Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/jywZ9UYkMiz97kwCY4FM3q95-aY.roa
File: jywZ9UYkMiz97kwCY4FM3q95-aY.roa (raw, json)
Hash identifier: u66se+BAVSb1YHlBvMoU6Y/uC6cRzOafh9TsvAog2jw=
Subject key identifier: 8F:2C:19:F5:46:24:32:2C:FD:EE:4C:02:63:81:4C:DE:AF:79:F9:A6
Certificate issuer: /CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Certificate serial: 019421B2432947444F653D333B13A3A4B5CC
Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/jywZ9UYkMiz97kwCY4FM3q95-aY.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43842
IP address blocks: 91.193.48.0/24 maxlen: 24
91.193.49.0/24 maxlen: 24
91.193.50.0/24 maxlen: 24
91.193.51.0/24 maxlen: 24
91.195.162.0/24 maxlen: 24
91.195.163.0/24 maxlen: 24
193.28.155.0/24 maxlen: 24
193.138.92.0/24 maxlen: 24
195.62.18.0/24 maxlen: 24
195.62.19.0/24 maxlen: 24
209.35.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:43:29:47:44:4f:65:3d:33:3b:13:a3:a4:b5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f2c19f54624322cfdee4c0263814cdeaf79f9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:fd:65:04:55:06:80:d6:cc:d0:ab:83:07:
a0:c1:58:ad:6c:2b:1f:80:14:99:b1:b1:e0:16:89:
c6:fa:94:2f:9f:c3:d4:03:78:b1:04:4a:94:64:d1:
dc:4a:77:b9:b2:04:9b:3e:7a:dd:40:c1:96:09:60:
15:1c:d2:ea:3e:79:a1:e6:01:7d:fb:5b:a8:aa:0a:
b9:33:cd:bd:a1:0a:d4:c7:5f:51:e3:b0:e9:2e:73:
3c:d1:34:00:fe:c7:b8:66:9b:a3:10:c2:2c:70:b0:
6d:b6:e3:0c:f9:4b:f1:7c:dc:6f:14:87:73:a8:ff:
22:ff:27:8b:2e:d1:be:b1:81:ab:3a:a7:bb:18:21:
ef:a5:d8:47:e5:26:46:d7:b4:6a:98:60:78:96:4e:
a8:6a:8e:8e:86:ba:d0:c5:d3:15:5b:ca:7a:78:e0:
2e:16:66:1f:97:30:c9:ff:5c:ee:0e:9d:ba:72:77:
a3:dc:3d:24:51:4d:91:49:f6:5d:10:dc:a7:4c:cb:
b5:c7:42:1e:c8:e4:a1:c5:4f:b5:97:48:16:4a:f4:
0f:a8:57:78:2f:48:d0:dc:87:45:39:e3:1d:07:bf:
ac:ec:75:e7:e0:92:85:16:8f:7e:0f:37:04:10:7e:
82:41:32:27:2f:8c:4c:93:15:2a:78:23:3c:fc:71:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2C:19:F5:46:24:32:2C:FD:EE:4C:02:63:81:4C:DE:AF:79:F9:A6
X509v3 Authority Key Identifier:
keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/jywZ9UYkMiz97kwCY4FM3q95-aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.48.0/22
91.195.162.0/23
193.28.155.0/24
193.138.92.0/24
195.62.18.0/23
209.35.197.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ca:51:94:48:d5:cc:b8:94:c9:c1:ab:19:df:b7:4f:61:b0:
a4:54:2f:f2:b6:87:f3:67:f2:08:e7:3b:39:8f:f1:11:0c:bf:
5d:ff:21:2e:ab:23:75:68:65:c0:0c:96:12:f4:22:73:6f:7f:
81:b9:06:51:6c:a1:7e:94:8b:07:c1:25:1b:fb:fe:5a:ae:18:
76:66:2c:2b:a0:64:d6:dd:94:40:ae:d9:b2:0a:23:02:c3:53:
cb:de:68:58:a4:e5:f2:cf:8a:3d:b4:af:c7:59:17:a8:f7:57:
8a:45:fa:c6:39:9f:4d:49:bf:19:5e:89:a4:17:7b:c9:a6:02:
99:53:2f:78:4f:be:9f:eb:28:a7:42:94:e5:3a:6e:7c:c3:ad:
ca:f9:ad:fb:ed:c9:16:60:e3:aa:3a:54:23:38:64:fd:84:68:
d6:13:b5:1d:58:6d:73:4f:eb:2a:b2:06:f4:ef:22:54:53:48:
fc:c9:9b:e4:a1:56:63:eb:74:2b:11:fd:6b:90:db:18:60:e7:
11:59:8e:dd:51:33:6b:18:18:a2:9c:99:da:93:07:a2:d8:39:
7e:f6:fb:fb:a6:f0:e4:8a:99:fb:da:09:d1:a0:8f:72:7e:88:
9f:a1:70:a5:83:b6:37:a4:2d:3f:26:15:86:33:42:d3:6b:8e:
4e:5f:4d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:47:03 2025 by rpki-client