Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa
File: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (raw, json)
Hash identifier: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=
Subject key identifier: 5B:0B:5B:2C:D6:7C:C3:70:99:68:27:24:24:18:FB:FB:08:0B:FD:68
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 019424B386A69507CE751591306F6E5BF8B1
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39615
IP address blocks: 185.227.180.0/24 maxlen: 24
185.227.181.0/24 maxlen: 24
185.227.182.0/24 maxlen: 24
185.227.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:86:a6:95:07:ce:75:15:91:30:6f:6e:5b:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b0b5b2cd67cc370996827242418fbfb080bfd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:cd:5b:f6:a9:5e:04:93:6c:6c:f0:95:93:
0f:dd:d2:00:d2:fb:37:d9:b5:fa:bb:76:7e:9b:cf:
e9:d5:1c:40:cb:73:cd:a0:9a:50:c0:36:5b:ec:14:
15:ce:5d:9f:b1:3d:06:58:95:29:da:07:f7:b8:90:
16:79:48:26:e2:1e:89:cb:bd:96:54:18:87:c3:4e:
1e:4c:ee:39:f1:ce:81:4d:00:1e:e6:1b:a2:55:49:
fa:96:b9:d5:25:ae:6b:b1:85:e1:77:96:b6:f9:74:
f8:ab:04:c8:bb:0c:da:e7:29:5f:16:ec:8e:83:0a:
63:b2:6b:24:05:89:2a:4e:d6:56:04:cf:82:d1:ba:
32:5b:10:f2:59:0a:06:40:79:4c:32:0b:77:7f:1b:
07:50:4c:1a:7f:55:de:31:25:fa:d9:93:de:a0:13:
a7:be:72:dd:72:80:5a:eb:f9:2c:a1:1f:c6:e3:bf:
43:fb:b8:12:d9:78:0a:83:cc:62:eb:b2:92:83:80:
0f:92:78:a7:eb:96:1d:72:62:43:4e:2f:88:ce:f2:
09:a1:cb:3c:47:5f:97:1d:7c:f9:bb:8c:1e:2d:22:
4b:2e:ff:23:26:0e:89:c1:60:49:6e:5a:9d:da:06:
e4:e8:d9:e2:4e:1b:77:5e:d4:fb:89:53:76:b1:ae:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:5B:2C:D6:7C:C3:70:99:68:27:24:24:18:FB:FB:08:0B:FD:68
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.180.0/22
Signature Algorithm: sha256WithRSAEncryption
98:30:e6:2b:41:f9:99:30:d4:43:58:e3:56:7e:7f:e5:e0:65:
81:cb:a4:26:45:02:e1:a3:c7:3f:09:9a:1a:bb:0e:47:52:df:
55:05:89:2f:65:94:43:92:ad:66:11:39:c4:a6:6e:95:d1:0d:
99:1d:db:bb:ff:21:15:a3:21:bf:13:dd:cf:be:21:72:42:bc:
8a:62:2e:74:73:eb:e2:d0:c6:06:24:ba:97:12:ff:f3:67:7c:
7d:08:c1:83:43:f4:75:76:ad:64:7f:b0:4c:23:21:0d:63:e3:
03:33:7f:ab:8e:7a:73:3c:50:78:43:36:6d:43:1e:82:89:a0:
9a:3c:c4:6e:48:38:62:6d:93:a7:79:22:fc:f0:94:e9:48:67:
04:01:2b:8c:34:a7:11:71:18:b3:14:e2:dc:31:16:1f:30:e9:
9b:7d:4c:90:fd:9e:1c:05:69:e8:2a:22:60:d1:14:29:12:e4:
4d:9d:c9:77:8b:1f:5a:32:9f:50:5c:d0:45:c8:89:83:36:ba:
4c:79:7e:d1:22:4d:c1:4b:d1:74:c9:e1:93:a7:8f:ce:83:ac:
db:48:a6:23:2e:c5:3f:9f:c1:f3:d7:d2:ae:97:cc:c4:1e:94:
16:b5:35:17:1d:38:2c:e7:67:cd:53:3a:39:cd:15:69:7f:f0:
9a:20:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:03:10 2025 by rpki-client