Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/__wa1ugjEpkqV5KApoV9xJeah8c.roa
File: __wa1ugjEpkqV5KApoV9xJeah8c.roa (raw, json)
Hash identifier: uBEDsXg7FqO+SBefSZJvvf0ta/Y6RQbfHx/stJzTEQk=
Subject key identifier: FF:FC:1A:D6:E8:23:12:99:2A:57:92:80:A6:85:7D:C4:97:9A:87:C7
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 0194258F26DF908CAE606FD2C8322109EBCE
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/__wa1ugjEpkqV5KApoV9xJeah8c.roa
Signing time: Thu 02 Jan 2025 05:48:46 +0000
ROA not before: Thu 02 Jan 2025 05:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8208
IP address blocks: 212.29.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:26:df:90:8c:ae:60:6f:d2:c8:32:21:09:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fffc1ad6e82312992a579280a6857dc4979a87c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:df:46:8e:60:b0:d4:50:b7:7c:f6:60:0c:
5f:99:cf:4a:3d:51:d7:e4:70:21:ad:62:db:1d:3d:
0d:a2:89:92:68:93:a7:2f:30:ce:6f:e6:aa:30:d3:
28:70:59:46:03:ff:83:81:c7:f8:34:cd:c9:b7:e5:
77:b6:24:73:19:33:29:18:f3:2c:e2:ff:c7:4c:0c:
13:c1:1b:c9:1e:9b:4b:bb:f9:0e:4a:44:8d:68:df:
10:0a:a6:19:41:ff:4d:d9:44:e8:77:44:38:73:34:
0e:c7:da:6e:41:60:dc:b5:43:cc:2f:b2:54:29:a6:
2a:62:1b:5f:4d:0c:6e:37:6a:e7:30:37:84:d4:e9:
cf:c9:6e:86:80:b4:a4:b1:d1:be:94:91:f4:e4:07:
c1:77:b6:5c:c6:f5:56:94:3b:43:d9:c2:e7:97:0c:
af:24:96:1b:46:02:0b:91:b5:20:5e:d2:49:56:50:
de:14:94:5f:68:7a:71:ce:6b:9f:87:c6:d7:30:ef:
87:44:aa:2a:2d:63:b2:15:b9:9b:21:18:55:b5:af:
d3:c0:67:57:f9:f1:5a:ab:af:ff:75:56:d6:e6:a4:
08:ad:c5:5f:cc:c1:02:4b:3f:ef:d6:d0:a5:4a:e0:
a2:b1:eb:c2:49:46:83:01:ac:9e:9d:ed:47:f7:ab:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FC:1A:D6:E8:23:12:99:2A:57:92:80:A6:85:7D:C4:97:9A:87:C7
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/__wa1ugjEpkqV5KApoV9xJeah8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.29.28.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0b:0a:d8:cd:48:61:5a:e2:a3:4f:df:61:6f:db:94:c5:9e:
5f:2c:3c:8f:d5:c1:ad:f6:b8:81:af:a2:09:e9:e4:0e:e3:0e:
09:6d:11:f5:8a:83:00:50:46:78:3d:9a:ef:ac:8d:7a:60:31:
65:0f:48:5a:d0:b8:b1:e8:94:9e:f8:27:e7:7f:fd:1b:1e:90:
c6:f4:8c:0d:23:0a:0e:39:24:48:2d:67:c5:5a:39:9d:44:f2:
e2:f0:e9:68:8f:df:f1:94:af:b5:47:62:38:ef:f7:fb:1e:90:
36:b5:c4:f1:d8:e3:82:87:ad:37:bd:5e:87:a6:42:c3:91:e4:
a9:ed:cb:0c:40:50:f3:d0:50:63:0b:73:a1:32:28:c5:7f:83:
e4:62:3e:ed:57:8f:be:7e:0b:84:77:57:17:ce:ae:58:a4:45:
a7:7b:39:5b:4b:5b:bd:17:3f:69:5b:62:f8:d4:a6:4c:7b:cd:
90:76:3a:e9:14:7f:80:c4:3a:4f:fa:27:2a:b5:f2:81:48:21:
f0:b7:ec:3f:41:79:3c:d9:dc:dc:c3:8a:b1:70:04:3c:4a:40:
6e:58:05:aa:6d:9f:de:d3:31:c2:04:2d:67:bc:37:f1:f4:15:
69:27:8b:c9:37:0a:c2:a8:ad:88:e0:65:3f:50:31:7c:7a:81:
95:26:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:38 2025 by rpki-client