Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/WhKy2xbRKPMUqHbNxaU8wqbOrig.roa
File: WhKy2xbRKPMUqHbNxaU8wqbOrig.roa (raw, json)
Hash identifier: D12/ehSmYFcNAL5zHVyUB4wCp9NF+Juiz/ym/wvx6Xk=
Subject key identifier: 5A:12:B2:DB:16:D1:28:F3:14:A8:76:CD:C5:A5:3C:C2:A6:CE:AE:28
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 019426D9184F49ABC548D12C635A40497B83
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/WhKy2xbRKPMUqHbNxaU8wqbOrig.roa
Signing time: Thu 02 Jan 2025 11:49:09 +0000
ROA not before: Thu 02 Jan 2025 11:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43809
IP address blocks: 83.171.228.0/22 maxlen: 22
95.128.112.0/21 maxlen: 24
185.8.80.0/22 maxlen: 24
185.184.92.0/22 maxlen: 24
185.215.8.0/22 maxlen: 24
195.88.130.0/23 maxlen: 23
2a02:d900::/29 maxlen: 29
2a0a:9c40::/29 maxlen: 29
2a0f:10c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:18:4f:49:ab:c5:48:d1:2c:63:5a:40:49:7b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Jan 2 11:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a12b2db16d128f314a876cdc5a53cc2a6ceae28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:e1:a9:1a:da:3b:95:3e:c8:a4:dd:40:c5:
97:7a:1b:4f:2e:aa:9a:e8:3d:95:d7:25:2c:db:c9:
c6:43:6f:05:cb:95:a4:19:d3:44:bf:4e:b3:28:d8:
de:81:f7:55:18:8a:6d:c9:05:71:af:0b:1e:23:ff:
d5:8f:1d:4b:24:ef:d8:eb:eb:14:d7:0e:46:91:1e:
66:04:19:a4:31:25:9b:2f:24:2f:54:30:6d:54:53:
1a:7c:b6:ec:d7:f8:11:0c:97:ed:9b:dc:b1:5b:e9:
6a:b1:d4:96:e6:34:72:50:51:77:ba:2c:e6:28:6b:
0d:21:c5:08:8b:04:9b:fe:bf:82:61:14:3d:c0:f5:
48:30:a5:48:b0:1b:5f:2d:77:42:53:d9:68:1d:ac:
d6:18:e4:e6:ce:61:05:62:19:c3:c6:70:b8:93:8c:
9b:64:5b:41:7c:8f:cc:6f:11:fd:7a:9e:32:a9:87:
f7:f4:9b:04:29:b6:1f:2a:fb:25:e8:d5:4f:3f:07:
6c:91:24:20:3c:30:2d:49:5b:6a:9c:fe:52:6f:8f:
f1:9a:9b:a8:46:cf:52:c1:06:4c:af:70:05:51:4d:
f3:ed:17:e2:0b:07:ab:08:bd:e1:ae:38:f1:14:4f:
e4:29:d1:0b:23:c2:22:ec:07:2f:9b:e0:99:4d:16:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:12:B2:DB:16:D1:28:F3:14:A8:76:CD:C5:A5:3C:C2:A6:CE:AE:28
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/WhKy2xbRKPMUqHbNxaU8wqbOrig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.228.0/22
95.128.112.0/21
185.8.80.0/22
185.184.92.0/22
185.215.8.0/22
195.88.130.0/23
IPv6:
2a02:d900::/29
2a0a:9c40::/29
2a0f:10c0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:13:19:01:b3:6c:da:f7:31:b5:84:a6:cb:41:86:0a:d4:a8:
76:f7:1b:15:e4:99:82:f5:a1:26:bc:99:88:65:12:c6:a7:72:
ca:93:5a:31:e6:5d:4b:d6:33:60:fb:f6:e9:88:cc:d6:86:be:
f2:f8:a0:92:94:1c:98:a3:5e:6a:34:62:3b:27:9c:8d:e7:2b:
8c:f0:0e:1d:ce:30:18:4a:4a:38:37:d5:38:66:16:82:c3:6a:
d1:90:31:41:cc:fe:4d:87:e4:66:02:3b:3f:10:39:6c:4c:4c:
10:dd:05:14:1b:05:db:1f:51:ca:74:63:6b:a0:aa:c0:c0:b0:
48:97:ca:5d:ef:1a:ef:41:d9:08:20:d5:b9:b0:23:9d:a2:0b:
19:2d:99:a6:44:4a:b6:fc:7b:8a:86:57:dd:1e:39:e4:d7:5f:
5e:15:7b:4b:e5:89:95:5b:2a:dc:f7:23:d1:88:3d:f4:af:43:
3c:c4:81:eb:a7:5b:0e:87:3c:a6:9f:48:8d:9a:96:58:00:a4:
cb:d4:68:a0:de:bc:20:b4:94:ca:b1:4d:e7:a7:79:d0:c1:fd:
96:82:61:df:78:fc:6c:f8:d5:e0:b7:cb:22:1b:5e:2e:29:db:
68:6d:3d:37:42:f2:4d:53:fd:c5:75:be:54:62:d7:9c:1d:82:
6b:c2:b6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:43:02 2025 by rpki-client