Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/DwYRxgYeXApocC24tYlVvUen_78.roa
File: DwYRxgYeXApocC24tYlVvUen_78.roa (raw, json)
Hash identifier: iHpSxAM52sPB00v62NkUUPRqOKe3WSIQZRaMIsejpUg=
Subject key identifier: 0F:06:11:C6:06:1E:5C:0A:68:70:2D:B8:B5:89:55:BD:47:A7:FF:BF
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019424B29B9B22501A92C3DF04374B358871
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/DwYRxgYeXApocC24tYlVvUen_78.roa
Signing time: Thu 02 Jan 2025 01:47:52 +0000
ROA not before: Thu 02 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 213.18.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:9b:9b:22:50:1a:92:c3:df:04:37:4b:35:88:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 2 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f0611c6061e5c0a68702db8b58955bd47a7ffbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:7b:9c:1f:80:d2:14:82:18:e7:10:5b:ec:
44:3c:67:9d:f8:17:38:49:32:0c:48:da:65:29:44:
31:90:c3:62:35:93:f5:a7:40:24:de:49:f8:5e:ba:
d6:75:b4:77:28:d6:1b:51:9c:a5:b4:3e:f5:c2:52:
98:64:5b:e6:8b:2e:56:62:eb:47:3b:27:5f:1f:46:
4f:5c:07:1c:90:2f:54:a5:d7:96:41:95:6c:93:ea:
d4:d3:68:43:37:ad:54:10:3a:44:48:37:d6:f2:f4:
75:69:76:e0:22:fd:58:24:d6:ca:1f:c8:c4:34:7d:
93:3f:6b:97:c9:37:cf:21:32:54:8b:76:3e:f6:eb:
a7:0e:59:ca:fe:7f:f6:a2:89:00:ee:ad:ef:a8:5b:
3d:72:ef:1a:83:68:c0:1c:d2:4e:78:19:3e:ad:2e:
95:d4:83:2c:00:14:05:e0:7b:7d:8f:c1:57:19:48:
cb:ad:15:dc:a8:96:5b:b5:26:b6:37:34:0c:ff:ee:
23:f7:7f:c7:4b:17:c5:21:f7:09:83:a1:05:b7:94:
73:32:91:ca:05:84:68:9a:6d:44:51:7f:53:fb:76:
f0:17:08:e2:00:14:05:8f:fe:07:56:bb:23:e6:ee:
6e:0d:44:2c:69:8b:14:92:4c:b6:78:72:63:17:f2:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:06:11:C6:06:1E:5C:0A:68:70:2D:B8:B5:89:55:BD:47:A7:FF:BF
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/DwYRxgYeXApocC24tYlVvUen_78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.192.0/22
Signature Algorithm: sha256WithRSAEncryption
38:f3:45:e1:fc:1f:03:de:93:77:f5:13:db:af:7f:67:f4:5f:
43:86:2f:f6:51:4e:5c:e8:f1:5a:af:48:aa:e8:3c:2e:50:14:
51:eb:28:5f:76:33:49:af:10:56:83:ef:07:ae:a0:37:ef:64:
36:35:70:23:db:8d:a2:48:2e:1f:15:27:df:c0:80:9a:13:ba:
5c:51:37:db:f7:f0:d0:67:bb:62:4e:83:39:33:f2:66:58:30:
74:b2:b3:b2:6b:3d:20:09:23:61:0b:c5:06:51:d8:e0:31:11:
f7:f8:8f:cc:5e:c0:46:eb:af:9f:44:a2:fd:84:b0:37:a8:f8:
0d:a6:2b:73:49:fa:86:f3:e7:d6:f8:55:99:d6:39:24:1f:75:
4b:1d:e5:25:e9:ef:b1:55:aa:f5:97:cd:c4:12:c4:14:e4:e5:
bd:b2:90:da:33:38:b8:89:09:c0:27:95:a5:f2:9d:03:58:88:
35:20:58:06:59:3e:ea:23:c6:ea:18:41:2c:0b:60:ac:e7:af:
ba:f3:09:e9:8d:b8:ce:2c:79:00:13:51:9f:84:56:09:a1:58:
7c:83:a6:b3:81:d1:73:cc:51:e6:19:c3:de:01:d3:04:95:fe:
99:e1:66:55:44:c4:59:6c:c1:16:10:eb:fa:18:d4:9a:c1:dc:
68:cb:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:58:52 2025 by rpki-client