Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/wcQI0N2rjHU7nz4Hv4-6dzygAdo.roa
File: wcQI0N2rjHU7nz4Hv4-6dzygAdo.roa (raw, json)
Hash identifier: Fm3HUvHW0IncmGHh7snGXOSS7m758QU/6otLVSlOO+Y=
Subject key identifier: C1:C4:08:D0:DD:AB:8C:75:3B:9F:3E:07:BF:8F:BA:77:3C:A0:01:DA
Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial: 019423D741043436303769D6DE11F973AA09
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/wcQI0N2rjHU7nz4Hv4-6dzygAdo.roa
Signing time: Wed 01 Jan 2025 21:48:16 +0000
ROA not before: Wed 01 Jan 2025 21:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21348
IP address blocks: 80.95.128.0/20 maxlen: 20
80.246.144.0/20 maxlen: 20
2a01:51a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:41:04:34:36:30:37:69:d6:de:11:f9:73:aa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c408d0ddab8c753b9f3e07bf8fba773ca001da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:e0:c3:59:57:89:d7:ba:50:11:2c:18:b3:
94:a1:0e:66:f5:b1:6a:81:1e:ab:78:1b:85:2e:bc:
1a:a3:c2:72:8b:64:3a:ad:7f:22:8d:82:ec:55:61:
02:e9:51:aa:75:04:51:45:1d:f4:a6:64:0c:e0:8a:
de:9b:77:f5:1d:d3:a1:4d:e7:da:91:47:68:06:bb:
0d:9d:cc:57:72:77:7f:96:d7:84:aa:2d:57:93:4d:
35:71:fe:03:b3:7f:90:f7:bf:5d:bc:fc:1e:9c:7a:
26:c8:04:2a:a1:33:35:da:02:f8:8c:6d:0f:e2:7f:
02:d9:4a:2b:e6:dc:0f:4a:7b:d8:04:84:03:63:a4:
bd:bf:5a:8d:01:03:2f:09:00:13:8a:68:76:5d:ed:
4b:e2:00:83:5e:94:3d:14:de:df:f8:e5:95:ef:fb:
cd:ea:ef:b1:f7:ad:db:d2:57:fb:20:9f:8b:95:a1:
ea:09:03:38:f0:76:35:50:b2:90:75:16:62:71:0a:
d2:ae:5e:62:ca:11:6c:08:8b:b3:85:19:9d:bb:90:
08:9a:42:07:ba:a8:da:ac:65:f4:44:f6:c8:2e:a1:
b8:fa:f0:b6:ee:b1:de:36:15:8e:00:c6:8c:63:57:
ea:7a:78:62:8b:45:54:97:42:2b:db:d6:fc:6e:f3:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C4:08:D0:DD:AB:8C:75:3B:9F:3E:07:BF:8F:BA:77:3C:A0:01:DA
X509v3 Authority Key Identifier:
keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/wcQI0N2rjHU7nz4Hv4-6dzygAdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.128.0/20
80.246.144.0/20
IPv6:
2a01:51a0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:69:f1:84:de:93:91:0c:55:8a:c2:d7:17:4e:b0:d3:86:b4:
17:4b:88:35:e1:3f:e9:50:6b:ca:1c:c6:f2:c2:23:43:10:d7:
22:71:4a:40:b3:9a:e4:94:bf:47:a8:6e:b2:2b:ae:85:1f:2e:
20:c2:82:23:97:e1:13:26:e9:70:56:8b:5a:b8:bd:81:0c:3a:
50:fa:39:21:0d:ae:73:04:b4:91:64:a6:fa:7d:02:03:2d:f7:
3c:28:ba:d9:41:5c:91:b0:5c:44:c3:cb:54:14:b0:81:b8:e5:
a0:32:85:54:2a:03:b5:5b:98:92:3f:40:8a:80:cf:ca:2d:21:
8e:26:16:0a:2b:8f:f4:32:14:2b:d3:a7:fa:a0:a5:2a:38:40:
95:2b:ff:31:64:62:c4:59:d0:bb:94:42:59:cd:56:8d:0b:15:
fb:e8:3e:e9:ed:92:ba:72:44:22:20:41:c7:0d:af:6f:eb:31:
63:95:3d:b2:e4:e8:06:f3:3b:51:71:db:09:9e:86:e9:4b:03:
d1:2b:a4:63:72:e2:6b:a0:8b:f1:d8:25:40:6a:43:c5:f8:96:
79:15:95:cd:ea:6f:c3:45:5a:67:6c:be:5b:c7:fb:93:35:c8:
98:fc:c4:f2:a5:67:23:be:1e:53:95:01:74:5a:ae:69:46:6a:
6e:8d:65:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:51 2025 by rpki-client