Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/wbUwXsM6rSDrkQwsebUB7l1OtR0.roa
File: wbUwXsM6rSDrkQwsebUB7l1OtR0.roa (raw, json)
Hash identifier: l9d1EOf1QfY4TX8pjAVvmIhfn1wufKZnDqjhNvEB3f4=
Subject key identifier: C1:B5:30:5E:C3:3A:AD:20:EB:91:0C:2C:79:B5:01:EE:5D:4E:B5:1D
Certificate issuer: /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Certificate serial: 0194244542CB610E48849207971D18A9E448
Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/wbUwXsM6rSDrkQwsebUB7l1OtR0.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210627
IP address blocks: 185.188.40.0/24 maxlen: 24
2a11:2c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:42:cb:61:0e:48:84:92:07:97:1d:18:a9:e4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1b5305ec33aad20eb910c2c79b501ee5d4eb51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:16:18:70:34:2b:1a:a5:8d:bb:b0:8f:92:
99:42:0f:19:39:dd:d8:e4:50:2a:18:b5:30:b5:85:
42:cc:23:5f:73:36:f5:e5:fb:97:00:8e:7b:e5:13:
41:a8:1c:c9:47:48:c4:29:87:e5:a7:7c:1a:83:23:
e0:29:9c:04:80:a3:f4:82:6b:a7:8d:8a:00:f5:b3:
12:78:f9:c9:64:d1:b9:f0:e6:99:00:c9:76:1e:f2:
4d:f1:12:81:13:f8:c7:28:63:ae:16:58:03:15:df:
5d:a9:af:59:f3:b2:f9:df:db:0a:87:83:b7:8d:d9:
df:b3:59:fd:e5:78:e4:3f:cd:22:bc:27:74:2b:2d:
42:48:20:50:d9:ca:00:82:5e:82:64:ca:56:d4:8f:
bd:0d:c5:75:95:06:fe:ad:e3:30:62:a2:b6:24:ea:
71:c3:59:1c:19:ca:b5:64:84:cb:cb:00:a2:71:f7:
71:3c:3d:47:91:7c:48:b7:bc:af:43:6f:c4:cb:9c:
5d:60:22:7b:07:f3:38:e1:70:cc:a0:3a:13:c4:c8:
0a:05:4c:8b:09:a3:15:8c:b6:7f:17:58:0b:89:76:
af:b0:d7:d1:73:ca:47:ec:a7:50:87:4a:68:91:52:
46:47:9d:74:a8:83:97:27:84:91:47:5e:a5:c8:76:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B5:30:5E:C3:3A:AD:20:EB:91:0C:2C:79:B5:01:EE:5D:4E:B5:1D
X509v3 Authority Key Identifier:
keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/wbUwXsM6rSDrkQwsebUB7l1OtR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.40.0/24
IPv6:
2a11:2c0::/29
Signature Algorithm: sha256WithRSAEncryption
51:af:cd:2d:11:06:24:56:c1:1f:4b:42:a7:48:34:9e:0b:68:
a5:f3:64:29:c7:3a:ac:a0:2f:8c:50:21:ae:09:00:a5:0e:b6:
52:0a:b6:63:b8:97:5d:64:0b:a3:05:1b:b3:01:06:fe:36:1a:
00:9e:27:76:6f:15:4a:dc:1c:c7:8c:96:19:b9:5e:4a:35:0b:
f3:f4:c8:b4:cc:e5:98:69:e8:ca:c3:2a:d8:45:7e:a6:4d:44:
d8:12:0d:7f:97:74:77:ef:84:e9:15:1e:59:0f:46:e1:9f:95:
f4:8b:cd:87:f1:26:38:f6:06:5f:70:57:b3:f4:bf:45:ba:72:
52:26:f2:b2:7f:e8:00:4e:8b:29:7e:0b:8f:c5:79:3a:c7:4b:
77:df:68:53:33:28:5a:86:31:90:0c:67:d6:68:c6:27:70:36:
56:3e:d6:e4:70:38:5b:32:98:97:b9:9c:b4:f4:7b:7e:c6:58:
2d:c1:00:4e:13:06:09:93:7d:1f:64:f3:0c:a7:af:4f:1a:f0:
69:ae:51:50:67:b5:5e:22:2c:89:65:68:e5:96:73:4b:c3:5b:
6b:57:80:dd:40:be:5e:31:7c:58:e1:24:15:cf:da:15:cb:b8:
ba:67:a5:5a:d5:1c:c5:18:ab:fd:ed:73:3f:3f:c4:6e:e3:28:
47:ee:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:57:19 2025 by rpki-client