Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wfwyRrvTk9tnjoVM5bBA5jKby5M.roa
File: wfwyRrvTk9tnjoVM5bBA5jKby5M.roa (raw, json)
Hash identifier: 1cY3f5L233iRyl5Lbl7Z05ihu32rhWvU7T0vWTCFlug=
Subject key identifier: C1:FC:32:46:BB:D3:93:DB:67:8E:85:4C:E5:B0:40:E6:32:9B:CB:93
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236995B4DDE7B539CFAF208B7EB47F56
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wfwyRrvTk9tnjoVM5bBA5jKby5M.roa
Signing time: Wed 01 Jan 2025 19:48:29 +0000
ROA not before: Wed 01 Jan 2025 19:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42756
IP address blocks: 89.44.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:95:b4:dd:e7:b5:39:cf:af:20:8b:7e:b4:7f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1fc3246bbd393db678e854ce5b040e6329bcb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:68:e6:59:9c:39:0d:45:a1:c6:1e:d0:80:
8a:8f:b5:6e:b5:16:68:49:d7:11:9f:47:e2:3e:6a:
00:51:b5:da:99:30:6a:1d:5a:89:84:63:fa:00:71:
45:37:f2:3b:c7:50:07:d3:3f:0d:fb:ad:95:ad:7a:
6d:42:9a:03:16:d0:55:a8:fa:6d:aa:44:dc:a9:c0:
95:76:86:9b:71:9d:97:3e:ab:52:61:d6:91:32:95:
97:5f:76:45:51:a0:ee:31:fd:3e:88:2e:57:b6:3c:
97:7f:d4:d9:ce:c1:ba:da:8b:64:01:26:0f:7c:c2:
53:5e:07:6b:37:a8:3f:b7:95:5a:2c:cf:68:7b:1e:
5c:ec:c0:6d:4d:d7:f2:af:76:37:73:a6:7e:fd:55:
76:36:45:8c:ac:18:dc:e0:c4:e2:89:7a:07:9f:02:
f7:b8:3d:a4:bc:d7:8a:e7:ae:6f:ff:21:8f:aa:c5:
3c:a1:89:18:7f:b6:02:b2:5e:1a:e6:e6:48:f8:80:
39:fa:2d:61:f7:4b:d6:3d:5b:28:0d:47:71:a3:94:
6d:dd:1a:a2:86:66:45:ed:d3:5e:8e:f6:d3:f0:bf:
01:ab:c8:d1:90:25:bb:a3:20:6f:38:eb:8b:0a:f8:
37:32:51:8f:9e:6c:3b:dd:9a:18:20:53:ed:f0:b8:
2b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FC:32:46:BB:D3:93:DB:67:8E:85:4C:E5:B0:40:E6:32:9B:CB:93
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wfwyRrvTk9tnjoVM5bBA5jKby5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:12:83:aa:97:d8:0a:6d:9d:27:76:82:b2:1c:e4:af:49:e7:
21:4b:62:9b:a3:12:1e:b3:a6:39:66:72:91:99:8e:da:12:dd:
86:25:46:8a:07:8d:4e:50:28:53:3e:de:b1:9f:87:b2:a7:4d:
37:c3:5a:a8:85:d6:50:15:c9:2e:bb:50:62:bf:b3:66:ac:7c:
1a:2b:69:7c:74:d2:1e:02:a5:6c:96:af:c9:a1:7e:a6:1a:0b:
81:cd:80:55:82:e6:70:17:fe:ab:d6:1c:19:0a:32:23:8b:4c:
2c:cc:0f:80:f4:43:ca:f1:f9:ad:11:06:bd:97:9f:7c:a7:b3:
5f:08:54:b4:79:46:dc:6c:87:d4:9f:20:94:cf:60:1f:20:16:
9c:49:2d:29:3f:2a:23:19:25:1b:1c:d8:31:b0:7c:14:be:a6:
6a:52:fb:4c:e1:d1:20:e2:b8:02:94:00:b0:91:a4:1e:6d:b6:
7f:00:c6:9f:84:23:ee:ab:1e:65:b6:b8:20:1a:69:e3:4e:f2:
22:c3:d6:f0:2e:95:c8:16:c4:fb:31:07:87:5c:b4:99:06:8b:
d9:ab:0c:5f:6f:10:94:aa:bf:41:5c:6c:a9:bb:35:ad:7a:b4:
b2:43:57:d9:55:a6:12:08:b0:f3:b7:3a:3f:a9:23:76:fc:bd:
93:80:96:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:21 2025 by rpki-client