Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa
File: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (raw, json)
Hash identifier: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=
Subject key identifier: 59:5C:EF:F4:83:EC:D7:C8:E9:12:4F:6F:C6:EC:59:27:D0:E0:33:A1
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 0194236A142480F6FA39B8580F8BC44183F9
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48611
IP address blocks: 185.250.184.0/24 maxlen: 24
185.250.185.0/24 maxlen: 24
2a0c:1140::/32 maxlen: 32
2a0c:1142::/32 maxlen: 32
2a0c:1143::/32 maxlen: 32
2a0c:1144::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:14:24:80:f6:fa:39:b8:58:0f:8b:c4:41:83:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=595ceff483ecd7c8e9124f6fc6ec5927d0e033a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:61:e2:67:a4:d1:28:79:42:98:8a:13:d2:
10:0e:a2:78:41:d8:e2:c2:c0:f4:fb:32:26:cf:98:
ae:02:33:42:ed:20:42:0a:07:12:1e:32:c9:e4:5b:
cf:34:39:94:dc:15:1f:16:9c:60:b1:2e:03:00:e0:
db:6d:31:df:ac:0d:01:4a:0b:22:97:1d:f8:e5:aa:
82:3c:07:eb:09:ad:44:54:54:25:c9:ff:8c:3d:47:
77:de:37:6a:df:71:ef:92:43:bb:af:dc:7e:9a:de:
fc:3b:f5:99:8a:a0:de:07:59:e4:82:b7:7d:7e:60:
32:60:d3:40:12:3e:2e:c1:54:94:27:ea:b2:74:0c:
ce:16:0e:fa:51:5f:d7:11:cb:6a:3c:07:57:a5:10:
be:93:e5:cc:c5:2e:97:8d:73:ce:0a:31:22:2d:b1:
59:a5:05:47:c2:3e:e1:27:07:33:01:6d:98:ff:71:
5d:3b:12:32:61:34:99:e6:54:9e:c9:95:94:7b:12:
b0:b1:78:9a:47:f2:30:94:0e:95:e0:82:6b:e1:76:
f4:b4:54:36:a8:f8:d8:00:87:3d:5d:a8:5e:82:c2:
4e:99:fa:a1:03:8e:cf:73:8f:d5:94:3d:50:b7:2b:
f8:0f:57:0c:ce:79:5b:72:f5:55:e7:a6:ce:5b:63:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5C:EF:F4:83:EC:D7:C8:E9:12:4F:6F:C6:EC:59:27:D0:E0:33:A1
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.184.0/23
IPv6:
2a0c:1140::/32
2a0c:1142::-2a0c:1147:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
05:5b:38:05:60:5f:21:6b:85:93:8f:d6:e0:9f:67:58:dd:c9:
0c:e5:f9:41:fc:cc:aa:39:26:74:34:5b:1e:94:f0:aa:dc:0e:
7a:4a:70:0f:fe:68:86:39:0d:20:d1:3f:3e:0d:3a:5d:04:7e:
7c:b0:a1:f6:4c:c2:0f:21:87:da:dd:86:bd:d3:19:f5:a5:56:
30:30:5d:37:b1:61:28:27:c8:84:df:b9:ec:6b:a9:eb:00:4c:
00:9f:fc:c0:a4:a9:51:ae:9a:aa:80:82:b8:6b:c6:6a:f4:a0:
cd:8b:c8:ad:2d:cb:7c:5b:f1:c6:88:6f:a9:0e:f4:9c:a9:0c:
6c:9a:1a:89:99:00:83:6a:86:dd:29:b8:9b:e5:b7:e2:f5:04:
b2:c3:66:09:06:91:36:1d:0c:7e:01:89:c9:5f:2a:9d:3d:91:
34:e8:f6:38:a7:c1:16:f0:90:07:4f:16:55:91:ea:f3:d5:ce:
64:49:c4:0c:24:dc:12:46:3e:40:a4:1f:d4:14:19:75:53:13:
67:21:bb:74:a1:3b:a5:e9:95:1d:c7:ae:1a:6b:f5:e5:a9:c4:
2e:13:e1:36:38:63:c0:27:1d:e5:65:b0:f1:62:f4:c8:02:a6:
69:72:32:9c:fd:a0:2d:45:0d:72:2c:4f:39:e5:ec:80:69:d9:
16:ea:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:41 2025 by rpki-client