Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/W4XH1igpyllhe-Wuhr5RQ0aotGY.roa
File: W4XH1igpyllhe-Wuhr5RQ0aotGY.roa (raw, json)
Hash identifier: Et9BjRBWW/jaWGIcSjk5lRAVUP5Y5kioBLyD5AdfsZc=
Subject key identifier: 5B:85:C7:D6:28:29:CA:59:61:7B:E5:AE:86:BE:51:43:46:A8:B4:66
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC7B98D8D53CA97A2D66FA1F921749
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/W4XH1igpyllhe-Wuhr5RQ0aotGY.roa
Signing time: Thu 02 Jan 2025 07:48:11 +0000
ROA not before: Thu 02 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141167
IP address blocks: 82.115.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7b:98:d8:d5:3c:a9:7a:2d:66:fa:1f:92:17:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b85c7d62829ca59617be5ae86be514346a8b466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:da:9d:20:89:f0:85:9a:c1:50:5e:f2:9d:
4c:f5:96:4c:76:41:dc:c0:63:4d:5a:35:a2:5e:cf:
8b:e7:98:26:45:fd:79:b6:7f:d4:15:3a:66:91:de:
93:6a:0e:8a:0d:31:c8:f4:fb:ef:57:82:aa:56:8c:
aa:8b:99:ba:3e:e9:da:29:af:29:87:ec:94:cd:89:
63:3b:40:e4:c7:e1:c9:9e:91:08:0c:b4:a5:90:e3:
8b:e3:ce:86:b9:a8:9d:99:ba:48:e7:96:bd:43:31:
91:7f:e0:e3:37:5b:c1:18:d0:4e:ab:90:95:3f:85:
9c:46:21:ab:18:ff:09:12:18:e1:37:65:69:f8:9a:
74:94:03:29:fc:9f:37:81:62:af:e2:cd:f6:fb:fc:
bf:17:d9:2c:ef:ab:19:42:11:6d:11:06:db:d5:bf:
b9:9d:2e:41:a2:77:7b:80:a8:80:9f:80:ec:8a:1a:
18:8b:2e:c8:e1:73:00:af:be:18:44:c5:bb:ff:c8:
f0:af:5d:b0:8f:45:c2:09:87:b3:2f:7c:9d:43:24:
eb:02:c1:68:ed:fe:02:32:1f:ef:09:41:34:8d:6c:
fa:8f:86:d9:b9:5a:62:5a:87:e5:ed:94:a8:0b:ab:
50:eb:1b:1a:60:f6:e9:ae:cd:f9:27:48:1f:93:1b:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:85:C7:D6:28:29:CA:59:61:7B:E5:AE:86:BE:51:43:46:A8:B4:66
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/W4XH1igpyllhe-Wuhr5RQ0aotGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.22.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:34:92:a1:20:8a:92:1e:b5:bc:c0:2c:47:73:0f:04:3e:9b:
24:c0:9f:b8:4b:c8:e1:7a:82:4a:2c:7c:b1:32:c1:8c:28:6f:
58:ed:85:fc:49:ac:64:a7:ae:27:2e:89:7c:e0:d0:3d:b5:e2:
49:7f:29:6b:e5:ff:08:af:cc:a5:b4:73:13:ea:ca:b0:f5:4d:
10:cc:1d:71:54:0c:1c:4a:94:7c:f4:80:97:d7:9e:5e:92:9b:
b3:9b:84:8c:38:12:46:5d:b5:ec:8b:00:97:3b:43:af:77:fb:
e7:01:69:3b:2d:72:78:a4:75:8c:ed:60:34:cf:29:0f:c4:11:
35:5c:13:89:40:42:28:50:48:09:ea:61:f6:bd:28:85:22:d2:
77:8f:28:1b:00:8f:23:ff:c2:cd:d7:46:56:e6:56:fe:29:64:
37:7c:8c:bc:ca:2b:65:6f:7c:57:0e:74:c8:65:f6:34:bb:76:
1a:87:1b:cb:e3:aa:1b:6b:f4:f4:22:51:4a:fa:c6:e9:53:8a:
e8:23:f4:f7:11:84:5b:68:bc:00:40:82:1f:59:8b:75:79:36:
5c:85:3f:56:5c:f3:51:69:8b:e4:d9:41:bf:ea:8c:39:38:db:
2f:92:b2:ec:e2:28:24:bd:f6:34:97:8f:2c:13:b6:d2:03:03:
ca:8a:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:28:43 2025 by rpki-client