Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/WsFPLGBSypHWEB7UbM91SGy8ynQ.roa
File: WsFPLGBSypHWEB7UbM91SGy8ynQ.roa (raw, json)
Hash identifier: mIBI4AzXtsH68szPGKhUBCWZanQ1+SMQ//7TMev+wH8=
Subject key identifier: 5A:C1:4F:2C:60:52:CA:91:D6:10:1E:D4:6C:CF:75:48:6C:BC:CA:74
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B574AA1297BAF7FABF8A9BEAE5D1BD
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/WsFPLGBSypHWEB7UbM91SGy8ynQ.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33438
IP address blocks: 94.31.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:74:aa:12:97:ba:f7:fa:bf:8a:9b:ea:e5:d1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ac14f2c6052ca91d6101ed46ccf75486cbcca74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:11:3f:1c:19:52:9b:57:f0:3a:83:a3:2f:
7a:db:ff:7d:99:1f:89:f4:ce:ba:f2:5b:7a:24:d2:
3e:de:36:90:65:f1:97:66:c9:51:8e:e6:75:8d:a9:
c6:77:52:90:48:f4:27:c1:9e:ed:6a:4c:39:0a:08:
09:d9:2c:a1:b8:fc:7d:ee:7e:23:9c:11:be:ff:d1:
7b:8b:52:86:2d:95:6e:b0:5b:03:83:14:8a:fa:0b:
ab:73:b4:b4:95:39:a9:ed:27:d1:4f:4d:d0:2b:d8:
b9:24:a6:5e:e4:b5:4d:f2:16:37:ad:e6:0a:68:96:
df:75:fb:b5:dd:ac:a9:03:42:02:e1:21:13:6e:d1:
16:a0:9b:c5:ce:b2:8f:b0:94:86:5b:42:ff:57:bb:
88:9b:a7:fb:df:ba:90:b6:ba:e0:0d:f3:57:07:a0:
0f:be:34:2f:7d:ed:3a:8b:6a:f6:b2:b6:01:d7:7e:
58:21:11:41:8c:68:11:bb:ff:da:75:84:61:29:01:
b7:1b:37:c6:b5:a0:bb:17:32:9e:63:e9:98:e0:2d:
01:d2:3c:0d:ae:fc:e6:4c:55:a2:03:24:ba:d8:fe:
d6:88:9d:31:ee:bc:8b:72:8a:45:e5:ae:fc:58:25:
d7:e3:e4:43:56:d2:45:ae:fc:73:77:b8:42:00:22:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C1:4F:2C:60:52:CA:91:D6:10:1E:D4:6C:CF:75:48:6C:BC:CA:74
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/WsFPLGBSypHWEB7UbM91SGy8ynQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:fb:4f:dc:0d:87:4d:d3:08:30:92:7b:85:be:ae:d6:ed:68:
1c:3c:bc:32:ab:ec:a7:9d:12:58:66:7e:8d:e4:aa:2a:9a:74:
61:c5:b3:41:2a:04:f5:bd:f3:12:75:5d:b1:e9:54:ee:66:85:
d5:c8:07:f2:a3:2d:e7:63:e0:0f:91:4e:f4:28:a7:d4:2d:65:
38:65:4b:af:e6:fc:89:b0:a9:4b:bd:87:4c:46:35:cb:36:6a:
7d:71:ef:36:3d:59:b8:8d:8c:ab:5a:c4:9c:b9:c2:12:36:68:
c6:31:3f:57:49:c0:1d:1d:ac:1b:a4:de:f9:02:f8:6f:1f:e1:
e4:ce:d0:07:e8:f0:81:c0:e4:a2:59:95:7b:de:7a:72:42:88:
a5:40:c0:9b:92:99:83:04:25:1d:8a:c5:eb:55:af:10:61:02:
08:06:27:44:af:04:8c:b5:1c:4a:df:27:0f:9c:78:d0:e4:b5:
9d:ec:fd:4d:99:9c:78:ae:41:58:72:eb:91:3c:b0:1f:26:58:
c8:c9:e2:80:df:72:0a:9d:d8:23:76:90:aa:50:e2:bd:b4:54:
bd:aa:53:c8:ae:be:14:18:ee:0a:e3:e3:5a:25:03:a3:6e:a8:
a6:38:51:f8:59:d1:9e:d2:0f:4f:b3:6f:8d:33:84:ea:d8:dc:
90:6c:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:50:40 2025 by rpki-client