Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa
File: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (raw, json)
Hash identifier: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=
Subject key identifier: C1:6C:8C:E0:F9:F1:50:7A:BE:4E:B2:B0:85:28:D1:FE:AF:2D:FE:AF
Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial: 019424B2D9D0EB7C32F54C2C9EAA5BC170E4
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa
Signing time: Thu 02 Jan 2025 01:48:08 +0000
ROA not before: Thu 02 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58195
IP address blocks: 91.239.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:d9:d0:eb:7c:32:f5:4c:2c:9e:aa:5b:c1:70:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Validity
Not Before: Jan 2 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c16c8ce0f9f1507abe4eb2b08528d1feaf2dfeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:92:d5:53:20:b1:86:16:e6:ff:59:e7:a5:
fa:e0:48:ff:61:93:48:d2:11:67:91:64:c7:75:65:
40:72:2f:66:45:f3:63:89:20:53:e6:bb:91:4d:ef:
18:c5:01:f7:1d:ad:b5:f0:5f:75:84:fc:2d:f4:7e:
b5:98:4d:fa:4e:99:e5:b2:c5:4b:e3:cb:cf:f9:d7:
62:fa:fd:d1:e0:ea:11:09:87:bf:80:66:7c:5e:0f:
47:1a:66:d4:09:23:03:40:7c:86:5e:67:a5:81:9f:
a7:c9:b2:e0:25:89:ba:64:29:0b:43:c1:1b:0e:69:
df:f0:29:55:3b:62:1b:d9:84:27:58:fb:d7:fb:2f:
39:2e:f0:f3:50:3c:4c:2a:04:32:f5:33:1b:ed:7b:
20:0a:f1:f6:44:59:cb:97:ea:a7:e1:1d:0e:1e:32:
d7:57:76:de:ad:02:1f:a4:e6:53:de:18:28:7a:dc:
f4:44:5e:44:70:71:68:29:6c:1c:09:3b:50:a7:d7:
7a:5c:f3:17:19:ef:85:10:27:2e:6d:0a:f9:02:1c:
67:a5:b8:a9:50:78:06:8f:ce:bb:49:ba:e7:10:78:
63:ac:d8:21:dd:b3:f3:de:20:f5:c4:16:72:3c:e6:
91:d7:f3:f5:7d:e5:d9:b4:f3:7c:17:82:ca:8f:b5:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6C:8C:E0:F9:F1:50:7A:BE:4E:B2:B0:85:28:D1:FE:AF:2D:FE:AF
X509v3 Authority Key Identifier:
keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.173.0/24
Signature Algorithm: sha256WithRSAEncryption
04:58:44:f0:69:79:a7:9f:c9:d6:73:b3:ec:a3:78:6b:eb:a2:
01:3e:30:77:c4:54:c6:a8:fe:d3:57:ad:99:73:1d:ff:e6:c8:
08:bc:d1:de:49:a5:f5:55:50:fc:d4:3d:60:a9:bc:4e:bc:6b:
6c:e1:76:41:17:b8:e2:c7:34:96:d9:93:bb:ea:3c:8f:4b:dd:
99:ea:34:16:4b:e9:6b:6a:ae:8c:60:c1:76:2f:76:b9:6f:bb:
74:f6:d5:26:1c:70:63:91:50:c2:49:c0:0a:6c:ca:91:32:d7:
a1:53:23:ec:15:9f:41:15:d8:8e:7c:3d:ff:61:13:62:b9:e0:
e8:6d:d9:1d:a1:55:75:e9:14:52:fe:3e:b7:b9:42:a6:b8:49:
91:f3:e8:9d:1a:fa:af:4c:57:9d:57:4c:96:cf:ec:f2:7f:4e:
94:7f:29:74:09:1f:39:01:af:57:6d:4b:51:77:df:00:86:22:
7c:69:5c:ce:87:e1:9c:21:f4:ca:b5:04:f0:76:ca:8b:b6:5c:
df:06:ca:4b:e9:06:15:24:ab:7b:e3:1e:0f:3a:76:98:a0:cc:
c0:96:cb:93:ca:58:05:32:24:6a:c2:e0:90:93:a2:45:b8:bd:
87:3c:98:4b:41:82:19:ec:ef:a1:ad:d6:78:f2:41:45:51:74:
d2:8d:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:17 2025 by rpki-client