Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/1WnsILYxjGfpft24w4cU0Z9HVy0.roa
File: 1WnsILYxjGfpft24w4cU0Z9HVy0.roa (raw, json)
Hash identifier: mXH7nwV2vIU6tKBb8bErNfD249HtR3Br3nGu9VJRl4A=
Subject key identifier: D5:69:EC:20:B6:31:8C:67:E9:7E:DD:B8:C3:87:14:D1:9F:47:57:2D
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 019427B5849CC9B2C8C4E67CB800823CF8E0
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/1WnsILYxjGfpft24w4cU0Z9HVy0.roa
Signing time: Thu 02 Jan 2025 15:49:54 +0000
ROA not before: Thu 02 Jan 2025 15:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56800
IP address blocks: 176.10.40.0/21 maxlen: 21
176.10.40.0/22 maxlen: 22
176.10.44.0/22 maxlen: 22
185.110.144.0/22 maxlen: 23
2a0b:26c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:84:9c:c9:b2:c8:c4:e6:7c:b8:00:82:3c:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Jan 2 15:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d569ec20b6318c67e97eddb8c38714d19f47572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:a2:ff:40:e0:b0:80:7d:e7:7e:ff:63:81:
2c:fb:bf:67:4b:df:77:d6:09:49:80:7a:5d:26:a1:
c3:c9:5b:c7:00:14:78:b1:06:bc:5e:9f:f0:cb:06:
ac:a6:e2:a9:81:0c:07:bb:46:3b:77:4c:51:b5:15:
5a:22:02:c6:d0:dd:bb:79:ef:f0:e8:88:68:5e:9a:
86:f0:5e:c2:cb:21:09:6b:bf:b2:68:34:10:dc:db:
76:29:b8:2d:3a:78:2c:4f:78:c3:86:e5:71:84:73:
40:07:dd:5b:c6:20:b8:d6:a9:7f:d0:47:88:cc:51:
0e:30:7c:df:7c:2e:9d:0c:98:c0:55:9f:20:4d:01:
61:af:38:86:16:d4:8e:12:cc:8d:d6:8a:10:e0:8f:
87:83:4d:20:68:21:ad:7e:bf:be:84:dd:cd:34:74:
01:fa:9f:d7:a9:39:4c:f6:90:01:4a:c8:d7:c1:f7:
ab:60:53:bc:8d:20:52:92:7b:c0:a3:2b:92:c4:77:
60:3f:74:e1:dd:7d:71:6b:fe:d2:ce:46:0c:dd:2a:
35:5e:44:ef:e0:a7:47:34:c4:fa:2b:59:a9:f0:4d:
26:16:21:f4:1e:93:c4:e8:c8:6f:08:51:58:b5:17:
89:f5:2f:33:bb:31:d5:b3:00:d2:f2:b9:f6:3d:62:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:69:EC:20:B6:31:8C:67:E9:7E:DD:B8:C3:87:14:D1:9F:47:57:2D
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/1WnsILYxjGfpft24w4cU0Z9HVy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.40.0/21
185.110.144.0/22
IPv6:
2a0b:26c0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:e8:6e:cf:9c:bf:9d:20:c0:b6:13:a4:aa:a4:f5:81:91:d3:
d2:7f:1d:af:7a:0f:ca:9f:48:75:ba:d9:59:18:27:0c:d3:58:
f1:ba:17:d6:91:09:c1:b5:b9:76:6a:e9:e0:29:df:c7:53:cd:
21:74:85:93:7b:f8:a9:12:92:27:26:1f:0f:c6:ef:45:d7:55:
68:79:bd:10:a3:23:18:22:5f:aa:14:d5:90:15:50:88:6e:26:
54:7d:32:1b:19:18:ba:ba:89:be:ab:0f:88:90:50:5b:d1:3b:
ec:10:68:38:f1:73:16:c3:9b:06:ba:36:a6:ab:e4:9f:08:ce:
a6:d1:7a:2c:2e:89:97:1b:14:4f:41:3f:a1:8d:1c:f7:03:14:
75:95:df:f0:13:f1:c3:bc:b9:71:08:53:79:24:a5:c9:9e:32:
44:96:8a:aa:8e:03:12:9d:db:1b:98:09:00:93:a2:8a:be:2a:
99:d5:b5:5e:f6:80:b3:6e:a0:4b:63:fd:00:25:1c:68:cb:f7:
d1:b6:c9:dd:0b:3a:44:5b:ec:88:91:44:60:41:90:b9:be:6b:
36:32:45:4d:e3:c3:0a:ee:08:da:7f:d7:19:85:6c:6b:87:a2:
0b:06:03:cd:73:2f:fb:e2:55:99:56:4a:3c:43:3e:27:54:9d:
12:85:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:52:46 2025 by rpki-client