Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/wonoA_cs_njK19k2rpw4egFrSTU.roa
File: wonoA_cs_njK19k2rpw4egFrSTU.roa (raw, json)
Hash identifier: ng5AEw7xNqDcHFkEECYFEyho12TTUkJenLRXIkEgt5c=
Subject key identifier: C2:89:E8:03:F7:2C:FE:78:CA:D7:D9:36:AE:9C:38:7A:01:6B:49:35
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 01942067ECC5108B032F0FC7BE64AC18421D
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/wonoA_cs_njK19k2rpw4egFrSTU.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42816
IP address blocks: 46.16.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ec:c5:10:8b:03:2f:0f:c7:be:64:ac:18:42:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c289e803f72cfe78cad7d936ae9c387a016b4935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:72:de:a5:99:fc:f3:e1:d4:fd:e2:bb:9e:
39:8b:a4:30:bb:a5:fb:2c:f5:61:31:8f:b0:f1:fb:
01:33:2c:7d:cf:a7:03:14:4c:5f:18:ed:59:5a:50:
44:cd:64:72:7a:a6:51:6d:77:ae:ab:b0:2f:6f:73:
f7:73:6f:93:c3:06:09:a8:01:99:02:c1:06:59:08:
2a:ff:e5:3f:4c:b9:ad:1a:2b:58:f5:e0:37:ed:b6:
57:19:4e:2d:2d:2a:0b:20:65:56:ab:79:e2:a8:99:
97:cc:3f:07:6c:d7:31:30:25:d6:97:3d:cf:2d:83:
75:3c:be:80:c7:b7:d1:63:93:21:17:59:1f:fd:12:
24:c9:73:56:0a:89:ca:8e:90:4b:f2:3b:ba:5d:3c:
37:ac:ec:61:ac:a0:64:6e:d6:82:d2:46:92:da:83:
09:cd:ed:3d:b3:ad:93:3b:8a:3b:85:9e:72:a7:e2:
97:8f:2b:94:12:25:b4:e2:7f:67:f5:49:61:7f:5e:
f4:af:9a:0e:0a:c7:34:a3:26:c4:c1:89:f0:46:1d:
04:c7:2b:60:79:6f:ba:bc:98:d0:35:3c:0c:9d:93:
3b:72:de:0b:a8:a1:d5:b7:d3:2e:cf:2f:45:51:24:
2e:00:39:0c:55:65:b7:2e:44:1b:2b:96:cb:4c:4c:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:E8:03:F7:2C:FE:78:CA:D7:D9:36:AE:9C:38:7A:01:6B:49:35
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/wonoA_cs_njK19k2rpw4egFrSTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:0e:2d:f2:cd:0a:5f:65:58:4d:eb:1f:63:47:8a:bd:a5:cc:
3f:f8:4a:a3:93:47:3b:18:33:6f:9e:fc:9f:21:24:24:97:41:
ff:38:51:96:30:43:80:00:ad:f7:0c:b3:4e:ce:f6:e6:20:f4:
6e:fe:59:53:54:da:f2:50:d3:4a:20:23:cf:5c:e8:17:98:ba:
da:cd:a6:44:fe:97:68:ff:41:89:4d:6b:41:ea:bf:4d:89:a0:
c4:ca:13:29:70:58:d5:c7:69:f8:50:96:58:4d:47:fa:27:03:
d6:a4:97:f8:89:17:c1:ac:c5:0f:11:f2:86:49:e3:28:16:54:
3a:80:c7:ba:06:51:91:97:81:88:d9:4e:43:8f:ba:f4:c2:29:
a8:24:16:3d:37:8a:80:27:14:54:4d:20:68:4a:ce:fb:54:f9:
65:2f:95:f2:6a:5d:55:49:dc:e4:4d:8e:a6:34:d0:8b:ee:ce:
11:44:00:b7:bc:e4:4a:d8:b0:e9:3b:b7:b5:82:ab:59:f6:29:
8c:bb:56:35:af:ae:62:5e:16:b8:3f:ca:2e:a5:0d:e6:f5:d4:
71:59:c6:d0:4a:59:28:7b:cb:67:cd:f0:ff:ad:a1:bf:fb:74:
81:a5:65:92:3b:4b:60:3b:8f:e5:a7:eb:be:67:ce:b1:a1:2c:
59:b5:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:45:36 2025 by rpki-client