Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa
File: wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa (raw, json)
Hash identifier: zpBJ6kRrehBfcMMd+SMf9RfgRe0zUoI1wInwbsH+nsg=
Subject key identifier: C0:26:F8:BD:BA:E0:18:54:61:53:E0:9C:E4:D3:19:97:E8:F3:5A:AA
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01942827AAC5F97F12CBFA26BC5BBC6F01D8
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa
Signing time: Thu 02 Jan 2025 17:54:35 +0000
ROA not before: Thu 02 Jan 2025 17:54:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 213.182.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:aa:c5:f9:7f:12:cb:fa:26:bc:5b:bc:6f:01:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 2 17:54:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c026f8bdbae018546153e09ce4d31997e8f35aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:38:eb:78:4d:34:64:11:fd:50:07:b3:94:
2c:c7:f2:69:be:65:65:ca:28:5b:65:d4:2c:73:d3:
74:8a:3c:fa:24:fa:e1:93:34:a9:26:0e:30:06:11:
d3:6c:7d:96:d3:de:2f:75:1f:a7:56:34:77:48:68:
04:d2:8f:1f:51:9b:ff:2a:f1:16:26:43:06:c2:04:
9a:aa:b4:a8:9d:a3:18:f5:16:34:ac:ee:ac:23:4d:
e5:d8:80:12:60:01:7b:95:3e:86:81:f3:06:9b:a8:
3f:0c:dd:58:bc:bb:f5:7f:fe:26:fb:fd:94:84:a8:
3f:82:59:ee:f4:be:5c:da:c7:52:fe:71:29:aa:96:
54:f0:59:95:e2:e5:e3:ac:e3:f5:3d:ee:cf:22:bd:
87:af:11:87:b7:ad:d3:58:3d:0b:64:d2:20:b6:3b:
cf:38:0c:47:27:21:ca:c8:bb:31:14:3c:78:68:c9:
41:b2:e0:44:ae:f8:ac:7e:e4:83:62:29:44:29:3b:
a3:73:32:51:a5:88:28:3e:4e:22:4f:52:98:f2:60:
79:66:36:ef:75:47:fd:76:01:c2:c8:d6:7b:5e:76:
0e:ee:d0:5f:95:fa:fc:10:33:87:02:50:b5:cc:46:
a4:19:8a:3c:b2:c8:a9:b5:40:21:c8:e9:e0:cb:96:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:F8:BD:BA:E0:18:54:61:53:E0:9C:E4:D3:19:97:E8:F3:5A:AA
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6a:37:22:18:8d:46:00:29:2e:74:5c:0c:36:d0:18:da:87:
95:4d:85:5f:d8:5a:3f:f2:2e:fe:ed:37:03:bd:e9:fd:86:ed:
d0:e2:e4:bf:70:66:3d:a2:3d:48:53:5b:ce:81:be:71:ec:6c:
b1:8f:96:e2:61:2d:c3:f3:83:f8:31:42:50:c3:49:90:b0:54:
98:b8:db:29:78:7f:b8:39:e1:37:87:37:ef:f7:2c:cf:25:33:
a7:e6:21:63:5a:50:f2:4f:4d:b0:c8:0d:ee:b1:bf:16:b6:9b:
71:38:5c:ab:a3:ca:2f:e7:d7:59:cc:f5:79:11:40:8e:30:07:
85:20:e9:85:37:4c:cf:ca:e9:9a:c9:24:9b:ef:1b:3f:6f:2e:
ee:2d:fb:96:7f:cb:28:4f:af:42:c3:cd:64:16:68:69:43:8b:
7d:29:83:85:db:cf:0d:e3:a0:29:bd:bc:21:4d:b2:3f:0b:60:
75:7c:96:67:a5:44:66:45:52:14:e1:ed:77:65:12:82:7f:c2:
83:45:d3:86:f5:b2:67:92:5b:25:aa:43:c9:c8:0e:ab:ee:15:
48:53:da:45:1e:12:0d:d0:66:a5:e0:c0:09:bb:6f:68:a7:4c:
7a:c3:32:ba:34:0c:43:b2:50:b5:3b:21:65:32:d3:88:46:16:
38:b0:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:37:19 2025 by rpki-client