Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WjdCWw62oiTVosRD5kTN6slx8sM.roa
File: WjdCWw62oiTVosRD5kTN6slx8sM.roa (raw, json)
Hash identifier: AZY9k0K/4F95DaRJvrQWSrLmlxFa3BCdGg/KY9xx04Y=
Subject key identifier: 5A:37:42:5B:0E:B6:A2:24:D5:A2:C4:43:E6:44:CD:EA:C9:71:F2:C3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194B7C14FC39DD447737F5E9BB701864E77
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WjdCWw62oiTVosRD5kTN6slx8sM.roa
Signing time: Thu 30 Jan 2025 15:08:06 +0000
ROA not before: Thu 30 Jan 2025 15:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 82.152.7.0/24 maxlen: 24
82.153.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:c1:4f:c3:9d:d4:47:73:7f:5e:9b:b7:01:86:4e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 30 15:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a37425b0eb6a224d5a2c443e644cdeac971f2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:e2:25:e0:56:36:d6:8e:9a:28:13:76:12:
2f:35:2e:e2:48:2c:86:68:a8:a4:31:b0:b3:fe:7f:
e2:93:dc:94:89:5f:f8:fc:bd:93:b7:5f:c5:9f:c3:
74:b3:3a:8e:42:c6:06:c6:40:3e:eb:bb:79:0a:33:
52:4f:b1:0c:2d:18:0a:7e:be:a8:e1:36:a3:78:21:
76:36:14:44:22:4b:56:6a:22:fa:2e:17:1b:28:79:
8b:13:38:0c:05:0b:71:93:08:08:ce:ee:05:5c:a0:
d9:3c:81:62:98:13:32:fb:9c:67:cd:44:0f:de:6b:
15:38:75:18:8a:4a:87:94:25:6c:b0:90:32:d3:25:
b0:d9:90:53:7b:0e:01:e7:f9:53:16:9f:77:10:ef:
6c:b9:2c:63:9e:8f:92:99:d9:45:a4:35:74:51:0f:
a5:94:62:48:25:bf:15:d9:b3:04:49:cf:e8:76:20:
89:04:a5:88:a2:88:2c:25:ab:09:95:3d:4f:cc:ae:
54:cc:51:b4:e3:33:7b:e1:54:14:06:67:7c:49:1d:
22:58:9a:30:6a:40:f9:bf:fa:32:c9:79:9e:b9:29:
cd:8b:27:45:29:87:b0:6d:a6:5c:74:b1:67:79:9c:
eb:c3:cc:99:b2:e4:ce:16:44:03:3a:46:14:bd:ff:
21:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:42:5B:0E:B6:A2:24:D5:A2:C4:43:E6:44:CD:EA:C9:71:F2:C3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WjdCWw62oiTVosRD5kTN6slx8sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.7.0/24
82.153.228.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:17:c1:28:30:e9:58:98:73:a8:b2:75:76:7d:16:c6:10:e7:
e1:09:4c:46:d1:cc:36:15:b0:7d:ac:77:77:c8:b1:1f:18:91:
28:09:ae:c1:65:98:69:42:8b:8a:8d:40:5e:93:de:e0:1b:4a:
a1:e5:5e:0f:3f:b5:87:47:97:07:ed:1c:4c:57:32:db:8c:b1:
f5:88:05:c4:e2:01:20:ca:1d:66:bd:00:6f:5f:c3:23:7e:71:
b3:d9:b3:57:1d:ad:86:84:f3:35:7c:c5:35:f6:9c:4b:d7:22:
0a:cd:74:05:51:31:8f:5d:54:ca:9c:21:0d:b8:d6:b7:e5:a6:
61:96:8d:e6:eb:69:73:f4:b8:3d:c3:b5:9d:ad:e5:89:77:f6:
ad:df:5e:cd:72:a1:98:ce:ef:47:45:91:d3:8a:df:a0:73:7b:
62:8c:b1:89:6f:ca:2e:b6:ab:05:d2:39:d1:18:95:aa:f8:0c:
9c:26:00:58:b5:86:cf:63:d6:c8:3e:b8:bf:d0:80:b4:37:11:
f3:06:a5:c2:bb:c7:a2:e7:22:02:03:b3:2f:ab:58:da:d9:4d:
6b:2e:63:43:4d:5d:78:9d:e5:86:98:c9:53:77:76:a6:0f:23:
43:6d:53:e1:dc:ee:5b:a4:32:ee:c5:a3:9e:3e:11:15:07:8e:
34:f2:83:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:19:06 2025 by rpki-client