Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/wzSIWheUyd8XR3lfKH1U9_5-sjc.roa
File: wzSIWheUyd8XR3lfKH1U9_5-sjc.roa (raw, json)
Hash identifier: +fGDUGkFlZw/0Sis2PZCRzi1eE9l9+11pZBjDeaCFeo=
Subject key identifier: C3:34:88:5A:17:94:C9:DF:17:47:79:5F:28:7D:54:F7:FE:7E:B2:37
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B234CB09F48E7D1DF8F57C42588C3E
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/wzSIWheUyd8XR3lfKH1U9_5-sjc.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206411
IP address blocks: 88.220.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:34:cb:09:f4:8e:7d:1d:f8:f5:7c:42:58:8c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c334885a1794c9df1747795f287d54f7fe7eb237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:37:bf:ce:d4:0e:6c:a2:ab:1e:4e:a0:47:
dd:00:3c:ab:94:37:fc:ae:3c:e0:aa:4e:d8:30:9a:
a1:76:35:33:38:87:a0:73:3f:6d:e7:d7:96:96:09:
ba:f4:fd:69:56:62:b5:7b:59:13:e1:b6:19:46:81:
cc:70:c4:09:6b:0a:6d:20:a9:56:95:01:59:10:6e:
38:5f:cd:63:93:1f:3a:a6:1e:cf:57:09:90:d8:a2:
17:a7:84:a2:7a:ab:f6:d2:a2:27:c8:1d:a8:96:b7:
2e:92:68:0e:b2:fd:86:ad:54:9d:6a:3b:90:ff:73:
5e:c6:9f:51:61:ff:46:4e:81:95:4e:10:a5:35:be:
5f:f5:03:6e:3f:53:a1:80:57:55:b1:e5:2f:6e:4f:
15:e1:d4:e3:e8:f8:bf:97:84:5f:e4:00:d6:c3:44:
18:fb:46:80:26:d9:62:98:a9:ea:b6:39:bf:cf:04:
f1:ea:59:99:9b:47:1e:16:1b:51:b2:64:4d:34:54:
2b:7d:ab:bc:20:ad:64:8e:b1:87:87:66:d9:21:20:
3b:90:01:07:ad:ae:7f:2f:f7:cd:7d:70:03:53:ff:
3c:78:34:bf:cb:41:66:26:8f:b3:ff:b7:2a:3e:9e:
ad:8e:9b:ce:d4:af:35:ea:f9:bd:99:ef:c2:4e:82:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:34:88:5A:17:94:C9:DF:17:47:79:5F:28:7D:54:F7:FE:7E:B2:37
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/wzSIWheUyd8XR3lfKH1U9_5-sjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:94:4c:c7:88:f1:f4:05:77:66:01:d2:4f:ef:1e:47:26:a4:
ed:0f:b2:79:9e:56:cd:d5:52:eb:62:25:2f:8b:f4:1f:9c:3b:
6c:89:a8:e5:da:ba:94:11:00:c9:95:fe:ac:58:cb:d4:9d:ee:
47:e4:63:90:b6:24:3d:c3:af:69:8d:20:b7:7e:db:17:5c:ce:
02:40:b1:c9:10:63:3c:36:3f:d9:57:dd:06:21:7b:04:ac:37:
92:fc:bb:06:b0:60:99:86:84:dc:3e:bc:f3:e7:82:e1:a4:40:
0f:b0:b3:80:d4:78:dc:38:8c:9e:17:3f:d2:25:57:2d:8f:e4:
74:8e:08:03:9a:d4:1d:1b:b2:9c:ed:b3:47:3b:48:b0:34:81:
39:dc:25:f1:a0:16:46:20:59:d5:ef:90:1d:29:d8:41:da:68:
74:1e:b6:ed:af:00:35:51:c8:f8:41:63:55:a2:e3:9b:22:63:
76:37:27:1a:38:ea:68:ca:c6:52:f4:88:26:60:67:f0:73:10:
11:c1:65:26:30:87:7b:f4:4d:44:08:54:7f:3f:f6:40:1a:27:
f5:02:e2:0b:e7:ac:a6:5c:20:fc:4f:23:2d:00:52:7c:36:6c:
0b:5a:6d:c5:a7:60:db:35:47:0b:4b:63:83:0d:c3:51:1a:f2:
bb:6f:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:40 2025 by rpki-client