Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/WHFVP-XON8sqraj6YY6ek5SnizM.roa
File: WHFVP-XON8sqraj6YY6ek5SnizM.roa (raw, json)
Hash identifier: 6Jo7LR22ifIObPqUTbdjOmZViWJvla0HyQea7nyLPEE=
Subject key identifier: 58:71:55:3F:E5:CE:37:CB:2A:AD:A8:FA:61:8E:9E:93:94:A7:8B:33
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 01941F8C0CB879A8B9A2FD130420A76D447C
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/WHFVP-XON8sqraj6YY6ek5SnizM.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31257
IP address blocks: 176.116.160.0/20 maxlen: 20
176.116.160.0/22 maxlen: 22
176.116.164.0/22 maxlen: 22
176.116.168.0/22 maxlen: 22
176.116.172.0/22 maxlen: 22
176.116.177.0/24 maxlen: 24
176.116.178.0/23 maxlen: 23
176.116.180.0/22 maxlen: 22
176.116.180.0/23 maxlen: 23
176.116.182.0/23 maxlen: 23
213.110.224.0/22 maxlen: 22
213.110.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0c:b8:79:a8:b9:a2:fd:13:04:20:a7:6d:44:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5871553fe5ce37cb2aada8fa618e9e9394a78b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:e6:a7:88:1c:22:19:ef:96:80:df:5a:19:
e9:60:bf:2c:13:96:9b:7d:49:a4:1f:ed:c8:fa:78:
86:9a:30:a5:3f:57:17:3f:45:c5:5c:56:00:2d:23:
e1:b6:1e:b9:a1:85:22:4f:dd:4a:93:54:41:be:8b:
d8:c7:a8:6b:00:e6:dc:7b:6d:d8:5b:57:d6:54:1e:
83:ca:51:b4:6a:57:4a:33:0b:79:15:6d:a0:c2:bd:
72:1f:5a:99:a1:6e:d6:32:fc:90:f5:cb:08:d5:27:
32:fc:d1:79:73:9e:ca:a8:30:4a:13:c4:bf:3c:1a:
22:1f:4b:d8:bc:cd:e6:51:91:5c:10:99:6f:07:eb:
3c:ea:b2:d3:f4:e2:ae:e3:91:e5:d8:7b:79:87:4d:
2f:37:a4:29:87:26:ca:e8:cc:8e:05:37:78:a8:74:
d4:ac:40:62:3e:e0:44:df:5d:7f:db:18:77:17:3e:
ad:8d:8a:1b:20:e1:a9:c6:19:16:4d:c2:85:99:9d:
7c:69:82:f8:d1:98:20:05:c9:b1:6b:03:66:f2:a2:
2d:bd:82:8e:cb:b1:03:93:8a:12:21:bc:74:a2:64:
ea:f6:11:e6:99:dc:57:dc:a5:75:9c:ca:80:09:0b:
98:04:ef:b6:04:8d:ae:ad:01:1d:f9:2b:00:1e:f8:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:55:3F:E5:CE:37:CB:2A:AD:A8:FA:61:8E:9E:93:94:A7:8B:33
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/WHFVP-XON8sqraj6YY6ek5SnizM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.160.0/20
176.116.177.0-176.116.183.255
213.110.224.0-213.110.229.255
Signature Algorithm: sha256WithRSAEncryption
61:a2:18:a3:9d:e7:39:98:74:97:35:91:ff:97:b0:16:d4:12:
1a:d9:86:4f:fe:77:99:bc:f9:b1:1b:f0:6a:29:57:02:0b:f4:
3a:bc:91:3f:80:fd:29:c6:ee:e0:0e:01:02:b7:8a:a8:1d:66:
69:f8:0e:6e:4f:8a:4e:c4:bd:c5:c0:5e:0f:7b:cb:0a:cf:e6:
a6:db:bd:1c:7d:25:85:de:87:8f:e6:26:11:45:5d:8d:43:4d:
df:99:32:69:d3:4f:dd:7b:ea:5e:40:6e:fd:b9:91:e2:b1:ee:
3f:40:bd:03:08:d7:10:be:44:66:be:53:51:a6:8b:a9:eb:13:
4e:37:b7:b0:8f:8e:62:c2:7b:5c:a1:19:36:f3:9e:a5:7f:18:
bc:0c:a2:43:5a:38:a6:2c:09:6c:ce:db:ec:53:06:0f:46:2e:
ab:d3:a7:01:5c:16:06:46:19:a1:68:0e:8d:4d:d9:f3:56:17:
d6:b3:63:15:aa:ed:45:0f:c3:71:24:bd:ab:6f:c8:01:d6:52:
97:b5:70:cd:31:60:dd:17:6d:6e:19:e6:ba:41:79:d5:d9:c9:
60:a0:6a:32:ee:ee:3e:e2:da:b1:64:6d:f7:a3:c3:e9:b1:d4:
d8:1a:f4:9e:92:08:1c:72:6a:7f:26:ed:a3:3d:05:3c:40:5e:
5a:f2:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:59 2025 by rpki-client