Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa
File: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (raw, json)
Hash identifier: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=
Subject key identifier: C2:47:3D:C8:18:38:94:F0:C6:8C:27:DA:25:94:63:C8:53:3B:98:1D
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019421B1AD2242227046D723DC86682F07CF
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa
Signing time: Wed 01 Jan 2025 11:47:59 +0000
ROA not before: Wed 01 Jan 2025 11:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 45.88.102.0/24 maxlen: 24
45.88.103.0/24 maxlen: 24
178.159.93.0/24 maxlen: 24
178.159.95.0/24 maxlen: 24
185.238.88.0/22 maxlen: 24
194.113.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ad:22:42:22:70:46:d7:23:dc:86:68:2f:07:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 11:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2473dc8183894f0c68c27da259463c8533b981d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:f7:f5:f8:51:fb:e2:51:00:6c:a5:43:b1:
e3:db:e6:2a:63:78:20:72:15:f2:e7:65:36:4c:a4:
95:b4:16:b2:d9:09:b8:49:39:60:9a:52:45:00:e7:
d5:7b:4b:4c:de:cc:6a:7f:72:d8:9c:51:b3:1e:75:
7f:c3:f1:96:a5:67:52:79:bb:93:9c:38:5b:81:3c:
48:ea:62:f7:c5:22:f5:6b:df:f1:17:55:75:9f:d4:
e5:6f:f9:af:93:b2:22:1e:92:ab:96:dd:c0:79:d9:
c2:d8:5c:9a:3f:06:60:ea:d7:62:b9:6d:71:3f:8e:
37:8b:8f:fd:60:33:d5:bb:b8:a0:a5:28:04:23:2c:
2d:9f:6d:7e:e1:7d:98:59:eb:ef:1b:fc:8a:37:6e:
54:a5:02:32:39:b1:2a:cd:aa:e4:7f:7e:46:da:f3:
a0:35:e6:d2:9c:e5:c9:ec:07:67:b4:d8:45:32:f1:
78:41:bc:19:f8:e4:69:35:33:1f:2f:77:e7:26:10:
e9:46:74:14:1e:48:37:8f:26:af:3a:23:9a:91:7b:
b6:08:c1:40:06:a4:2c:4d:8e:67:aa:22:e3:15:f6:
a7:65:63:cf:28:c2:b6:6a:55:78:d9:74:e3:6c:af:
f3:00:73:7c:4f:04:d8:80:d8:74:88:96:a2:ff:dc:
8c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:47:3D:C8:18:38:94:F0:C6:8C:27:DA:25:94:63:C8:53:3B:98:1D
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.102.0/23
178.159.93.0/24
178.159.95.0/24
185.238.88.0/22
194.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
92:56:3e:1d:f5:96:71:91:0f:98:93:5d:62:e5:8a:57:05:45:
ce:2b:40:f9:d8:fa:cf:26:a0:74:4a:1d:36:fb:d2:5d:8d:a3:
90:17:81:1f:99:b4:75:80:f1:89:f2:13:c5:42:7c:15:4a:47:
e2:51:92:8e:b9:30:b1:72:7a:27:52:f3:6a:6d:a2:7c:73:a9:
09:48:4e:7f:31:63:47:71:35:bf:4a:ca:0f:75:ad:ed:37:a5:
df:fd:83:80:c1:25:2a:40:f7:be:50:68:1a:62:88:c4:89:0e:
c3:9e:68:0d:a3:77:3a:31:17:1f:ba:c8:f6:6d:f3:de:d1:76:
82:26:43:66:3d:11:b3:e4:4f:04:13:a9:7e:12:11:76:62:b2:
1d:d0:ad:11:72:c6:c4:4e:39:d5:89:13:37:7b:93:41:91:3e:
73:44:32:84:9d:94:40:20:6d:2b:f9:1d:aa:6f:a4:4c:fc:0c:
37:eb:d8:b3:af:e7:52:66:12:74:5e:1f:55:b2:41:d7:17:20:
0d:71:35:38:78:7c:5e:cc:e4:0d:2a:65:6c:75:14:cc:73:31:
7c:78:bd:95:56:8d:2e:f9:0d:56:fd:6d:87:8f:32:19:0e:84:
d8:75:a9:a5:e9:2b:b4:d0:ea:22:9c:bd:f8:fe:00:aa:25:6d:
cb:c5:8e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:33 2025 by rpki-client