Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/WhLENsO2y4UEzkuswA1wx41c4K4.roa
File: WhLENsO2y4UEzkuswA1wx41c4K4.roa (raw, json)
Hash identifier: qqWz2hpUFCfdOvnndjkfI9tgPQ2D7KLxkWgnxyi1reI=
Subject key identifier: 5A:12:C4:36:C3:B6:CB:85:04:CE:4B:AC:C0:0D:70:C7:8D:5C:E0:AE
Certificate issuer: /CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Certificate serial: 019425FD6DDB650DFEAECD35EEAD4DB71B5C
Authority key identifier: 69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/WhLENsO2y4UEzkuswA1wx41c4K4.roa
Signing time: Thu 02 Jan 2025 07:49:13 +0000
ROA not before: Thu 02 Jan 2025 07:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57440
IP address blocks: 83.172.172.0/22 maxlen: 24
83.172.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:6d:db:65:0d:fe:ae:cd:35:ee:ad:4d:b7:1b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Validity
Not Before: Jan 2 07:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a12c436c3b6cb8504ce4bacc00d70c78d5ce0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:e1:d3:06:7a:e3:ef:12:14:0c:8f:d3:a0:
28:8f:90:b5:72:66:87:1f:fc:ff:a9:28:2b:f8:bd:
53:bc:79:5e:64:21:91:6f:a0:ce:f0:bb:3c:68:c7:
a8:29:6a:d8:16:f9:05:2f:ac:e3:19:fc:d4:77:e9:
51:b0:b7:10:e8:d6:ac:3b:d3:8c:3e:b2:33:46:02:
77:f6:c4:cf:d2:16:eb:21:99:c2:52:b0:eb:86:c4:
58:65:20:2d:1f:f2:c4:9b:86:75:4f:24:b6:8e:54:
1b:12:2f:cc:af:d6:7d:90:7c:9d:da:e0:c9:8b:13:
4f:34:a4:60:4f:8e:13:24:04:38:59:7e:25:69:29:
d8:e6:0d:3f:57:e3:58:c1:7e:d8:59:3e:a5:b9:58:
fc:a3:b2:18:e0:24:d1:8a:7b:58:c4:12:ef:92:8b:
7f:5f:ac:2c:c0:4f:bf:ea:74:87:c4:2a:66:e4:fe:
3b:b5:bf:04:ba:4e:ae:9f:c7:13:b0:cd:f5:6d:80:
94:7a:8d:6e:5f:8d:66:c0:d3:36:d9:59:45:a5:3c:
88:3a:ba:55:7c:2d:01:48:c6:5b:e6:0d:7a:df:35:
a0:1d:a2:b1:c3:b8:67:00:91:25:a8:05:17:b1:13:
b7:ea:49:33:84:7b:06:52:47:67:d3:62:5a:e3:42:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:12:C4:36:C3:B6:CB:85:04:CE:4B:AC:C0:0D:70:C7:8D:5C:E0:AE
X509v3 Authority Key Identifier:
keyid:69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/WhLENsO2y4UEzkuswA1wx41c4K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.172.172.0-83.172.179.255
Signature Algorithm: sha256WithRSAEncryption
96:4c:b5:c5:5c:c7:99:8b:a0:84:e6:b4:df:be:a5:7c:62:27:
77:4f:02:f7:8e:bc:37:a1:4a:b6:69:08:d1:43:ea:a6:c2:3d:
96:92:d4:cc:fd:94:f3:4a:59:d6:ef:c5:82:37:71:5b:89:ec:
c2:4a:03:00:1d:4b:e1:2a:d3:21:89:83:bb:93:98:ac:0d:74:
9e:08:55:9a:f8:38:63:90:71:e1:5a:0d:ad:e4:24:28:be:87:
ce:3c:d0:cd:4d:6a:be:70:d1:76:50:5e:96:b1:94:f8:45:10:
bf:35:c7:06:19:4c:5b:7e:43:c8:b9:c6:c4:cc:f6:1b:88:09:
8d:a6:d2:9c:de:63:c3:e2:7c:2e:17:de:01:21:b9:d8:42:bf:
60:a5:95:80:b3:aa:d4:d4:35:a2:f6:c1:5c:75:eb:32:18:03:
cc:6b:c5:58:d9:4e:00:1d:6e:b9:7a:ae:4c:c0:4b:20:a1:51:
26:62:76:21:60:05:c8:97:a8:95:23:86:6e:10:80:f7:fe:a3:
93:e7:aa:a6:0b:70:00:38:56:2b:3a:d1:38:40:8d:4e:0f:7f:
51:21:90:10:20:10:ab:50:59:89:54:ae:89:85:6a:ad:ed:c9:
5f:55:cb:11:d8:cc:8b:e7:4d:f2:94:dd:dc:7f:08:6e:32:28:
97:5c:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:09 2025 by rpki-client