Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa
File: wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa (raw, json)
Hash identifier: EwlJIDraNdoBBYvI+7Xd9v0lh6FgCXu/F5yckTradM4=
Subject key identifier: C2:BA:58:B8:2A:13:03:44:03:A9:4C:75:FC:F8:E3:D9:1F:35:17:3A
Certificate issuer: /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial: 019422FB7F344FC7C1C4E160ED14A870056B
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa
Signing time: Wed 01 Jan 2025 17:48:14 +0000
ROA not before: Wed 01 Jan 2025 17:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205559
IP address blocks: 185.206.32.0/23 maxlen: 23
185.206.32.0/24 maxlen: 24
185.206.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7f:34:4f:c7:c1:c4:e1:60:ed:14:a8:70:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
Validity
Not Before: Jan 1 17:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2ba58b82a13034403a94c75fcf8e3d91f35173a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:18:75:fe:2f:77:7c:44:d8:d8:01:11:ff:
d8:d6:03:47:1c:0e:25:fe:11:15:6a:a8:3f:a1:16:
a8:34:14:3c:b2:8a:b3:4b:13:df:6e:76:a3:27:d3:
8e:34:32:f6:52:f5:19:9d:8e:71:0a:cf:59:fe:e1:
3a:a8:c4:b7:72:59:d5:31:ce:17:7e:e8:2f:9c:8f:
eb:c8:61:7c:4b:fd:b7:e2:d9:92:9c:67:b6:b9:e0:
46:22:33:73:5f:9c:84:1f:9a:16:d5:72:51:55:a4:
f6:a0:80:89:58:15:9e:72:32:98:d2:ca:24:e6:d3:
11:cc:e3:92:e0:b6:7f:42:93:b8:1f:88:8a:02:da:
ba:1e:80:18:a2:1d:b0:ca:63:23:7e:a6:17:2f:b0:
07:08:1f:61:c0:e3:48:2b:0b:cc:d7:1f:81:0c:96:
68:b6:8d:74:98:88:6d:bd:ee:63:26:84:48:05:53:
96:4f:ff:3e:9f:d5:a1:fc:98:0c:ef:c3:c3:8e:14:
d1:23:1e:23:e5:87:ff:6b:53:03:9d:0b:b4:1d:80:
7f:31:ed:58:c7:fd:d8:a0:6f:09:57:8a:ab:82:a7:
dd:1f:a2:e3:7c:88:49:55:5c:a2:e4:33:5f:dc:d7:
01:de:76:43:8a:f8:db:fd:bb:55:bd:b8:8f:0b:fd:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BA:58:B8:2A:13:03:44:03:A9:4C:75:FC:F8:E3:D9:1F:35:17:3A
X509v3 Authority Key Identifier:
keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.32.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:56:94:da:d5:91:d8:b3:81:d5:d7:f1:77:5c:69:4b:db:d2:
a1:d7:68:0a:6f:14:67:78:87:b5:e0:3b:95:8e:60:fe:68:26:
01:f6:6b:8f:94:0a:5f:79:c0:87:05:a3:09:2b:d7:d2:3e:48:
3a:06:31:c9:86:ed:4b:5d:37:da:11:e4:ac:a5:79:aa:f7:03:
2d:76:4d:7a:03:21:95:98:62:0c:43:58:74:c9:99:81:aa:cf:
4f:8c:b1:c1:77:3d:87:f8:76:ec:61:80:5a:73:2a:36:61:b1:
f6:d1:d0:01:c3:fb:c7:4b:8f:fa:58:01:f0:a4:08:83:b0:fe:
83:33:1b:ff:58:88:4f:d0:f4:c0:fc:84:a5:79:7e:f6:07:96:
2c:15:1c:6f:9c:54:2f:fc:5e:fa:33:ed:c9:7a:41:68:36:e8:
04:88:87:d9:a4:61:02:bf:94:a3:fd:49:c7:84:b8:ff:93:ad:
9e:e7:2a:43:d1:15:8e:fe:8a:be:5a:6b:54:35:b6:de:f6:ff:
8e:80:84:95:52:b0:df:78:1a:8f:a5:01:62:6a:00:cf:83:fe:
a7:18:f8:0b:65:47:a0:5c:2b:e9:10:f5:3d:27:0c:63:93:60:
70:a7:f3:cf:70:9d:9d:3b:37:72:e9:84:57:b1:e9:af:ec:2d:
ac:5f:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:25:13 2025 by rpki-client