Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa
File: WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa (raw, json)
Hash identifier: L1bh3lJQlQbB+0euiek2LnVAf5GTLk4lwBwlyM5cRJ0=
Subject key identifier: 58:39:F5:99:B1:D1:92:24:30:29:79:06:CE:57:EA:AC:45:05:D0:FC
Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial: 019428267D1ED431F8942F4E3FFF9C2FAD1F
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa
Signing time: Thu 02 Jan 2025 17:53:18 +0000
ROA not before: Thu 02 Jan 2025 17:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 5.45.16.0/23 maxlen: 23
5.45.18.0/24 maxlen: 24
2a01:6c8:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:7d:1e:d4:31:f8:94:2f:4e:3f:ff:9c:2f:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
Validity
Not Before: Jan 2 17:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5839f599b1d1922430297906ce57eaac4505d0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:ce:67:76:0a:93:81:be:ab:a9:55:1f:18:
11:60:f4:78:88:e1:2a:ed:7c:53:87:33:ea:73:39:
6a:fd:1b:ad:c9:65:b5:16:b4:91:ea:6e:e0:b6:a8:
a7:52:18:72:03:95:35:19:69:5b:9a:1f:b4:7f:56:
3c:13:e8:b8:db:cf:04:7a:9d:00:38:dc:0c:b9:ac:
ed:1d:b8:60:f2:7c:9b:f7:52:b8:51:3e:67:ea:40:
20:a7:5a:d9:ba:79:d5:42:9b:d1:48:91:30:09:dd:
22:3b:6d:76:c7:bc:de:0f:df:74:0d:ec:97:b4:bc:
2f:58:cd:db:f0:98:84:88:3b:57:bf:ed:ac:98:8c:
83:39:f1:3c:15:75:99:22:b0:d1:3e:89:1d:78:de:
8e:58:1c:ff:a4:bc:5a:b4:c0:b4:32:aa:3c:c9:d5:
bd:1a:7c:ae:fd:a8:bc:67:9e:b6:52:13:3b:c4:2a:
6b:2a:a5:63:c6:3c:87:c0:cb:cc:c0:4a:25:d9:38:
c3:b0:ae:6f:f6:30:70:99:89:a4:f7:22:a0:cb:93:
09:93:f7:bc:06:16:3f:ab:fa:ec:82:ea:67:22:01:
53:76:5e:53:30:bd:48:35:ab:46:4e:65:6b:e5:f3:
f1:cc:27:9d:c9:61:4a:1d:2b:f6:98:d9:b8:f8:c9:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:39:F5:99:B1:D1:92:24:30:29:79:06:CE:57:EA:AC:45:05:D0:FC
X509v3 Authority Key Identifier:
keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.16.0-5.45.18.255
IPv6:
2a01:6c8:2000::/36
Signature Algorithm: sha256WithRSAEncryption
76:10:5d:74:f6:7f:a6:ce:99:3c:0b:59:7c:6c:b0:54:04:c6:
78:a3:fd:26:4f:c0:dc:3d:ca:37:96:85:02:bb:50:a0:06:db:
2a:b2:be:9b:4e:73:24:66:a2:67:ad:be:89:67:66:39:c3:7e:
f3:4e:f9:e5:63:4d:b8:dc:39:ae:9f:59:a6:20:98:23:ab:ea:
aa:c8:0f:1d:3c:8b:9c:30:e6:2d:53:60:44:84:21:f7:53:24:
f7:22:a6:e7:27:a5:ab:c9:c6:51:ba:8b:cd:f9:92:1f:af:7d:
c5:c4:e6:e3:9d:a0:ef:90:27:91:9b:71:33:2b:a0:89:82:2a:
7f:ad:ec:ed:d9:4a:26:fe:a2:ce:7a:d2:47:61:ad:aa:eb:49:
ac:0b:85:0b:50:ee:4d:68:3e:47:e2:72:a5:37:c5:f7:f7:63:
20:ed:ac:73:e3:bf:9f:c8:db:c5:5d:7c:cb:c5:ea:0a:3f:1b:
81:f7:24:35:62:f4:12:c5:d4:db:c7:17:4a:f0:99:81:de:a5:
c3:ff:56:fa:dc:43:e1:55:99:94:fa:86:a1:66:99:a2:2e:95:
d6:07:97:d2:5c:a2:0d:ea:e2:d6:19:6a:8b:3e:bc:fc:8b:81:
47:62:7f:98:bf:2b:96:48:46:62:0b:d1:51:e9:f7:f4:eb:c3:
3e:3d:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:02:52 2025 by rpki-client