Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/WnteyksBXxvh50Fr3JRktkxQELU.roa
File: WnteyksBXxvh50Fr3JRktkxQELU.roa (raw, json)
Hash identifier: VZ2ULNlKhReA1wdNSeA4G9O7QzDbzJEXTzE8wy4jEPM=
Subject key identifier: 5A:7B:5E:CA:4B:01:5F:1B:E1:E7:41:6B:DC:94:64:B6:4C:50:10:B5
Certificate issuer: /CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Certificate serial: 019427B4A9A05E05A1FADC4B85F22FFEE454
Authority key identifier: 2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/WnteyksBXxvh50Fr3JRktkxQELU.roa
Signing time: Thu 02 Jan 2025 15:48:58 +0000
ROA not before: Thu 02 Jan 2025 15:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209587
IP address blocks: 185.236.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:a9:a0:5e:05:a1:fa:dc:4b:85:f2:2f:fe:e4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Validity
Not Before: Jan 2 15:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a7b5eca4b015f1be1e7416bdc9464b64c5010b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:82:49:60:86:54:c1:15:60:b3:7d:f7:3f:
dd:9b:b2:9e:14:27:b7:dc:3e:b6:8c:5a:9c:0a:09:
2f:b5:ac:9b:fa:9f:92:08:33:d1:cb:ab:54:6f:6a:
0d:e8:86:9e:3b:3e:86:33:54:90:13:ec:52:57:cc:
0c:8c:54:f1:24:7a:da:49:12:59:2a:27:dc:f0:13:
86:e1:57:99:4c:55:74:ef:39:3a:02:79:d1:ca:92:
64:3e:f3:a9:da:87:9e:46:71:c4:b9:2e:d2:29:3c:
9d:1a:22:4b:ed:98:5a:77:eb:ca:59:a3:16:29:24:
6c:33:e3:5b:dc:93:ba:ef:12:38:09:14:3a:52:f9:
1a:50:a9:b4:8f:24:e0:ee:24:4d:10:18:d2:5e:43:
82:3a:c9:8f:b4:ec:9e:46:fd:e4:b6:40:d6:08:b7:
63:b7:a8:a3:1e:c0:79:ca:d7:c4:84:77:46:0a:0b:
15:01:6e:d0:6e:90:57:51:f3:24:d4:6e:e8:2f:ec:
57:72:c3:3b:35:c4:9f:33:c8:a9:15:4f:35:de:53:
2f:36:24:0c:d6:20:df:39:6f:ff:39:94:e5:e8:f2:
80:8c:31:76:c1:0b:4d:54:c4:52:3f:23:e5:51:b2:
b4:2d:6e:1c:9e:42:e5:ef:3c:40:96:03:bf:da:ff:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7B:5E:CA:4B:01:5F:1B:E1:E7:41:6B:DC:94:64:B6:4C:50:10:B5
X509v3 Authority Key Identifier:
keyid:2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/WnteyksBXxvh50Fr3JRktkxQELU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.32.0/22
Signature Algorithm: sha256WithRSAEncryption
76:28:23:58:89:85:cf:b7:5e:ce:c6:13:de:fd:eb:80:ce:1f:
fb:07:78:3a:63:b0:cb:e7:17:66:dc:ac:e1:1a:f5:01:9c:1f:
dd:a4:7d:2e:0c:13:2e:ad:6c:9c:51:65:1b:69:3c:3d:c5:f7:
38:68:27:e4:96:0e:88:60:60:fc:82:e2:1d:33:b7:94:7a:f6:
c4:7b:a4:cf:2f:48:12:93:bb:1d:48:1c:6c:21:cd:79:b4:9c:
e6:1c:7e:ed:72:55:ba:d9:9d:4d:e7:11:48:b0:99:ca:7b:bf:
56:4f:f5:c1:12:fd:d4:63:ef:41:b8:14:1a:7a:38:c8:af:12:
be:ad:43:93:03:6c:9d:00:ef:16:2d:ea:84:53:5b:6d:d8:23:
9e:d0:95:7b:1a:5a:87:00:1a:d7:f4:b3:55:ca:1e:95:3f:1f:
ae:e2:1a:cc:2f:6f:15:32:1f:45:cb:7d:ba:5c:68:83:0c:67:
7e:2f:54:80:df:98:1b:23:98:9a:65:b7:56:53:80:e0:60:b8:
5c:e8:6c:1b:87:a8:a9:bc:7d:9a:eb:89:a8:78:3d:93:cc:2d:
aa:28:fe:27:d5:4d:3b:79:3c:7e:c0:45:11:40:08:bc:32:47:
97:d9:cb:38:ec:a3:53:2b:23:84:41:88:cf:dc:d1:77:9b:b8:
0e:8d:66:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:03 2025 by rpki-client