Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CWC14ACtz9zZz9QtPKIuoN3EYg8.roa
File: CWC14ACtz9zZz9QtPKIuoN3EYg8.roa (raw, json)
Hash identifier: bqn0Jj7mhZCihu23TpreMhWLqpTKZmV32uklvDTdoGg=
Subject key identifier: 09:60:B5:E0:00:AD:CF:DC:D9:CF:D4:2D:3C:A2:2E:A0:DD:C4:62:0F
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01942220041F68DEA38110927DBF5432884F
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CWC14ACtz9zZz9QtPKIuoN3EYg8.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201021
IP address blocks: 46.38.141.0/24 maxlen: 24
185.143.74.0/24 maxlen: 24
185.143.75.0/24 maxlen: 24
212.16.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:04:1f:68:de:a3:81:10:92:7d:bf:54:32:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0960b5e000adcfdcd9cfd42d3ca22ea0ddc4620f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:a4:32:c2:ac:49:ae:b2:af:1a:17:82:9b:
bf:c1:04:8f:18:8b:37:a8:f4:58:54:dd:90:ef:48:
a3:f4:7c:a8:a7:7d:b7:ba:84:d8:de:e6:c0:21:73:
eb:14:32:bb:21:e0:c8:96:f7:ae:8d:6a:d4:d1:b3:
40:e0:3a:d9:db:44:ae:a4:e6:8e:69:41:98:7f:f3:
98:d9:af:9d:c5:73:0d:c9:94:ce:81:97:f3:f8:77:
d6:a6:d8:47:33:fb:2d:00:c9:a1:97:84:45:57:da:
a5:58:a3:7c:7a:84:6c:80:bd:28:71:d7:dd:c2:29:
37:36:ea:40:22:5b:f7:a8:bb:ae:8b:fd:82:5e:d5:
81:48:d7:5d:59:1f:fa:1b:9d:45:83:48:78:56:be:
54:8a:81:e1:27:a7:b9:93:5a:de:a0:52:17:62:f9:
7e:38:3a:c5:86:e8:af:b1:4b:6a:67:a6:56:8f:64:
8e:21:8e:4f:26:45:ae:9a:e4:bf:ec:55:a3:44:72:
06:23:6b:62:0a:2e:63:e5:23:26:ec:7b:64:1f:0f:
ec:fe:13:50:22:37:76:4c:82:61:38:32:a5:1e:47:
c0:05:99:de:ae:e5:94:89:71:0e:c2:04:c4:79:b1:
b0:cd:79:de:a1:44:57:c0:53:c2:57:68:77:66:5c:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:60:B5:E0:00:AD:CF:DC:D9:CF:D4:2D:3C:A2:2E:A0:DD:C4:62:0F
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CWC14ACtz9zZz9QtPKIuoN3EYg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.141.0/24
185.143.74.0/23
212.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:84:8c:0b:e9:f8:a5:b9:bb:7d:a9:b4:ba:1e:98:a6:b4:f5:
14:9b:a6:12:7a:99:49:49:18:d1:a8:3a:17:22:15:2e:c0:1d:
49:ab:25:8b:55:01:9e:06:75:4e:75:84:96:e1:61:65:5d:8b:
22:04:2f:85:06:b6:68:d8:54:8e:fd:bc:03:41:02:0c:58:96:
11:af:7e:8b:f5:5e:ac:a9:c3:65:99:5f:74:ed:96:41:90:28:
93:a5:77:93:f6:28:d3:42:41:5a:8d:43:da:b1:64:a0:94:d0:
df:83:06:39:10:e2:1f:0b:ef:4b:db:1e:de:f5:a0:24:90:cd:
07:19:67:6c:31:34:48:f9:8e:af:c4:31:e1:47:83:a9:9c:6a:
64:35:b7:e8:04:2c:32:00:f8:5c:94:36:7f:29:6b:76:f4:9f:
b4:83:aa:67:b3:78:3c:42:07:f0:a6:7d:5a:bd:32:3e:66:bf:
b0:0f:bb:b1:78:20:6f:86:95:d6:c9:13:04:3d:c6:f8:e3:fe:
e2:76:b5:ab:46:69:0e:2e:ea:ce:34:14:07:40:89:62:15:be:
51:22:43:3c:4f:8d:86:55:36:02:f2:a3:f8:6f:79:38:7a:45:
03:40:8b:bd:b5:cb:a2:99:fa:da:21:d7:8b:d6:8e:e6:40:8b:
35:cf:fd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:43:12 2025 by rpki-client