Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/wcLPDXwZhknfwFVrmzWdaV09zJc.roa
File: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (raw, json)
Hash identifier: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=
Subject key identifier: C1:C2:CF:0D:7C:19:86:49:DF:C0:55:6B:9B:35:9D:69:5D:3D:CC:97
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 01941F8C9F9ED9D4AD1C5021607EDE72C08C
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/wcLPDXwZhknfwFVrmzWdaV09zJc.roa
Signing time: Wed 01 Jan 2025 01:48:17 +0000
ROA not before: Wed 01 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49078
IP address blocks: 195.88.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9f:9e:d9:d4:ad:1c:50:21:60:7e:de:72:c0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c2cf0d7c198649dfc0556b9b359d695d3dcc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:7b:18:23:5d:cc:5f:4a:67:3b:43:b8:78:
41:0e:42:8b:04:3c:e6:b6:af:eb:b7:60:62:87:e3:
80:fc:d6:d4:d0:21:6d:c2:99:33:7d:8d:43:a6:b9:
1f:fe:2c:9d:81:51:7f:62:9b:66:61:1d:1f:51:39:
88:45:97:5b:8a:d2:02:3e:bc:47:89:fd:19:01:34:
50:98:8b:d2:cd:0f:86:9a:d4:85:11:b5:ae:cb:23:
1e:f1:5a:d1:4b:2a:f3:94:18:35:e0:bb:d8:af:a5:
8b:90:81:96:e2:f6:f8:4f:bb:1b:0f:39:35:fb:6a:
49:7d:5b:54:24:ef:14:8d:9a:99:0d:96:01:59:5d:
b8:6a:62:82:af:64:52:6b:8e:49:54:5a:05:95:7e:
2b:04:9d:09:e2:71:16:c6:ba:02:25:72:73:ef:9f:
da:de:dd:53:0d:4c:80:20:a4:cd:9e:cb:75:a1:dd:
12:38:4f:f6:93:4f:11:df:62:b4:07:a9:b5:57:26:
4a:1c:96:d0:f1:63:f0:e9:cb:b7:0b:b4:cb:b7:a2:
15:e3:3b:bf:ea:11:c4:42:f3:8f:3b:d4:82:8a:a4:
24:c8:74:91:66:ed:89:89:e9:49:0e:87:f8:09:25:
de:62:d3:ad:61:c4:e5:d8:c1:19:1d:d2:74:b4:42:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C2:CF:0D:7C:19:86:49:DF:C0:55:6B:9B:35:9D:69:5D:3D:CC:97
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/wcLPDXwZhknfwFVrmzWdaV09zJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.183.0/24
Signature Algorithm: sha256WithRSAEncryption
52:95:5c:4e:e8:f9:58:38:85:76:c8:ca:d2:e9:2e:ae:75:d1:
3a:3a:e8:50:ca:7f:b3:f1:2f:4c:d6:09:6d:d0:e1:cd:cc:31:
88:a4:75:af:8d:ff:70:0f:0f:80:84:40:10:ea:2d:92:53:fb:
63:b8:55:f8:4d:db:02:f0:10:be:90:39:3d:22:86:42:fe:81:
f4:9d:f4:7d:97:53:a7:33:f4:4d:46:9c:ee:b6:5a:10:d7:43:
b6:a3:71:2d:34:e7:66:51:08:91:11:31:77:3f:2b:8a:2c:48:
b7:de:b3:22:6a:0c:c7:e3:bb:98:73:93:99:ce:60:1d:7b:b1:
f4:78:ee:3e:6c:54:f0:44:8e:aa:05:b6:b8:39:15:56:80:ae:
8b:98:f5:27:56:d3:65:42:ab:03:b3:12:86:cc:08:39:a6:ce:
c1:b1:72:f0:15:84:f8:9b:11:68:35:a5:b9:2a:6c:31:79:12:
f3:2a:5d:3e:08:2f:82:97:da:0f:cb:b6:ce:41:4a:ab:d7:8a:
4b:d8:a9:c4:70:7f:59:5f:86:9d:0e:3d:0c:cd:99:76:d9:fe:
4e:5a:7a:02:64:81:b9:2d:e7:e0:2c:10:01:2a:16:dc:92:84:
e3:85:65:28:55:8b:1b:3b:13:55:24:19:43:6e:5e:ed:eb:ca:
17:00:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:27 2025 by rpki-client