Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/WskaznLEMYwubtusiQFBluw68yw.roa
File: WskaznLEMYwubtusiQFBluw68yw.roa (raw, json)
Hash identifier: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=
Subject key identifier: 5A:C9:1A:CE:72:C4:31:8C:2E:6E:DB:AC:89:01:41:96:EC:3A:F3:2C
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019424B3BD60E0DB6AF0CB95136EB35ABE6B
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/WskaznLEMYwubtusiQFBluw68yw.roa
Signing time: Thu 02 Jan 2025 01:49:06 +0000
ROA not before: Thu 02 Jan 2025 01:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62080
IP address blocks: 194.145.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:bd:60:e0:db:6a:f0:cb:95:13:6e:b3:5a:be:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ac91ace72c4318c2e6edbac89014196ec3af32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cd:25:59:46:fc:12:af:ba:77:38:66:a8:c2:
17:dc:d1:2f:4e:2b:7e:9c:b6:01:65:b8:35:67:f4:
fd:e4:4d:bf:4c:3e:d2:ba:9f:11:5c:7b:1d:7d:db:
09:e1:7c:ff:dc:66:87:9f:a3:e8:55:52:37:83:bc:
4f:8e:c4:53:8d:70:8a:37:82:ed:5d:65:bb:67:d5:
5a:90:7a:6f:57:04:b6:24:35:52:e7:d3:35:ad:cc:
90:0e:4f:55:33:02:8a:af:5f:55:e1:a9:27:5f:b3:
2f:33:a7:ac:04:a1:a7:c7:32:13:fe:69:41:ec:1c:
c1:e8:ca:39:f8:19:8e:96:6c:2d:08:6e:b6:d5:61:
64:95:8d:2b:5e:a5:54:91:34:f6:22:92:89:a8:d6:
d5:f1:b4:5b:75:e8:37:70:51:a3:b1:66:61:d3:72:
fb:12:74:ed:ec:f5:9a:f8:1b:d6:85:b3:c4:ac:14:
56:ce:ad:03:db:92:74:30:fe:4f:d3:be:55:a9:14:
df:b4:99:3f:7f:ab:aa:43:6d:fd:82:6d:88:29:c9:
de:da:3d:bc:df:7c:14:80:e8:c3:3b:ba:30:cd:02:
be:c5:27:a2:42:a2:e7:3d:d7:5a:07:4b:e1:86:39:
3f:d6:3b:f0:cc:cc:92:f2:b1:81:f7:85:00:98:a6:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:1A:CE:72:C4:31:8C:2E:6E:DB:AC:89:01:41:96:EC:3A:F3:2C
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/WskaznLEMYwubtusiQFBluw68yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.141.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ee:1c:26:0a:d2:be:71:8e:35:06:b1:a5:35:70:30:ad:c6:
3b:4a:4e:88:c5:0b:4d:eb:b0:e2:93:47:d3:2a:87:d5:d8:60:
1a:02:09:13:90:69:b5:ef:12:be:b2:5e:9c:5a:5b:05:62:e8:
f1:dc:28:34:d5:61:eb:2f:7a:d0:58:f4:b2:14:a6:4c:d2:d9:
96:1e:38:15:c5:e7:4e:7d:71:9a:bb:d6:9a:66:3d:a7:39:68:
ef:55:16:4c:81:c5:76:cc:7a:36:28:5b:9d:08:9d:95:00:b9:
3a:2e:70:27:90:ee:47:e7:48:fc:ed:a9:00:b9:f8:fc:f0:c3:
0d:b5:c9:38:b9:37:0b:82:a9:a1:54:f5:a9:ae:14:6e:fb:0f:
05:1a:1b:63:03:06:c8:82:a9:17:62:db:84:f8:7c:bc:fe:72:
e8:74:e8:4f:dc:57:91:e3:48:5e:13:d6:b3:26:f9:10:6f:ff:
57:ae:61:2d:ad:bb:da:92:5d:9a:1f:67:cd:ad:b8:bf:6e:a8:
68:e1:1d:41:bb:b7:45:14:53:32:a7:69:5f:78:4a:fe:51:c2:
66:74:ae:73:09:f2:72:80:46:cc:49:10:1e:7d:41:35:0c:e3:
36:9e:30:e7:89:43:e7:75:b5:e4:61:54:cd:ee:92:67:8f:14:
08:df:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:41:50 2025 by rpki-client