Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/WD0FQcbHEB-uoxf6girnu5JNKHw.roa
File: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (raw, json)
Hash identifier: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=
Subject key identifier: 58:3D:05:41:C6:C7:10:1F:AE:A3:17:FA:82:2A:E7:BB:92:4D:28:7C
Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial: 019422FC465C2737A94E5C48672995B083C7
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/WD0FQcbHEB-uoxf6girnu5JNKHw.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.102.174.0/24 maxlen: 24
193.103.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:46:5c:27:37:a9:4e:5c:48:67:29:95:b0:83:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=583d0541c6c7101faea317fa822ae7bb924d287c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:43:36:b1:6c:fb:c7:4d:69:7a:d8:6a:e2:
1c:bf:c0:6b:ae:37:29:b0:9b:80:d7:1b:50:ca:2b:
26:f2:ac:71:29:84:66:ab:05:59:5b:d9:24:a0:c9:
c1:cd:ad:dc:81:32:88:fa:cd:e2:a7:1d:80:42:d8:
80:7d:fb:a4:fc:7e:49:26:de:c4:8e:bb:92:31:69:
b9:7d:3f:52:62:75:d7:de:53:df:fc:98:be:90:da:
c9:56:b9:f4:7c:4b:43:50:c5:ea:07:ef:02:c1:74:
e7:cd:7d:1e:eb:df:05:6d:db:bb:e7:66:55:09:e8:
74:9d:66:d9:b5:6c:cb:4c:8c:37:19:b0:28:41:6c:
2c:7a:24:26:d6:8e:69:da:66:bc:e1:75:8b:18:15:
59:dd:68:d8:70:bc:2d:a9:74:21:98:f9:81:77:4f:
b0:ed:a0:14:a1:62:a8:47:37:f7:c1:bf:b2:50:04:
81:24:fb:40:a4:82:5e:4f:06:14:aa:43:97:8b:41:
e3:89:e4:6e:df:a7:14:ce:2a:77:2f:14:6f:fc:2f:
10:31:21:7f:a1:2c:21:66:66:9c:b4:a3:25:40:9b:
f8:68:1c:c2:37:45:a9:42:8d:f8:c4:2c:9c:09:b0:
35:6b:cd:d4:ad:69:c0:15:35:dc:58:a4:a9:c4:06:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3D:05:41:C6:C7:10:1F:AE:A3:17:FA:82:2A:E7:BB:92:4D:28:7C
X509v3 Authority Key Identifier:
keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/WD0FQcbHEB-uoxf6girnu5JNKHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.102.174.0/24
193.103.129.0/24
Signature Algorithm: sha256WithRSAEncryption
90:2d:cd:83:1c:3d:92:27:bd:a6:f8:e8:97:52:52:67:be:88:
cf:60:38:3a:2a:d2:bd:67:c1:b6:82:9d:c1:64:36:93:39:10:
25:37:f1:e7:46:b1:3b:24:d1:02:f5:bf:81:9c:89:5a:37:8c:
23:13:8d:2f:02:3f:4b:90:50:ef:9c:97:87:53:fc:98:1a:3e:
3f:17:fd:90:59:d1:57:10:ac:3f:d0:32:61:b1:a8:24:80:dc:
3b:a0:3e:06:70:dd:c9:3e:b3:cc:c1:07:7e:6a:d8:da:8b:16:
2a:ae:c6:ce:0c:dc:ac:55:66:91:3a:fd:54:fc:1f:a6:89:15:
ba:7c:2a:ab:91:78:57:bb:c9:f5:28:3f:3c:a0:9d:fd:a7:a6:
2c:97:63:41:27:ea:ed:19:0a:a0:04:11:fa:d4:f4:70:b8:0a:
ef:e2:d5:fd:2f:d8:5f:66:8d:22:b2:f6:17:bf:e9:19:9e:38:
74:0d:5f:65:e0:26:ab:ba:04:28:d1:98:50:92:29:c1:34:b2:
06:1e:79:8f:73:f0:d9:58:d2:36:08:0d:f2:17:72:e4:03:32:
3f:ca:df:36:2b:69:bc:5c:27:c1:60:de:9f:8c:24:0a:d0:72:
9d:e5:ab:53:a5:01:63:29:83:c3:44:f0:dd:ff:ed:33:46:9d:
2c:ce:c9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:41 2025 by rpki-client