Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/WC5kYAaNv3dBMoN7rOV1Dk7R1Eo.roa
File: WC5kYAaNv3dBMoN7rOV1Dk7R1Eo.roa (raw, json)
Hash identifier: IM898uPAV6VmuESMyy3MG48B0cB42EspCAHOuXpg7Io=
Subject key identifier: 58:2E:64:60:06:8D:BF:77:41:32:83:7B:AC:E5:75:0E:4E:D1:D4:4A
Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial: 0194450B0A88464E676ECA673863EAC8F4A9
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/WC5kYAaNv3dBMoN7rOV1Dk7R1Eo.roa
Signing time: Wed 08 Jan 2025 08:32:19 +0000
ROA not before: Wed 08 Jan 2025 08:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39699
IP address blocks: 45.152.104.0/22 maxlen: 22
62.121.32.0/19 maxlen: 19
83.148.192.0/18 maxlen: 18
84.240.64.0/19 maxlen: 19
84.240.64.0/21 maxlen: 21
86.60.128.0/17 maxlen: 17
86.60.176.0/20 maxlen: 20
185.132.104.0/22 maxlen: 22
2a03:50a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:0b:0a:88:46:4e:67:6e:ca:67:38:63:ea:c8:f4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
Validity
Not Before: Jan 8 08:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=582e6460068dbf774132837bace5750e4ed1d44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:72:54:d6:38:bf:5a:84:0b:53:15:07:c7:
1b:94:fc:de:6d:be:cc:9d:fe:f7:a1:5b:37:8c:eb:
05:7d:7a:76:2a:c5:eb:f6:06:0d:a0:77:15:1b:95:
f4:e6:2d:63:93:92:0f:97:2f:e7:67:c4:28:5b:dd:
18:bc:52:5f:b9:de:f3:b2:79:ad:34:34:16:7d:54:
2e:d3:df:fa:19:e9:4b:35:53:78:d0:39:b3:05:f6:
16:86:80:a3:a4:27:fa:7c:ee:29:93:6a:4a:45:29:
9b:71:42:97:b8:48:25:29:48:c2:cf:ce:94:b6:04:
48:87:f3:73:80:e1:5b:f4:a3:39:59:14:40:43:13:
7c:4e:d5:27:dc:48:04:51:9b:e5:1a:c7:5b:ff:ab:
4a:73:b0:2f:84:73:49:63:20:f5:d9:48:30:08:ad:
39:22:28:f4:f1:99:0c:f3:1c:5b:9d:df:a8:eb:4e:
c8:3d:8d:ed:7b:e8:21:e4:2d:47:6d:68:c9:b1:ed:
0c:03:fe:41:85:44:53:bb:08:f6:57:87:56:6f:75:
75:9b:0c:6f:63:88:94:f2:52:68:74:ab:03:a7:a4:
3c:c5:ee:68:3b:76:73:3b:db:55:3b:9a:0f:e7:56:
36:7b:89:0c:7f:f3:67:65:6d:80:40:a9:4f:70:2f:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2E:64:60:06:8D:BF:77:41:32:83:7B:AC:E5:75:0E:4E:D1:D4:4A
X509v3 Authority Key Identifier:
keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/WC5kYAaNv3dBMoN7rOV1Dk7R1Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.104.0/22
62.121.32.0/19
83.148.192.0/18
84.240.64.0/19
86.60.128.0/17
185.132.104.0/22
IPv6:
2a03:50a0::/32
Signature Algorithm: sha256WithRSAEncryption
a7:fd:29:72:08:50:62:18:39:df:af:f7:52:53:c2:75:60:e4:
cf:92:eb:9e:2e:be:b0:31:52:dc:fb:59:0c:86:31:d0:65:61:
b5:0f:d3:6d:7e:e5:49:d1:fc:33:27:61:56:bf:5f:c3:5b:97:
24:aa:76:25:93:fb:c0:de:d5:16:06:c4:8a:35:0c:53:df:d0:
67:ae:10:d2:48:47:6c:10:76:b4:36:59:94:a9:bf:ef:00:5b:
01:56:4b:13:c3:1b:3d:9e:00:4a:a1:73:37:58:ad:02:ad:3e:
6a:1f:f6:fd:49:59:5d:6e:9b:39:10:e5:be:d8:08:49:a6:31:
00:08:46:63:a2:42:0a:7d:3c:c1:5a:ea:48:8b:b1:14:46:2c:
78:2d:94:a5:fd:fc:0c:ad:7b:2a:f8:5a:af:73:cf:3b:99:12:
3e:91:45:07:15:67:b7:ae:26:22:b2:53:27:3d:ab:b0:09:34:
51:4c:de:28:0c:d9:6f:3c:bc:57:98:a3:e8:ac:de:c5:e4:0f:
58:d5:38:91:6f:c3:87:99:f5:01:a2:34:a3:c9:38:ae:65:1f:
cb:33:d8:3c:aa:97:25:b1:2d:79:11:f0:16:c8:58:70:21:aa:
98:61:6a:b0:c1:3e:bd:b6:32:08:96:d6:66:17:d1:21:fc:cf:
af:5e:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:37 2025 by rpki-client