Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/WPkeJ7VVhsQIoqJp0qX_1NW0Ods.roa
File: WPkeJ7VVhsQIoqJp0qX_1NW0Ods.roa (raw, json)
Hash identifier: mxYAtiu5jjm0C1BeKBzzTHZkmyPXrcSCe59vx0mWEsM=
Subject key identifier: 58:F9:1E:27:B5:55:86:C4:08:A2:A2:69:D2:A5:FF:D4:D5:B4:39:DB
Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial: 019420D602CCCC843EE7E6EA085F8A4FF6C5
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/WPkeJ7VVhsQIoqJp0qX_1NW0Ods.roa
Signing time: Wed 01 Jan 2025 07:48:03 +0000
ROA not before: Wed 01 Jan 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 195.62.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:02:cc:cc:84:3e:e7:e6:ea:08:5f:8a:4f:f6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Validity
Not Before: Jan 1 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58f91e27b55586c408a2a269d2a5ffd4d5b439db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:35:cb:5e:33:24:71:a2:b8:fc:b0:da:e2:
a3:22:51:7d:75:a6:2c:01:70:92:8f:81:e6:9f:df:
8c:2b:90:a0:9c:26:4d:97:a7:1c:5e:69:17:46:04:
b1:00:cd:b5:99:2e:f1:59:bd:fb:15:56:99:d5:c5:
0a:ed:c9:46:8f:0d:60:d6:94:3b:ba:4e:09:0a:87:
c4:16:0c:d6:8b:5d:a6:eb:ea:d9:b6:78:89:b1:0d:
5f:da:68:4d:7d:7e:0b:45:2c:57:d6:fd:ab:77:29:
e1:f9:a5:86:9c:20:e1:c9:18:9f:c0:02:30:7a:ec:
0f:b2:17:16:9d:e1:a9:43:14:d6:cf:44:f9:5b:83:
f9:6d:08:45:6d:fe:d4:17:d8:67:d9:c5:eb:29:c5:
ac:03:8b:fa:2a:76:76:6c:06:c5:74:fa:3d:76:6d:
b6:9b:ac:99:38:08:2a:46:52:46:93:a9:46:99:c9:
22:c0:07:83:6d:9d:5c:ce:2f:8a:0c:26:2b:97:81:
67:79:bc:d4:95:78:fa:5a:4d:a2:68:27:fc:0c:ad:
37:51:4e:8d:3d:62:5a:50:70:6b:d7:c9:98:cd:93:
c1:09:7c:23:d9:a3:97:6e:4a:10:02:e2:fe:8d:f4:
55:68:73:c9:6d:d2:b0:39:b3:d8:da:47:0b:a9:bc:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F9:1E:27:B5:55:86:C4:08:A2:A2:69:D2:A5:FF:D4:D5:B4:39:DB
X509v3 Authority Key Identifier:
keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/WPkeJ7VVhsQIoqJp0qX_1NW0Ods.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.50.0/24
Signature Algorithm: sha256WithRSAEncryption
83:61:35:e0:42:9b:6a:39:26:76:af:c2:01:76:5b:87:25:36:
09:d1:52:8e:ae:3b:8e:4a:73:66:82:d6:f6:3f:42:1c:72:cb:
1a:02:76:d6:db:9f:99:3e:1f:78:cd:b8:70:73:c1:c7:7b:70:
02:97:53:10:0e:7b:df:95:4d:ee:7b:4a:06:37:ca:e9:29:f7:
a4:96:58:b4:5b:45:8c:c2:2f:ec:6b:3c:c7:80:4d:d8:17:4e:
10:43:bd:6e:7d:78:cd:21:65:43:42:d4:a2:04:8d:d1:2a:7b:
2e:00:00:78:8b:68:a6:98:e3:12:93:d7:9f:26:e5:d2:f4:8f:
41:5c:3f:d4:f2:b8:99:dc:03:c4:03:24:b0:11:41:ec:5b:03:
be:1b:5b:fe:82:cc:c4:fe:6b:5c:83:bc:bf:99:a7:84:bf:e5:
82:ac:94:71:65:40:10:44:df:51:5c:9b:f4:8a:20:8c:33:bc:
93:9d:dc:0b:3e:1d:7a:ea:30:0f:ea:94:8b:7d:21:02:59:64:
70:01:3a:00:91:03:43:f5:32:f7:e7:97:17:ad:3d:96:31:1b:
48:4f:d6:cf:8d:2f:f9:70:fd:69:26:29:54:60:47:7c:8e:a2:
b6:9b:67:17:65:94:a6:b7:d6:48:52:93:ea:8f:c9:09:e8:fd:
6b:ec:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:41 2025 by rpki-client