Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WbWHhUfn1YUqbciq3aKRWcg1NiY.roa
File: WbWHhUfn1YUqbciq3aKRWcg1NiY.roa (raw, json)
Hash identifier: oFtwyMuGTSK07xj9M78LL95/oB+M3m0P832xd4UOnK8=
Subject key identifier: 59:B5:87:85:47:E7:D5:85:2A:6D:C8:AA:DD:A2:91:59:C8:35:36:26
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827C5ACEEB3210C43FE50DAF0248F04
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WbWHhUfn1YUqbciq3aKRWcg1NiY.roa
Signing time: Thu 02 Jan 2025 17:54:42 +0000
ROA not before: Thu 02 Jan 2025 17:54:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 87.229.70.0/24 maxlen: 24
87.229.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:c5:ac:ee:b3:21:0c:43:fe:50:da:f0:24:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59b5878547e7d5852a6dc8aadda29159c8353626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:8c:0b:e7:61:04:61:54:34:4a:47:8b:a0:
f8:2f:91:91:3d:c8:c2:73:19:1d:56:c3:10:b2:25:
02:dd:08:20:ea:ba:7f:6a:83:46:80:8e:d1:f3:59:
ca:ec:08:8e:c8:cf:d3:72:0c:e6:15:d0:d5:c4:7e:
19:63:de:5f:69:6e:5d:54:9a:12:2d:41:bf:0c:6a:
d3:bb:2c:e2:ce:13:22:c8:4e:e2:c2:9c:39:71:e3:
5c:a5:01:17:83:35:27:67:6e:cf:8b:9c:d4:c2:88:
f3:f6:45:82:99:0f:f2:0b:01:a2:52:59:d4:81:c2:
95:dd:cd:9b:a6:16:5c:2b:65:3b:b7:a7:6e:92:ba:
7c:be:01:cc:98:f5:e4:cb:eb:d4:30:6e:f7:4f:d1:
df:b5:a9:d4:4a:6f:a9:0b:88:dc:81:40:0f:6c:ee:
3e:82:49:21:12:45:cc:cb:71:23:09:cf:98:a7:c2:
bf:c1:c2:72:5d:25:1f:64:1d:21:f5:37:90:cd:fd:
c7:ac:5f:39:97:f8:45:d2:10:2b:9b:65:ff:2b:27:
6a:ec:85:ba:bd:e9:25:2b:c9:f3:d4:27:c3:61:5a:
18:4b:43:1d:07:84:22:48:cb:54:bf:ef:07:50:2e:
56:22:51:a5:0e:a2:f7:88:db:7a:4b:4d:d0:bf:05:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B5:87:85:47:E7:D5:85:2A:6D:C8:AA:DD:A2:91:59:C8:35:36:26
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WbWHhUfn1YUqbciq3aKRWcg1NiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.70.0/24
87.229.95.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c0:58:ea:2c:cb:11:70:2a:0c:17:7c:6c:b7:d1:24:97:2a:
3e:ce:71:80:fd:20:8f:62:2f:9e:3a:52:ba:c1:27:ba:a3:3e:
89:e3:2b:fa:9c:7a:d0:1a:c4:ca:d7:66:1a:db:60:bc:ae:ba:
23:4c:c5:b2:cc:85:a1:e4:86:af:2e:e9:9c:14:8b:0f:ac:49:
ba:d9:2a:44:1a:4f:e0:6b:07:91:76:df:ac:a2:8d:1e:f5:c6:
75:44:1f:fd:b4:8b:c1:fb:fd:e3:55:35:45:e2:67:70:b5:f5:
e7:9b:9e:5d:44:7a:e6:f3:65:96:07:5c:05:d4:1b:73:1b:d7:
df:4a:a9:eb:20:f7:23:72:38:75:4c:3e:0d:3d:24:64:ba:a1:
64:d2:05:2f:42:ad:c8:75:1f:35:9c:85:ca:98:e0:61:23:a1:
4a:8a:8f:0d:75:18:8b:ff:f0:e3:8a:1f:78:d5:6b:75:00:21:
95:b4:02:db:92:1b:41:48:9a:c3:79:52:20:69:cd:2c:af:60:
f2:94:76:b7:0f:d7:2c:8b:04:bd:1e:2e:37:df:fe:70:e9:82:
c2:ef:36:2d:f9:59:c9:8a:eb:1a:a8:bf:4c:1c:50:a4:7e:fe:
1e:8b:96:c9:9c:a3:83:7f:c0:3f:ed:6d:00:ba:27:2f:ba:0c:
ff:4d:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:33:36 2025 by rpki-client