Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/_wYBYYAWsBdIPcz67gJjf_cpxBc.roa
File: _wYBYYAWsBdIPcz67gJjf_cpxBc.roa (raw, json)
Hash identifier: WT5EAFrH+ID6hV4wr/zaJ0InnDxoXdrcj+f2kf7QcuM=
Subject key identifier: FF:06:01:61:80:16:B0:17:48:3D:CC:FA:EE:02:63:7F:F7:29:C4:17
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 019589BFE8AAF93C598722D9D799A274D1AE
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/_wYBYYAWsBdIPcz67gJjf_cpxBc.roa
Signing time: Wed 12 Mar 2025 09:46:50 +0000
ROA not before: Wed 12 Mar 2025 09:46:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.92.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:bf:e8:aa:f9:3c:59:87:22:d9:d7:99:a2:74:d1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Mar 12 09:46:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff0601618016b017483dccfaee02637ff729c417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:09:01:41:7d:65:19:d7:a1:9a:5b:01:b3:
f3:71:ae:d8:97:0b:31:58:27:95:05:27:ca:4d:42:
97:00:99:43:1b:3c:68:17:11:09:c1:d8:c1:11:9f:
49:4b:7d:ee:5d:a9:20:cf:b5:95:d3:2a:9a:e8:3a:
19:5c:3b:fd:0b:e7:cb:d0:2d:47:48:d8:8d:9d:c5:
6a:be:b4:a4:3a:e3:9b:7d:01:6d:4d:86:f3:76:64:
8a:67:11:7e:43:a1:69:8b:10:7d:0a:8b:5a:2d:85:
19:f3:1f:31:62:e6:44:3c:d2:b5:3a:88:14:d9:e7:
7e:17:45:dc:8c:8f:24:4c:2c:5e:5a:44:da:20:09:
ba:17:d3:15:30:0f:3b:e2:26:d5:0b:d8:21:e6:84:
48:b5:86:a1:78:3e:9f:d0:44:a6:a4:f3:9c:4d:57:
75:5a:19:f5:3c:4b:19:d7:c3:d5:6b:8b:b7:77:e8:
3b:09:08:b3:35:85:c8:ab:98:44:9e:75:8f:e0:80:
0f:84:38:55:93:82:a9:b2:7e:7c:be:89:98:72:8e:
15:9b:32:40:41:a8:4f:29:08:aa:2b:2b:96:ec:5b:
f3:9e:98:c3:b8:42:e8:bb:55:de:a0:d3:a3:5a:6c:
66:9f:34:34:89:bc:b3:ed:52:f3:33:d6:11:57:29:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:06:01:61:80:16:B0:17:48:3D:CC:FA:EE:02:63:7F:F7:29:C4:17
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/_wYBYYAWsBdIPcz67gJjf_cpxBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.212.0/22
Signature Algorithm: sha256WithRSAEncryption
01:b7:17:57:17:42:bb:72:6d:3d:2c:90:8f:39:e5:db:6e:51:
17:04:90:5b:70:ab:bc:16:de:34:18:3e:03:d5:ec:78:e2:5a:
c6:43:a7:e1:61:7e:2e:07:f5:58:5e:69:d8:88:2e:1f:d6:17:
bd:25:93:5a:aa:8b:e7:aa:28:c8:b0:e3:51:c8:d0:c7:ce:8f:
48:fa:38:f9:cb:4f:4c:90:48:64:52:84:3d:24:2f:3f:85:70:
35:ac:01:a9:d2:7c:6f:ba:5e:8d:f7:65:98:9d:44:12:ce:cd:
c2:df:2a:89:c4:e7:1e:c0:e2:97:ae:e1:94:6a:cf:e9:0a:79:
f0:b2:b7:d7:2a:64:1e:a8:7a:d7:55:6f:01:1d:36:66:a8:26:
df:b1:1e:d9:b2:12:c3:29:16:82:5e:eb:91:e2:d6:47:ff:df:
6b:d9:d2:f7:e8:20:d1:fe:91:37:71:27:43:61:0b:51:10:e6:
38:db:ed:d2:04:76:b2:5a:26:78:41:ea:d0:c5:1d:ee:b4:0c:
63:23:fa:6a:5f:4e:bc:1a:1c:aa:e4:ea:ed:b1:44:dc:84:07:
dd:1f:8d:91:ef:38:ca:e5:bf:a6:65:c3:fc:42:27:2a:94:8c:
53:57:29:6c:1e:bf:be:7a:48:3c:4e:25:42:4e:85:9f:fc:62:
43:3d:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:20 2025 by rpki-client