Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/wjijn454ptb7YjSwbgYustwNzJI.roa
File: wjijn454ptb7YjSwbgYustwNzJI.roa (raw, json)
Hash identifier: q85TNLC9Fv889V7DCE+ssvZg83i29aUc5JCe0NjjzpA=
Subject key identifier: C2:38:A3:9F:8E:78:A6:D6:FB:62:34:B0:6E:06:2E:B2:DC:0D:CC:92
Certificate issuer: /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Certificate serial: 019426D8A719D5CD734EAD5C6D1CE93ACA1F
Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/wjijn454ptb7YjSwbgYustwNzJI.roa
Signing time: Thu 02 Jan 2025 11:48:40 +0000
ROA not before: Thu 02 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 194.76.232.0/22 maxlen: 22
194.76.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:a7:19:d5:cd:73:4e:ad:5c:6d:1c:e9:3a:ca:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Validity
Not Before: Jan 2 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c238a39f8e78a6d6fb6234b06e062eb2dc0dcc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:8b:bf:f6:bc:56:2d:64:ea:2b:9c:ba:9d:
cd:ef:ce:bc:ab:f2:67:7e:d8:fb:77:bc:a0:f8:02:
b1:f3:a8:d9:4d:6a:d9:26:53:1d:8f:42:ee:0a:b9:
68:f1:ce:a1:f7:e0:74:26:a1:17:a4:6f:fe:49:0d:
b6:35:3b:63:e6:d9:83:e2:a6:e5:07:3d:21:d9:23:
1a:7a:1a:e6:0a:32:a7:96:42:f0:94:35:1a:37:c0:
5a:37:e8:93:ed:de:7c:13:48:07:ea:82:5b:2a:6f:
76:b4:67:3b:68:26:38:17:cd:80:40:8c:03:9e:bf:
d2:64:d8:a7:61:a6:33:69:cf:98:b2:23:fb:bc:c7:
19:c2:56:8b:36:81:90:d1:49:06:96:a3:13:a1:ed:
e3:cd:df:45:b8:1c:ec:2b:04:e3:58:76:27:0d:c4:
f1:f3:08:da:82:ca:db:b2:16:de:8c:ab:3c:66:70:
04:7c:05:63:6b:7f:2d:cd:c8:5d:f0:af:f1:e8:79:
7b:bd:f6:d4:04:df:92:46:14:f8:02:05:15:51:d1:
89:d5:7a:4b:94:ac:73:e8:e5:11:bf:9e:a3:b6:41:
33:87:12:d6:84:20:92:0f:37:89:17:54:29:3e:e8:
7d:fa:41:ea:5a:d1:d7:77:b6:5c:5a:31:a3:37:3b:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:A3:9F:8E:78:A6:D6:FB:62:34:B0:6E:06:2E:B2:DC:0D:CC:92
X509v3 Authority Key Identifier:
keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/wjijn454ptb7YjSwbgYustwNzJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.232.0/22
Signature Algorithm: sha256WithRSAEncryption
42:e2:07:21:ca:d3:d7:bb:b4:9e:ff:a2:e7:af:4f:ac:6e:25:
26:1b:6c:ff:01:1f:e1:0c:f0:fb:00:28:ad:17:99:0e:f2:79:
2f:a7:8b:f9:b3:44:c4:2c:30:17:4b:8d:e6:9c:7b:b3:8d:f2:
67:3e:fc:b3:c9:52:ad:ff:1c:f4:bc:be:23:7f:f7:47:ce:43:
45:3c:5f:ba:87:6f:be:6c:db:36:82:1d:50:74:46:09:e3:34:
57:eb:37:7b:2c:0c:92:6c:27:85:68:99:b7:7a:e4:a2:c4:6b:
9b:89:6f:6c:2d:6c:01:df:0d:26:68:b6:2e:7b:26:c2:00:fa:
17:8c:84:f7:b1:7d:2d:a2:c0:a5:d1:ed:ba:05:7f:d5:bf:bd:
30:9c:8c:76:58:67:ed:29:3b:ee:27:4a:80:9d:80:7e:7b:b9:
0e:f0:03:95:6a:37:09:05:ba:38:4a:d4:80:91:5e:fd:98:71:
08:6a:70:f0:6e:41:2a:c3:c0:61:95:65:2c:6e:e6:a7:52:03:
e5:a3:ed:bc:20:af:13:ac:f0:18:41:5b:cb:2d:11:e1:09:fb:
26:fc:cd:77:83:f0:1d:83:c3:3a:74:7a:93:65:0c:9a:e2:59:
5b:c2:42:eb:cb:5f:0e:aa:df:ea:e0:2b:12:20:20:74:a1:18:
df:c8:e6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:22:23 2025 by rpki-client