Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/Wb7gIaowM175_4hbQACvXGxElnc.roa
File: Wb7gIaowM175_4hbQACvXGxElnc.roa (raw, json)
Hash identifier: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=
Subject key identifier: 59:BE:E0:21:AA:30:33:5E:F9:FF:88:5B:40:00:AF:5C:6C:44:96:77
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 01942444BAFA715386FCD3BEBEC5ED1F4C98
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/Wb7gIaowM175_4hbQACvXGxElnc.roa
Signing time: Wed 01 Jan 2025 23:47:51 +0000
ROA not before: Wed 01 Jan 2025 23:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216131
IP address blocks: 91.223.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ba:fa:71:53:86:fc:d3:be:be:c5:ed:1f:4c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59bee021aa30335ef9ff885b4000af5c6c449677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:e9:09:a5:fe:5e:46:da:b0:28:c8:48:5c:
93:4e:6e:a9:94:20:51:1a:49:b6:09:bd:e8:ff:b2:
aa:fe:c6:57:82:e9:63:e8:29:d1:75:9f:5c:20:c7:
f0:b5:21:4b:93:bf:f7:6d:c5:a1:27:19:61:dc:2f:
cb:d6:50:54:91:c0:bd:8f:00:ed:f3:4c:23:89:ca:
58:2e:33:9c:83:b6:63:4a:c4:a7:c8:7e:57:a5:f1:
b4:0c:66:0b:4f:cc:c9:49:79:d6:ae:01:d3:6a:c9:
34:58:a4:aa:3a:b3:3c:08:70:1b:31:f9:0e:91:e2:
d4:7e:13:51:ad:fb:ed:8c:b3:8a:c9:96:c2:3e:73:
60:d8:c9:e6:e2:af:3e:5c:96:56:75:b3:4f:f7:3b:
dc:1d:fe:86:e5:84:70:9b:9d:c6:52:c5:f4:f0:e4:
7e:77:dd:b0:44:45:bd:3d:91:ad:30:3a:bc:3e:fa:
61:86:43:ba:e8:95:90:1e:a0:10:86:ba:8e:a6:12:
a8:47:7d:d3:ae:3e:89:6c:fc:ed:a1:c9:15:2d:a1:
08:11:0a:69:fc:b9:61:a3:77:c0:e1:9b:3f:bf:dd:
36:3e:6d:e1:76:8d:7f:1a:12:e3:78:de:e0:51:2f:
7d:b7:d0:ed:47:a9:b4:72:dd:43:29:a2:49:a7:45:
08:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BE:E0:21:AA:30:33:5E:F9:FF:88:5B:40:00:AF:5C:6C:44:96:77
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/Wb7gIaowM175_4hbQACvXGxElnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.116.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d3:3d:ba:7f:91:f8:f0:9b:36:57:8f:87:ce:d7:20:8d:f9:
8e:3a:c6:b8:50:0f:5a:7b:a1:3a:93:84:0f:9a:0e:6a:17:27:
7d:5f:0a:99:c5:a2:07:8a:48:b0:40:d6:b0:a6:79:15:1f:20:
b5:ad:ea:7e:b7:e7:fa:89:a3:d0:9f:07:df:96:b2:43:da:b5:
0c:b5:80:a2:74:b8:12:2c:d8:2f:8e:aa:cb:b3:ec:5a:1a:22:
0c:94:9b:f6:68:99:a1:98:37:8d:4b:b3:f3:3d:ad:81:3e:ca:
ac:03:68:7a:fb:79:12:75:b7:bb:0c:6e:fa:cd:bd:26:52:2b:
56:cc:c4:ae:b5:a6:3c:45:06:c8:d2:c6:7f:68:73:0c:02:8d:
88:82:f1:cd:a0:11:5f:89:3a:11:7b:56:6f:66:2c:6b:11:f0:
26:c2:79:77:af:ce:c5:00:3b:4a:56:df:71:37:7e:67:c0:1c:
32:61:ec:f8:98:3b:5c:b6:39:94:83:3b:57:a5:93:5e:a0:5b:
d6:d4:f0:1e:23:1d:9d:ea:be:5d:0a:7f:3a:fa:73:80:db:ce:
6f:ed:65:33:e1:e7:00:35:d3:f4:60:7d:d7:8f:a9:6b:61:ea:
f0:99:fc:f1:01:49:d1:3e:1f:1e:cf:fb:29:73:c4:23:ae:b1:
b1:cb:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:28 2025 by rpki-client