Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/W5GuTda0LPuZQbm6SVvfp_MJnb4.roa
File: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (raw, json)
Hash identifier: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=
Subject key identifier: 5B:91:AE:4D:D6:B4:2C:FB:99:41:B9:BA:49:5B:DF:A7:F3:09:9D:BE
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019427B61A0CCBC56CF41305915285868575
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/W5GuTda0LPuZQbm6SVvfp_MJnb4.roa
Signing time: Thu 02 Jan 2025 15:50:33 +0000
ROA not before: Thu 02 Jan 2025 15:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202320
IP address blocks: 147.234.21.0/24 maxlen: 24
147.234.21.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1a:0c:cb:c5:6c:f4:13:05:91:52:85:86:85:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b91ae4dd6b42cfb9941b9ba495bdfa7f3099dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:0a:64:de:e2:fd:0d:18:51:39:72:97:92:
67:8d:ea:54:a1:f8:44:3b:55:ae:d8:a8:09:af:74:
1e:e2:99:e5:05:25:a9:eb:de:ca:c8:8a:0f:1a:14:
7d:14:54:24:6b:e4:ba:e0:01:0d:f8:a9:99:11:c2:
a7:d5:fa:51:9f:0f:f5:86:f2:08:74:88:2c:99:4c:
3e:c2:ed:20:61:28:8d:c6:43:a7:12:94:5d:7e:46:
b9:c5:3a:3b:b2:01:b0:58:81:f1:82:1b:80:d1:2f:
c1:c8:76:a2:f3:62:2a:9b:8d:d5:84:7e:ed:cb:f0:
96:72:b2:00:54:6e:ac:d0:b6:04:c7:7b:7f:1e:9e:
56:6f:5d:3e:50:d9:6b:a5:67:ea:51:cd:f5:c3:0f:
dd:be:6d:35:70:08:40:d3:42:14:e6:2e:c0:e8:6d:
23:a9:01:5c:95:15:3f:4f:ad:da:a8:3e:44:d0:58:
8d:d7:e8:d1:98:fc:9d:ad:35:44:a0:8e:81:3d:9a:
14:ed:67:75:cd:76:a8:14:33:93:23:60:91:65:6f:
4f:cf:89:c4:bd:95:c5:fd:25:80:b1:d1:99:40:60:
28:bb:45:04:bf:3e:7e:d7:53:f5:18:bf:7b:35:52:
a2:14:c1:92:ba:55:47:f1:7e:5a:b1:ca:16:02:94:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:91:AE:4D:D6:B4:2C:FB:99:41:B9:BA:49:5B:DF:A7:F3:09:9D:BE
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/W5GuTda0LPuZQbm6SVvfp_MJnb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c4:f5:66:0f:07:38:8d:9a:cb:23:ca:5e:9c:de:c0:c2:7f:
48:fd:a6:d8:eb:e7:0e:43:0a:dd:b0:c7:7c:b8:7a:38:93:d2:
58:dc:93:8a:7b:e4:80:3a:a4:92:8d:8b:10:a3:75:d1:34:99:
e5:46:0e:3d:0f:25:49:f7:b4:71:a8:9d:ba:e2:6b:80:a2:19:
e1:c8:ff:42:54:c2:1a:3a:74:41:d3:49:00:bd:b7:b3:eb:83:
19:93:4c:81:b5:77:35:c6:6b:4d:4d:bd:dd:0c:51:9c:6a:40:
00:c6:d7:59:2c:e9:51:73:1f:76:e1:c1:8f:f1:c4:3c:79:38:
7e:f1:cd:00:1a:58:9a:f6:65:93:7c:a9:6a:4e:20:a8:e5:6a:
2d:7b:ca:cf:04:39:70:19:73:a4:7c:aa:b3:93:29:93:94:ce:
57:23:f1:a6:6c:64:9b:5a:76:4e:97:98:c1:ba:58:bb:8a:9a:
ab:86:9f:0d:ee:25:3b:33:66:8e:78:4f:3d:31:9e:bf:4d:ed:
ce:97:88:3c:e9:27:cb:63:a9:2a:4d:92:82:f9:1f:2b:1b:7a:
72:40:e0:71:b7:ef:1f:b2:6e:4c:16:b7:f1:77:b9:2b:23:68:
5c:7f:57:4e:67:1f:c1:5c:bc:b0:07:16:6e:e0:22:a8:18:8a:
fc:a5:d5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:05 2025 by rpki-client