a6:c8:a5:dd:6b:ba:5e:50:76:6c:bb:69:91:
54:8f:85:74:6a:9c:69:0b:a8:81:f4:f6:4f:17:a8:
da:d7:a3:69:d2:26:32:5e:25:db:1e:de:bc:1e:e8:
8d:98:51:a8:7c:5b:5f:09:73:a1:8c:37:09:b1:8b:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CD:F4:E5:32:DC:1B:A8:A9:8B:86:06:DE:99:AD:A1:C4:22:1F:64
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Wc305TLcG6ipi4YG3pmtocQiH2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.83.0/24
Signature Algorithm: sha256WithRSAEncryption
84:43:d7:dd:3e:8d:b2:1d:17:9e:b5:43:58:cb:38:de:3a:59:
d2:0b:bc:a0:be:b0:25:bc:8c:76:74:d2:3a:f5:9f:39:38:85:
23:92:3c:b0:d2:cb:a6:1f:30:44:b6:d8:f7:f3:44:9e:fd:0a:
d3:6a:3f:bb:86:6c:a6:3d:fe:fe:6c:cd:15:2a:82:11:b8:8b:
10:eb:1b:bc:50:b7:98:9b:b6:48:de:e9:05:87:07:fe:23:a1:
49:e5:58:a8:ce:0d:a7:27:4a:7f:e7:34:f9:5d:a7:9d:24:c5:
e4:6b:3f:3a:85:c8:fb:76:f5:06:94:62:a8:c9:a2:4c:7b:3f:
08:b2:f0:e1:e0:07:8c:05:3b:42:2f:a1:28:b1:0b:50:ad:06:
18:4b:aa:67:9c:64:8b:78:4e:fb:93:e5:e2:2e:c9:6e:02:d4:
b0:a9:1a:72:05:2b:00:5c:57:50:cc:7e:d4:f2:32:6a:4d:a2:
6a:0d:56:06:25:6a:74:18:32:3b:93:a3:9d:c7:fc:68:4e:c8:
8c:b5:b7:ba:5d:d9:4d:07:de:76:04:31:1d:e1:88:1e:3a:ca:
73:05:16:2f:ab:1b:7e:c9:a9:6b:1a:41:e7:2c:56:0f:5a:04:
cc:be:fc:28:f0:2f:bc:6b:e3:fc:ab:04:9a:5e:aa:97:05:57:
77:fe:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:58:31 2025 by rpki-client