Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa
File: WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa (raw, json)
Hash identifier: vIhTma8+lG8HgAIfqToXR0NbvqLMHJQtArmEHR9vby8=
Subject key identifier: 58:35:9D:66:22:65:2C:4A:50:3C:33:C6:E0:A9:D4:F6:5A:BE:9F:C3
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA3CD072E83F034EFF52AAF2CD6F33
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213250
IP address blocks: 37.114.37.0/24 maxlen: 24
37.114.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3c:d0:72:e8:3f:03:4e:ff:52:aa:f2:cd:6f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58359d6622652c4a503c33c6e0a9d4f65abe9fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:78:94:0b:40:0c:6e:12:6e:cb:db:91:f5:
55:77:06:34:23:0d:ca:25:4a:8d:f3:8a:75:d2:79:
93:10:c9:e5:98:1b:f5:06:dd:d1:64:c3:ca:bd:0e:
40:ee:bc:87:e7:8c:27:78:54:24:e4:29:31:79:93:
a1:54:ca:61:20:90:53:d4:12:cc:30:b5:d8:b4:fa:
7c:ca:ae:f2:18:95:3b:b0:fe:20:b7:19:4e:8a:52:
4e:31:f4:1b:d6:6b:a1:2d:81:2d:1c:e9:f2:de:62:
49:de:70:21:a4:ee:73:25:66:42:05:0e:d0:2c:e6:
89:18:a2:42:10:9e:f0:b9:41:05:fd:e1:67:8d:3c:
95:07:89:27:68:48:08:76:1f:f3:e1:4b:df:65:cb:
75:c2:41:83:54:23:06:ab:9d:42:c1:ad:2a:fc:11:
67:d9:fa:62:28:14:73:d4:fa:e7:c2:51:82:e0:ef:
67:57:05:91:14:e1:84:fd:ff:68:6d:2c:4e:49:a1:
41:b4:d0:9c:04:23:33:4c:64:f2:91:d4:78:d2:be:
d6:d7:a2:2d:d8:8e:e0:6d:74:65:94:5a:53:99:bd:
cf:e1:fb:24:4a:aa:0f:7e:02:34:b9:6e:91:90:4d:
83:ab:b2:36:59:6f:d8:34:27:60:92:09:0e:52:b9:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:9D:66:22:65:2C:4A:50:3C:33:C6:E0:A9:D4:F6:5A:BE:9F:C3
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.37.0/24
37.114.63.0/24
Signature Algorithm: sha256WithRSAEncryption
be:26:e9:97:7b:9f:a1:c5:4a:1e:62:72:df:1e:1a:a6:57:04:
eb:38:1b:52:82:00:68:bf:06:0d:a0:f2:7d:0c:bc:e2:fb:05:
93:17:cf:e9:a1:75:da:16:b5:cf:11:d4:66:d9:d9:62:1d:53:
42:35:d4:50:d0:1a:07:d0:8b:26:42:4c:81:b1:39:43:a4:8b:
94:da:d7:52:ac:b3:96:e8:45:c3:fb:a8:44:61:58:7f:6f:cc:
e4:d6:f0:35:3e:15:53:b0:da:c6:e3:d8:08:d8:2a:a2:67:d7:
49:63:45:16:7c:2f:ae:10:15:60:60:6e:1c:45:ad:de:3c:a5:
29:e7:94:9f:8e:0b:19:ed:04:ed:f3:13:5b:34:1e:88:c3:60:
f2:7c:dc:d7:3f:24:4a:f0:c9:cb:02:22:ef:73:83:bd:cf:34:
b2:8d:cf:14:6b:4d:2e:f2:a1:87:ff:14:a4:9b:ed:82:54:31:
8d:3d:e2:0f:17:35:75:d7:d7:70:ba:9c:6a:86:8b:69:60:d0:
79:08:bc:6b:87:04:b4:84:dc:85:33:6a:f8:86:ef:f7:75:64:
92:8a:ff:f6:e3:18:f3:2f:b0:3a:aa:46:da:9f:1a:b2:e7:d5:
c6:58:d8:e2:eb:46:f3:2a:ec:b0:0a:3e:be:18:dd:3e:0d:d8:
a3:1b:97:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:32:51 2025 by rpki-client