Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/wBcaC1_PamN7lirmMN3fzCp6jH4.roa
File: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (raw, json)
Hash identifier: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=
Subject key identifier: C0:17:1A:0B:5F:CF:6A:63:7B:96:2A:E6:30:DD:DF:CC:2A:7A:8C:7E
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019423691AF86B600C7D4417547868E27872
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/wBcaC1_PamN7lirmMN3fzCp6jH4.roa
Signing time: Wed 01 Jan 2025 19:47:58 +0000
ROA not before: Wed 01 Jan 2025 19:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398826
IP address blocks: 104.160.18.0/24 maxlen: 24
104.160.19.0/24 maxlen: 24
104.160.20.0/24 maxlen: 24
104.160.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:1a:f8:6b:60:0c:7d:44:17:54:78:68:e2:78:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Jan 1 19:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0171a0b5fcf6a637b962ae630dddfcc2a7a8c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:15:1c:5e:57:6e:f3:25:4b:b5:4a:e9:89:
ba:d1:89:a0:dc:06:64:5a:0a:cd:ca:82:e5:87:4f:
33:76:ac:be:ec:2a:7e:42:93:eb:a5:f0:87:4d:17:
08:9e:7d:07:11:22:64:17:d1:bc:bc:d9:7b:9f:be:
63:de:7f:24:28:5f:38:4b:a1:7e:60:af:4b:8c:71:
0c:b1:57:52:d0:0c:ed:08:48:a5:f7:4f:6a:30:3f:
ad:32:76:c6:04:ae:90:bd:9c:3f:be:bc:c2:e1:8b:
b4:79:ae:ad:70:fb:e0:66:1b:55:3f:02:0d:fc:dc:
56:3e:5b:85:58:76:0a:cf:45:6d:96:dc:b2:04:2b:
48:dc:e9:d6:b0:9c:3e:ca:93:ff:40:f0:0a:5d:f9:
96:06:d0:ea:a7:38:46:45:63:e4:e2:36:6e:b0:30:
9c:dc:b5:76:da:95:8e:11:b1:e0:c2:7a:b9:1a:a3:
5a:61:f6:9b:7a:14:e8:93:86:63:ef:b4:cf:ad:99:
58:73:92:06:f2:65:17:3d:c1:d4:38:0c:62:d5:5a:
fd:9f:7f:1f:af:bf:c7:30:6c:69:d2:22:a7:df:8f:
01:33:7a:fb:4d:5c:36:01:c2:2b:d2:89:52:a3:b6:
28:2c:51:97:47:fd:40:b2:db:4a:9e:6c:b7:11:29:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:1A:0B:5F:CF:6A:63:7B:96:2A:E6:30:DD:DF:CC:2A:7A:8C:7E
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/wBcaC1_PamN7lirmMN3fzCp6jH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.18.0-104.160.21.255
Signature Algorithm: sha256WithRSAEncryption
25:80:25:3f:78:d8:07:b4:45:e9:7c:42:3e:24:35:56:e5:2a:
34:e3:1d:b0:fc:3f:a3:d4:da:64:fa:68:9c:bb:8c:b8:78:b2:
64:78:7c:b1:8e:42:19:ef:ff:ea:bd:b3:17:ad:a5:7c:86:bd:
b9:2d:c0:22:44:fe:2b:4e:f6:c3:ea:20:e6:a6:fa:b3:fb:46:
0a:bc:99:2d:84:90:e7:02:3f:72:21:0b:ba:db:b4:f0:80:77:
70:94:ed:51:17:ce:6b:5d:67:12:92:9f:65:83:30:70:5c:46:
75:8c:a5:7a:6d:92:85:fa:20:d1:ca:d8:30:cc:aa:9b:2e:bc:
5b:d3:af:74:ff:28:cf:a4:7c:15:09:4a:06:99:8f:59:d7:56:
9c:a4:68:71:1c:46:fe:b5:11:cc:3e:81:fb:6b:11:4e:96:75:
36:95:59:57:b2:db:c2:f0:46:b1:ea:7e:ca:9c:a6:82:b3:4e:
cb:ae:67:9d:1c:0b:64:a7:65:0b:1c:b7:8f:cc:de:e3:9b:ce:
d9:e6:22:5f:bb:e9:06:ea:ad:24:c5:72:97:05:8c:90:a2:84:
b9:a4:c1:55:d7:1f:2f:3c:f1:4a:69:aa:09:9b:a0:57:77:a9:
f9:a0:0e:c4:53:c4:f7:5f:8a:a3:1e:7f:1d:68:43:5c:73:4b:
e1:cb:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:07 2025 by rpki-client