Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/WGNCuqp1cDIkFF52cq8hYpf58EQ.roa
File: WGNCuqp1cDIkFF52cq8hYpf58EQ.roa (raw, json)
Hash identifier: xEraMYTX5Ht3coCGqcmLdPzdxd+9Ax5IlYiKCRT58TQ=
Subject key identifier: 58:63:42:BA:AA:75:70:32:24:14:5E:76:72:AF:21:62:97:F9:F0:44
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019424456A8BB22DEB83D8A7A3746DB85337
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/WGNCuqp1cDIkFF52cq8hYpf58EQ.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 168.199.169.0/24 maxlen: 24
168.199.234.0/24 maxlen: 24
168.199.235.0/24 maxlen: 24
168.199.245.0/24 maxlen: 24
185.101.255.0/24 maxlen: 24
185.171.255.0/24 maxlen: 24
185.226.204.0/24 maxlen: 24
185.226.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6a:8b:b2:2d:eb:83:d8:a7:a3:74:6d:b8:53:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=586342baaa75703224145e7672af216297f9f044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:68:bd:c3:be:69:9e:09:44:55:2f:87:63:
68:82:2a:d6:ae:47:36:08:f3:0c:1d:55:2f:94:c3:
de:20:66:5b:d4:0c:f5:4f:6b:47:b8:51:87:99:9b:
d5:5e:c2:7d:8a:bd:15:b9:1b:09:0e:81:aa:c2:0a:
52:92:32:21:5c:a5:2d:de:e3:de:52:74:b9:c4:93:
aa:13:3b:e9:b6:5c:c3:d9:3f:a6:81:db:c7:c7:de:
b3:0e:e2:51:1d:52:7e:ca:da:a8:a0:c8:5d:24:60:
2f:4e:99:c3:fd:3a:12:75:5c:32:13:18:46:0c:0e:
fe:aa:89:33:8a:b2:fc:9f:d5:94:57:6d:b8:4d:1a:
3f:82:e9:71:1e:9e:09:59:8f:44:61:dd:6c:67:dd:
0f:98:c3:2e:1d:7d:5b:bc:a9:e8:2d:85:8f:6c:d7:
aa:70:52:4d:c6:ec:89:c0:19:64:ca:46:89:16:b6:
ec:cb:96:72:41:da:f8:cc:05:9e:66:78:6c:2e:56:
67:dd:be:bc:bf:13:91:8f:2e:aa:6d:43:e6:cb:0b:
a9:a7:ff:de:e9:60:b0:75:1f:d7:95:be:d2:d8:f6:
6c:ac:04:62:c2:08:d7:02:e9:68:85:00:a4:c2:af:
8e:0c:da:95:35:df:cf:45:01:80:dc:08:bb:19:86:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:63:42:BA:AA:75:70:32:24:14:5E:76:72:AF:21:62:97:F9:F0:44
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/WGNCuqp1cDIkFF52cq8hYpf58EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.169.0/24
168.199.234.0/23
168.199.245.0/24
185.101.255.0/24
185.171.255.0/24
185.226.204.0/24
185.226.207.0/24
Signature Algorithm: sha256WithRSAEncryption
47:60:92:7f:5f:0a:6a:80:f2:b6:2b:4d:05:ed:c5:70:5d:09:
36:8d:4b:92:e7:92:21:28:a9:2f:5b:ee:15:0d:9d:67:17:70:
40:5e:03:67:e9:71:e5:c2:68:8d:f7:4d:d1:a0:5e:ce:3a:be:
3e:1f:c9:53:d5:30:7d:73:87:95:36:79:0a:b5:95:81:88:f1:
da:27:14:ec:b2:84:73:5f:02:f0:5e:12:0a:b5:08:30:69:f9:
a0:3b:c1:3f:0d:8a:88:b4:d6:d1:c6:4d:17:b5:98:58:84:26:
b4:f3:e1:3f:cf:e9:93:70:d9:fb:fa:73:c1:9f:df:86:c8:cd:
b2:fe:d0:82:a6:e6:40:2b:44:21:0e:20:b7:cf:fd:32:67:a4:
3e:51:61:f4:d0:46:a1:7b:ac:d7:91:76:28:1f:3f:0e:95:0c:
a4:c2:81:3c:ac:b7:cb:8b:c1:0e:98:38:dd:69:90:43:57:ba:
df:57:23:d5:16:6a:33:82:65:5f:9e:72:74:92:a1:d0:dc:2e:
6b:47:0a:db:a6:78:12:19:e6:83:04:dd:a4:0b:73:23:32:4e:
ca:b7:b9:60:9d:55:f7:3b:b4:cd:20:97:e2:dd:5e:db:e9:ec:
d4:17:66:4f:7e:54:85:35:00:b4:d6:3f:e0:35:9c:0d:a9:c6:
7e:f8:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:53:02 2025 by rpki-client