Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/wFqwrGBuEb2AJLvUTMgzpXPY8KQ.roa
File: wFqwrGBuEb2AJLvUTMgzpXPY8KQ.roa (raw, json)
Hash identifier: XdSpugloiURMy8+UTeS09q/u3jF4ov7twyPxRL57DwM=
Subject key identifier: C0:5A:B0:AC:60:6E:11:BD:80:24:BB:D4:4C:C8:33:A5:73:D8:F0:A4
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAAF4B76D4192DA2FC5E5B8FC4E297
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/wFqwrGBuEb2AJLvUTMgzpXPY8KQ.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210160
IP address blocks: 37.18.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:af:4b:76:d4:19:2d:a2:fc:5e:5b:8f:c4:e2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c05ab0ac606e11bd8024bbd44cc833a573d8f0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:bb:3b:e8:f8:17:85:ac:6c:7d:9c:ac:4d:
2f:fe:52:9e:c0:0d:a1:76:53:c3:30:cb:cb:4c:04:
b0:d2:59:f0:ba:18:c1:fc:87:5d:6f:b9:65:2e:1b:
6c:a2:a2:4a:08:d8:71:2e:f9:fc:d4:bf:47:17:89:
fa:ef:f0:28:59:4c:39:d5:e1:eb:0a:ee:15:00:dd:
89:57:00:cb:1b:7f:8b:a1:af:9e:41:74:88:41:06:
ad:20:f6:ed:de:1a:a3:5e:2c:f0:3f:e8:f6:6d:b3:
e7:7f:d2:b9:ed:68:af:4a:ec:15:f4:62:81:d6:e1:
56:4e:53:31:a1:1f:8e:7d:13:d0:7c:ee:41:af:25:
f3:58:76:73:c4:bd:08:17:a1:91:8b:36:9e:bf:94:
40:06:9a:7d:a2:cd:cd:ef:e2:8a:8f:6c:3d:4f:38:
dd:a0:65:f3:29:15:03:0a:95:9d:16:56:86:f4:44:
cf:24:6b:19:c8:85:2c:67:26:62:14:2f:ee:ef:f7:
c2:ad:bd:d8:86:bc:01:00:e6:d5:9f:c1:3f:3e:44:
e3:87:dd:9b:4b:c2:d5:4c:6b:c0:d7:24:cc:ab:0a:
74:a3:fa:52:38:61:bf:cf:60:ac:4f:1f:94:bd:53:
c7:cc:5a:47:17:33:90:9a:4b:84:de:06:be:e8:6e:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5A:B0:AC:60:6E:11:BD:80:24:BB:D4:4C:C8:33:A5:73:D8:F0:A4
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/wFqwrGBuEb2AJLvUTMgzpXPY8KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:4c:7e:fa:89:e3:d3:e1:01:80:38:c2:14:7e:ce:53:5b:25:
09:b6:4f:2a:55:99:be:83:7a:cf:dd:0f:7a:fa:d9:8f:df:f0:
84:03:7b:fc:80:b9:ac:38:2a:5e:ae:d2:a2:14:64:20:e1:5c:
b1:64:f6:03:bf:55:22:7e:bb:23:0b:87:61:e7:46:83:7a:e6:
be:0a:26:12:e9:11:53:ca:7b:75:8d:cc:97:6f:36:50:a5:a1:
22:86:5d:bd:d4:21:64:5e:c7:42:03:6f:5c:f1:8c:a2:b2:a4:
a2:dd:3d:e8:bc:b7:4f:23:1d:4f:0d:03:ad:85:ed:b1:96:d2:
19:b1:86:68:1e:4d:43:a6:4c:96:e5:e2:a3:30:94:b3:f2:00:
67:e3:cb:ee:a6:70:11:cf:5e:c4:a9:55:66:c7:2e:91:ab:4e:
b2:a1:a9:a4:64:84:72:6c:5b:4c:57:43:9e:fa:db:73:9a:5e:
ac:ab:9d:1e:51:a9:04:61:11:7e:ac:c9:a0:b5:8a:9e:07:fa:
b4:74:fd:d4:1a:f5:e0:77:4b:ae:ab:e4:8c:be:f5:09:5d:4c:
80:50:78:05:9c:63:5d:83:ea:74:d4:7b:aa:31:50:3a:57:45:
19:39:ff:52:96:39:ab:a4:27:98:c2:93:98:25:8c:84:4b:4f:
66:b3:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:58 2025 by rpki-client