Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/wfmRA1o816NK2nebior9nQRqs6I.roa
File: wfmRA1o816NK2nebior9nQRqs6I.roa (raw, json)
Hash identifier: WsRrqYQ4pFa/JlBicKV1hWW2cLlAeaKvafPxPghqGUY=
Subject key identifier: C1:F9:91:03:5A:3C:D7:A3:4A:DA:77:9B:8A:8A:FD:9D:04:6A:B3:A2
Certificate issuer: /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Certificate serial: 019420D59F24DA22858AAEF340EE1C22F4BC
Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/wfmRA1o816NK2nebior9nQRqs6I.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203586
IP address blocks: 185.219.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9f:24:da:22:85:8a:ae:f3:40:ee:1c:22:f4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1f991035a3cd7a34ada779b8a8afd9d046ab3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:17:15:64:13:5d:82:f6:7f:21:28:8a:c9:
07:c6:d5:8e:75:54:5b:c2:05:14:3e:d1:60:06:83:
c8:fd:b6:09:c3:53:33:46:f7:3d:85:d2:11:4c:57:
ee:59:33:98:8f:23:4c:30:b1:9d:d5:90:d4:61:8a:
3b:a8:a7:72:8f:4b:ef:e7:6c:e1:ce:87:a1:6f:52:
62:13:52:a0:d3:28:95:5c:2a:72:24:63:15:7b:dc:
ba:14:36:05:12:dd:00:6d:64:9b:d0:44:a9:0f:5d:
55:8b:b5:11:b9:d3:7e:26:6e:e9:2c:c1:15:5d:bb:
ea:3f:15:cb:0e:1c:42:03:7c:ff:53:30:34:66:9e:
a7:31:65:be:f2:63:22:38:d7:5e:77:23:65:0e:b8:
49:ba:2d:bf:75:85:70:77:d2:79:7a:c0:77:52:54:
47:8a:ea:2e:dc:ee:1b:2b:0e:55:25:32:40:e1:be:
7e:2b:24:5d:f0:e9:c4:6c:56:b5:dd:d5:b7:52:8e:
df:3e:dc:9a:84:85:ef:0d:12:26:2b:ca:cd:d7:9b:
1c:37:40:56:a9:af:c4:36:75:aa:13:0e:f9:3a:93:
f9:cf:be:be:08:17:b4:48:2b:7f:4f:10:a4:90:ba:
72:dd:8e:40:f1:be:9f:29:c3:46:b1:cc:af:5e:42:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F9:91:03:5A:3C:D7:A3:4A:DA:77:9B:8A:8A:FD:9D:04:6A:B3:A2
X509v3 Authority Key Identifier:
keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/wfmRA1o816NK2nebior9nQRqs6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.184.0/22
Signature Algorithm: sha256WithRSAEncryption
37:6b:bf:d3:47:3e:f0:c8:99:9f:99:cb:2b:65:01:4c:db:1f:
17:7f:25:f2:17:73:38:8f:3f:09:17:f8:5f:0c:27:a2:cc:d8:
8a:67:11:8a:e6:8e:9d:94:4e:f9:ac:8b:bb:ec:65:f0:cc:15:
57:ac:53:2f:b3:ee:e4:b4:b1:9a:01:3c:5b:05:d3:d7:de:2c:
66:94:b6:bb:9f:9e:79:38:24:56:d1:58:98:79:78:78:9e:99:
70:f7:f6:7d:7d:ae:68:d7:bc:d5:9c:5c:48:1e:55:0d:83:d6:
ab:d6:a5:a4:43:86:99:40:6e:b8:28:5f:ef:a5:3b:8b:bc:5e:
cd:52:fa:73:0b:3c:5d:f8:1e:03:9b:37:37:77:46:e6:f0:58:
88:80:98:3c:bb:d2:c4:4f:fb:19:fb:2f:1d:d0:2e:26:93:78:
f0:a8:b1:bd:2f:3f:f1:c5:46:04:ad:c6:87:b9:dc:0e:95:37:
49:16:c6:86:00:ea:d1:4a:ab:fe:b5:92:a6:90:b8:72:64:3c:
28:c9:4a:34:d8:28:1e:ac:0e:4f:e8:6b:4e:6f:10:85:3d:c0:
93:85:81:a8:6b:f8:5f:c7:eb:d8:f8:a4:75:72:39:90:b4:61:
4e:76:d0:ff:4d:0b:5a:56:84:4f:fe:1f:e9:26:b6:a6:f7:29:
58:7c:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:57:10 2025 by rpki-client