Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/1-WPhVRlAA6jPCwspck6vC93076I.roa
File: 1-WPhVRlAA6jPCwspck6vC93076I.roa (raw, json)
Hash identifier: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=
Subject key identifier: F9:63:E1:55:19:40:03:A8:CF:0B:0B:29:72:4E:AF:0B:DD:F4:EF:A2
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 019423D7286A908F295F9CFCC8FD12DF7300
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/1-WPhVRlAA6jPCwspck6vC93076I.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 141.98.209.0/24 maxlen: 24
2a12:96c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:28:6a:90:8f:29:5f:9c:fc:c8:fd:12:df:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f963e155194003a8cf0b0b29724eaf0bddf4efa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:61:96:6f:c8:1c:ed:58:4f:69:59:17:1e:
b8:5d:31:26:b4:0f:63:18:7d:c9:9c:9f:b5:e8:01:
2e:c1:26:96:3d:02:2b:bb:e5:0d:d3:14:5b:03:55:
7d:b0:76:bd:6d:dd:c0:c4:1a:38:eb:06:49:9e:77:
ba:ff:fb:50:38:be:d8:88:ab:a0:e9:ba:83:ed:fe:
67:dd:c3:7f:d0:a1:99:96:b2:8f:3d:5a:33:b0:27:
cf:3a:2c:f4:4f:ec:b6:19:4c:c4:94:23:0b:73:4c:
d2:d2:a2:5f:b4:29:d5:dc:b5:e3:e5:ec:f8:d2:3c:
39:25:ca:76:ea:dc:21:e9:e5:d8:bd:96:d2:61:d4:
f4:76:bb:0e:69:45:9f:40:f1:c3:4d:8c:43:d8:ed:
de:ae:b1:54:48:37:eb:78:98:19:3d:78:a0:20:49:
26:0f:48:b4:b2:c0:eb:bf:ad:c0:d4:52:21:05:e0:
52:9a:68:f7:21:67:c5:d5:ec:3e:57:7f:e8:52:30:
bb:f7:0a:53:34:8d:96:80:29:ac:d7:f5:69:73:7b:
73:42:d4:33:aa:fb:0a:e8:d7:03:ce:d2:08:0b:4f:
ea:0a:c6:96:87:7b:ec:dd:2e:1c:d0:3a:c3:ff:a9:
85:85:18:ac:63:32:eb:95:9e:cd:0a:25:62:da:23:
87:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:E1:55:19:40:03:A8:CF:0B:0B:29:72:4E:AF:0B:DD:F4:EF:A2
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/1-WPhVRlAA6jPCwspck6vC93076I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.209.0/24
IPv6:
2a12:96c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:d9:be:5e:3f:64:8d:8c:f6:e8:9b:b4:93:9d:58:db:23:e0:
22:17:12:db:99:f6:46:88:8a:4c:a6:16:b6:51:1e:6f:82:3d:
6e:9c:51:a6:b8:4e:e3:0c:37:5b:52:d1:ae:4a:f8:80:48:3b:
b8:15:c8:55:ff:91:bc:55:6b:3f:a2:45:b9:a6:e1:71:51:42:
f6:d4:4b:7b:a7:48:ab:62:fe:39:b7:1a:b6:94:79:06:36:83:
c3:e2:65:b2:f0:73:22:4a:2a:d4:b9:a3:7d:cb:fa:71:77:3f:
27:89:99:65:c1:27:f5:d1:a3:bc:b5:18:f6:d4:96:7e:5c:54:
20:3a:f2:a5:52:04:b6:c6:41:c5:90:ea:6a:77:59:8a:8b:7b:
92:81:19:a7:fb:79:7b:95:63:09:e5:e6:0b:20:cd:7b:d6:23:
61:d9:f6:45:40:6d:f2:a2:79:b8:0b:37:ee:76:1c:23:44:25:
7a:70:03:83:c3:90:5b:ea:cb:05:a5:a6:a2:86:22:00:2a:87:
c3:93:52:f3:58:44:7a:fc:70:6f:a5:e2:41:8b:c1:ce:41:53:
98:ef:db:dc:ca:59:9b:72:7c:af:48:6f:26:1a:78:c1:59:5f:
d4:dc:0a:00:e5:0f:57:3c:f3:74:c7:e1:b4:ae:ca:51:37:d6:
d2:3b:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:40:53 2025 by rpki-client