Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wILojXI_WbrStwiS4RV7LdWKG8Y.roa
File: wILojXI_WbrStwiS4RV7LdWKG8Y.roa (raw, json)
Hash identifier: JBswfHkABVXXuNTQX9zA+D/1MRY8bxdss/ntGPjNEIg=
Subject key identifier: C0:82:E8:8D:72:3F:59:BA:D2:B7:08:92:E1:15:7B:2D:D5:8A:1B:C6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019726DCBE9FD1E2377145B4086AD0850283
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wILojXI_WbrStwiS4RV7LdWKG8Y.roa
Signing time: Sat 31 May 2025 15:01:30 +0000
ROA not before: Sat 31 May 2025 15:01:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 45.131.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:dc:be:9f:d1:e2:37:71:45:b4:08:6a:d0:85:02:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 31 15:01:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c082e88d723f59bad2b70892e1157b2dd58a1bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:78:ef:59:f1:f8:33:dd:e1:07:1b:d3:d1:
11:eb:d3:e0:d6:19:eb:75:b5:68:9f:0e:10:07:6b:
28:64:83:44:9b:12:e8:17:17:7a:33:93:d6:95:51:
81:4b:d0:d7:51:33:ea:88:5b:d3:ba:f3:96:28:3b:
74:87:34:7b:f2:20:6a:f9:d7:b5:1f:34:54:05:12:
ef:06:86:fa:6e:7c:26:38:41:87:75:82:2f:99:ec:
82:28:b9:36:98:59:fd:e5:b0:a8:50:8e:f9:94:ef:
4a:a5:1c:87:f0:8b:ce:55:02:68:3f:b2:de:0f:c7:
04:f2:34:e7:e5:64:bd:a2:5b:ff:49:96:be:be:54:
b9:4d:49:20:9a:fc:d5:3c:ad:a1:9b:83:97:ae:d1:
2e:a5:77:28:49:39:b0:24:15:40:18:4e:0f:b5:21:
25:49:8b:c4:d6:60:85:ba:97:21:c9:2c:81:fe:8e:
39:ae:ea:ce:2b:80:66:c8:dd:7a:d6:3f:37:a8:91:
58:69:4a:16:90:17:0d:b4:43:51:35:93:ca:05:c3:
c5:6b:17:9e:3f:57:0b:b9:45:8b:c9:f2:fe:96:28:
76:e7:66:83:17:b6:28:92:81:5a:a5:80:32:ab:0d:
89:1b:cb:40:bd:ea:1e:7e:79:f0:aa:27:f3:8a:a5:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:82:E8:8D:72:3F:59:BA:D2:B7:08:92:E1:15:7B:2D:D5:8A:1B:C6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wILojXI_WbrStwiS4RV7LdWKG8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.187.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f2:90:5b:db:c1:89:9d:28:55:14:fe:8c:3a:c4:c0:f5:78:
75:95:fb:99:0c:a8:f3:ff:19:01:09:29:77:33:6b:9e:e5:84:
8d:3c:0e:a6:a2:75:53:21:84:32:5b:69:fe:80:5a:fe:18:43:
8d:04:f4:d7:d6:c3:b0:ac:36:6c:83:ae:f9:78:82:9c:f0:04:
2a:c2:1e:fc:04:c7:8e:5e:92:53:bd:e2:76:7f:6e:9d:7f:5e:
c5:35:f8:14:67:8f:31:c9:31:08:48:1c:89:46:75:e5:db:c8:
6c:d0:b0:89:9d:07:13:ce:72:36:4c:9e:57:bd:c6:65:6a:5d:
4b:5a:17:10:38:39:c7:21:6f:8b:8a:1f:1f:8d:71:49:36:bd:
93:5b:9d:ea:e4:83:49:5d:bc:58:a7:ca:ce:af:57:c5:ae:97:
6e:d6:e3:ec:be:c6:77:32:4b:b7:1a:ef:ab:32:15:97:64:c7:
52:d6:81:72:6c:1f:4f:5e:6a:9b:d4:95:92:a6:ea:88:8a:d6:
9d:4b:32:02:5d:c2:24:0f:b5:c4:14:7d:e0:73:94:e6:25:32:
da:06:7f:71:e6:e3:46:5b:67:46:34:5b:53:8a:ce:e1:a0:7d:
50:bf:cd:a3:21:de:6c:74:25:17:c9:57:8a:28:40:e6:c2:67:
5e:5a:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:28:02 2025 by rpki-client