Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/wJBjAczRrgGosNqanCxFfo-dFjI.roa
File: wJBjAczRrgGosNqanCxFfo-dFjI.roa (raw, json)
Hash identifier: cA7B9NV3PGLqMbvMdkJgYrBm37cd4VUUTrn9CCk7CJw=
Subject key identifier: C0:90:63:01:CC:D1:AE:01:A8:B0:DA:9A:9C:2C:45:7E:8F:9D:16:32
Certificate issuer: /CN=e5484ab7509bcbbda351e200091742d43366b347
Certificate serial: 019421B1C67F9A21D4FC51B31E2C71650666
Authority key identifier: E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/wJBjAczRrgGosNqanCxFfo-dFjI.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42394
IP address blocks: 193.33.84.0/23 maxlen: 23
193.33.84.0/24 maxlen: 24
193.33.85.0/24 maxlen: 24
193.33.85.240/28 maxlen: 28
195.62.92.0/23 maxlen: 23
195.62.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c6:7f:9a:21:d4:fc:51:b3:1e:2c:71:65:06:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5484ab7509bcbbda351e200091742d43366b347
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0906301ccd1ae01a8b0da9a9c2c457e8f9d1632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:5d:15:7e:3d:ac:de:07:0d:15:54:1b:0a:
f3:9a:c7:1f:bb:b1:90:fa:29:b0:6b:02:28:4a:8b:
04:7f:41:41:2c:98:ed:f5:b6:8e:f1:10:ad:df:47:
a8:0a:bb:2f:21:b9:d6:36:a3:47:c7:3b:3f:15:c7:
59:8b:9b:9e:07:4c:fc:55:28:14:b6:66:8b:65:ba:
45:26:5a:88:42:83:79:62:95:59:fb:49:12:1a:03:
27:f3:dd:3d:07:a0:0a:f1:25:bb:59:0f:62:df:34:
a2:6f:e3:1b:2f:d6:ac:b3:9e:09:2d:c7:03:d8:31:
f9:99:82:9e:91:ec:17:d6:40:2f:30:87:69:dd:26:
31:cf:4c:29:df:95:63:c1:7d:ee:bb:49:5b:1c:b5:
ce:10:d5:ab:a8:69:1f:a3:8d:00:bf:f5:2b:b8:67:
79:d1:fa:b4:7c:a9:12:88:8c:7f:8d:94:d3:b8:ea:
80:d1:62:9a:92:54:f4:7f:54:3a:2e:60:1b:df:0b:
54:76:03:8f:a0:b5:31:88:b9:d5:5f:f9:38:e9:fd:
03:44:69:14:74:99:8e:f8:d7:b7:2f:97:b2:23:fa:
de:5d:dd:25:27:d2:ba:80:9f:2f:7b:be:5b:fb:0a:
c7:b0:35:48:b1:f1:36:13:fb:0e:b0:73:6b:94:8f:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:63:01:CC:D1:AE:01:A8:B0:DA:9A:9C:2C:45:7E:8F:9D:16:32
X509v3 Authority Key Identifier:
keyid:E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/wJBjAczRrgGosNqanCxFfo-dFjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.84.0/23
195.62.92.0/23
Signature Algorithm: sha256WithRSAEncryption
77:66:62:3a:36:72:a6:02:01:96:57:cd:9e:1d:c2:0b:6b:d4:
78:62:82:4b:84:9e:02:89:5f:53:db:07:4c:31:ea:54:c3:27:
1a:07:f9:b4:b4:00:7c:8d:de:16:ec:7c:3f:c7:45:9c:c6:c9:
dc:d2:c8:7b:74:b2:50:6a:77:f9:b9:a2:ed:14:fe:0e:ba:f5:
8e:63:38:ff:3c:4c:b0:98:1c:bf:8d:6b:9d:fb:65:89:e5:48:
af:29:ea:23:ff:87:54:16:8b:a3:c2:bc:df:91:e9:d9:73:1a:
b7:4a:67:15:91:13:d7:61:7a:c7:0c:df:32:37:4f:cb:79:f7:
2a:27:c1:46:cc:bc:46:3a:ff:e8:ed:a3:8b:90:68:45:fb:97:
7f:e0:1f:7e:e2:06:b2:bd:7d:b6:67:77:8a:1e:21:23:3b:d0:
be:6e:dc:2e:06:87:7b:bc:38:35:20:62:a8:4a:c6:31:a9:19:
79:a8:ab:1e:40:ab:67:60:a1:6f:b6:08:03:3f:1c:d2:fb:c8:
10:10:66:8c:da:1c:7e:7c:14:4a:ea:0a:bc:c3:92:03:6b:f9:
99:90:d7:1c:a5:ab:98:fb:2a:b4:ef:78:7f:07:2b:5b:a0:04:
64:5d:25:92:af:ac:b0:54:87:57:61:62:f2:e5:e2:be:f6:3f:
11:da:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:43 2025 by rpki-client