Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/WE-ha4uuIxgDDk1GggO-fRIkCmg.roa
File: WE-ha4uuIxgDDk1GggO-fRIkCmg.roa (raw, json)
Hash identifier: qPLc76pSVkRIP6FJCW3n1YPCDV38MKiyxzMwCqEdLYE=
Subject key identifier: 58:4F:A1:6B:8B:AE:23:18:03:0E:4D:46:82:03:BE:7D:12:24:0A:68
Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial: 0194236906F27131C5B635A88934DE4BFC3D
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/WE-ha4uuIxgDDk1GggO-fRIkCmg.roa
Signing time: Wed 01 Jan 2025 19:47:53 +0000
ROA not before: Wed 01 Jan 2025 19:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 91.199.8.0/24 maxlen: 32
2001:67c:2f84::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:06:f2:71:31:c5:b6:35:a8:89:34:de:4b:fc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
Validity
Not Before: Jan 1 19:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=584fa16b8bae2318030e4d468203be7d12240a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:39:36:81:ad:5f:d4:6c:03:a5:6d:56:d3:
17:ef:c0:f1:9b:99:59:07:cb:7d:8a:7c:03:9b:f4:
f5:12:7f:ac:c1:85:0c:d8:ff:bb:ee:9f:8f:1b:56:
48:79:44:4b:81:e1:b0:f0:07:6b:7d:1f:db:3e:47:
97:33:47:ca:c4:b8:3e:03:53:6f:bb:3a:9a:6a:cd:
58:39:a2:7a:ad:b0:ae:f1:1c:63:37:7d:c6:df:13:
93:a1:d8:2e:ee:c7:b3:b5:64:d7:fc:4a:b0:54:54:
17:1c:48:bc:c2:2f:f7:f8:cc:e1:e7:9b:94:04:62:
91:44:4a:f2:f4:e2:1e:ad:c3:13:4d:0d:07:e7:20:
85:e7:3d:65:0c:69:59:55:72:dc:58:6f:52:28:cf:
3e:47:c2:3c:a5:1d:55:f0:09:7e:77:3a:d9:af:a5:
2d:eb:94:df:b0:d3:a1:22:32:7f:48:82:9b:e7:45:
63:ed:8d:0f:a6:57:1b:1f:2e:64:75:94:e3:a6:7c:
9a:81:c6:f2:3a:2c:2a:b4:04:ae:d6:32:05:02:c2:
a8:27:b7:95:1f:6a:06:af:f8:bb:e4:55:2b:b6:f9:
33:f6:67:59:32:fc:0f:7c:ab:c0:ec:ad:97:10:68:
d1:eb:7b:8c:77:0a:ad:04:c1:42:89:60:79:a3:00:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4F:A1:6B:8B:AE:23:18:03:0E:4D:46:82:03:BE:7D:12:24:0A:68
X509v3 Authority Key Identifier:
keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/WE-ha4uuIxgDDk1GggO-fRIkCmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.8.0/24
IPv6:
2001:67c:2f84::/48
Signature Algorithm: sha256WithRSAEncryption
a5:95:59:70:e8:cb:36:63:27:f2:3b:93:a0:60:7c:93:06:f6:
51:fa:c7:9b:9e:cc:f7:9e:5b:d4:ee:05:dd:2d:a1:a5:c7:6d:
cd:96:ff:9c:09:b9:3b:88:23:eb:94:fb:1a:1a:80:c7:27:fe:
fd:6a:51:c3:8e:a8:51:12:9f:43:95:c0:82:35:94:64:3b:2a:
6b:e2:d1:dd:18:66:ae:96:4c:79:5c:35:93:b0:c0:09:73:17:
38:84:fd:4d:f1:9d:38:94:f8:50:e7:83:93:34:79:cb:19:2c:
09:35:78:ba:b8:a0:ef:8b:8a:2c:b8:34:2c:e6:ac:65:d7:74:
76:6e:9b:53:19:13:d5:94:db:85:25:d4:fc:19:49:c9:1f:65:
fd:a6:4d:bd:ba:ac:8d:cb:ca:c7:b0:9f:51:a5:c2:40:8b:65:
51:51:3d:52:c7:50:25:64:11:e9:19:41:25:e9:e6:21:cc:c4:
c5:31:af:1a:60:09:40:0e:d5:f1:1c:f7:1b:62:36:1e:af:c5:
6e:b6:a6:85:01:f5:66:7b:e5:c7:6d:23:4c:e0:26:bc:95:fa:
41:da:b0:71:b7:8f:24:0d:ba:35:a0:9c:7b:1a:7a:42:6c:29:
d8:99:51:73:8c:6b:b3:2c:98:c7:e5:f7:82:70:e1:0a:77:5b:
2c:df:9a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:23 2025 by rpki-client