Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/wytxdRZXxEWi72ICxppv0nWaK_g.roa
File: wytxdRZXxEWi72ICxppv0nWaK_g.roa (raw, json)
Hash identifier: HLAxZnhzpvrbRLPZ50VaAEF9FMDzhmk4qqTXoJRwuoo=
Subject key identifier: C3:2B:71:75:16:57:C4:45:A2:EF:62:02:C6:9A:6F:D2:75:9A:2B:F8
Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial: 01942067EF45A476F0F53F39D5F2BF7A85C7
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/wytxdRZXxEWi72ICxppv0nWaK_g.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208685
IP address blocks: 31.3.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ef:45:a4:76:f0:f5:3f:39:d5:f2:bf:7a:85:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c32b71751657c445a2ef6202c69a6fd2759a2bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:a7:a7:11:04:24:d4:68:2b:7a:8a:ec:0f:
9a:68:32:83:4b:93:bc:72:35:1e:3e:c9:56:bb:04:
ad:b5:45:7d:fc:05:08:77:a2:6a:c4:35:c1:71:e3:
8a:5d:94:46:ec:e4:5a:91:b3:4c:40:1b:59:9c:36:
2c:61:50:1f:1e:21:a7:f8:4b:0e:21:f6:33:e3:89:
ee:d3:b1:7b:f7:b4:48:88:ad:73:9b:5c:e9:8b:75:
36:34:57:f7:17:70:8e:e7:f6:dd:90:35:57:a4:b8:
54:a7:b5:8c:15:60:43:3b:52:3f:81:50:51:d6:3d:
b8:2e:4c:be:e0:a6:3a:b3:04:d2:8d:8e:ab:5c:fe:
5f:fb:3c:be:36:41:44:0b:92:04:22:27:a2:45:45:
2a:af:db:55:00:9f:0e:c5:b9:b6:db:13:a3:bf:5a:
75:82:d3:c0:a7:1c:bf:4e:e2:d6:12:7b:13:4e:24:
2d:81:9c:be:04:78:36:72:d5:c3:24:52:c8:1a:9f:
fd:ce:47:1a:f9:fa:ac:4a:88:87:61:36:94:92:fc:
45:d4:87:a7:41:e7:2a:6e:79:e4:74:30:74:58:3c:
4a:75:1b:1f:95:d1:a0:f5:14:9c:e1:6b:a3:2d:2b:
eb:ba:42:b2:e1:f9:8c:64:aa:34:60:e2:06:76:cd:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2B:71:75:16:57:C4:45:A2:EF:62:02:C6:9A:6F:D2:75:9A:2B:F8
X509v3 Authority Key Identifier:
keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/wytxdRZXxEWi72ICxppv0nWaK_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.156.0/24
Signature Algorithm: sha256WithRSAEncryption
63:24:4b:39:88:21:36:3c:19:53:6f:62:d2:4b:f8:e4:27:99:
25:27:3a:45:68:91:44:c6:99:46:4b:f9:7c:91:d2:49:e4:49:
fe:63:12:79:26:58:02:d6:9e:59:3b:91:85:20:5a:65:ed:2f:
d5:7c:b1:92:83:d7:37:fe:91:1c:ca:6b:98:ac:8b:b1:6f:bf:
69:33:d0:f6:38:49:1a:d7:79:77:03:f5:d3:67:70:02:a1:59:
db:de:a2:b0:c4:81:48:d0:d6:01:5c:e2:91:a4:89:32:97:46:
32:c4:86:7e:1f:52:53:d3:90:dc:a0:5a:b5:61:79:f1:7d:0c:
be:6c:6f:0f:5e:28:9e:72:6a:6b:5e:06:27:08:b1:90:c5:94:
ee:02:8b:0d:4f:24:25:4d:6a:8c:ab:c1:84:ed:2d:72:f8:ae:
45:52:0a:95:08:4c:c8:37:c7:9b:22:14:d7:31:c2:c8:62:9a:
00:9b:8c:ea:ec:01:85:b9:29:9c:2f:01:f5:f4:3b:e0:dd:06:
d5:c3:a6:9a:3c:25:f5:78:88:42:05:a0:40:69:ee:cf:28:b4:
ce:c6:75:08:b6:24:ac:7f:43:37:8c:ab:c2:19:8b:b1:ee:0c:
b5:be:4d:0d:f1:6c:fb:56:44:0b:79:ea:57:97:0f:d5:b0:1c:
1c:cc:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:03 2025 by rpki-client