Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/WnnNCSNbQcMr5ycrnf-3odrRamo.roa
File: WnnNCSNbQcMr5ycrnf-3odrRamo.roa (raw, json)
Hash identifier: CNZwx9BS6io+5OwCBW8g3opemfIgF6eCFyUvWkBYWDU=
Subject key identifier: 5A:79:CD:09:23:5B:41:C3:2B:E7:27:2B:9D:FF:B7:A1:DA:D1:6A:6A
Certificate issuer: /CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Certificate serial: 019421B1B3083EB2761E07B899214914CECA
Authority key identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/WnnNCSNbQcMr5ycrnf-3odrRamo.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56651
IP address blocks: 193.26.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 11:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b3:08:3e:b2:76:1e:07:b8:99:21:49:14:ce:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a79cd09235b41c32be7272b9dffb7a1dad16a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:b8:97:a0:e7:82:e6:a1:70:bd:34:6f:bc:
7d:fe:e2:4d:c7:a8:82:56:8c:53:69:f4:fa:ac:68:
04:11:86:b8:4d:00:3b:7a:c1:4a:1b:a1:24:0b:73:
08:b6:da:62:e2:f7:75:d7:2a:6e:7d:90:c4:c5:62:
fe:c3:77:f2:b3:37:b3:41:6a:64:ac:0a:91:26:65:
61:65:f9:f3:03:88:3b:4e:5f:ab:50:2c:b9:ff:bd:
b5:0e:b7:e5:4b:e6:68:e9:38:b4:c1:cb:69:66:72:
2f:61:00:69:4a:e5:88:ab:fe:be:0b:12:fb:d6:df:
3d:fc:c2:09:af:1a:fa:73:2e:fb:4d:d5:96:4e:f7:
04:00:6c:e8:0f:44:e6:63:be:85:91:c7:78:a9:70:
99:79:3b:8f:05:43:0a:34:ac:9f:10:db:ed:c6:ec:
dd:ed:74:fc:86:09:a3:b3:02:87:7b:28:e7:46:1e:
7e:d6:38:2b:72:1d:ff:42:5d:a9:c4:77:ca:2c:ce:
5a:be:f5:f7:a5:bf:79:82:46:74:7a:11:0d:0b:6b:
51:fc:0a:0d:77:d9:c8:91:94:52:ee:73:21:86:f2:
8c:04:07:95:4d:47:8e:54:79:b4:c7:ac:40:cd:71:
9d:e4:c0:21:50:d0:66:bb:7b:0f:c5:eb:b7:7b:70:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:79:CD:09:23:5B:41:C3:2B:E7:27:2B:9D:FF:B7:A1:DA:D1:6A:6A
X509v3 Authority Key Identifier:
keyid:6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/WnnNCSNbQcMr5ycrnf-3odrRamo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.220.0/24
Signature Algorithm: sha256WithRSAEncryption
53:fa:49:01:f9:c4:4b:ee:21:0d:1e:0e:30:09:02:06:4b:53:
8c:e2:a6:85:22:53:33:71:e9:e3:d7:02:ea:8f:3f:b5:66:d8:
31:2f:df:ad:4e:e9:c6:45:b9:a9:ac:4a:6a:ec:d1:c1:46:53:
9a:e2:bd:f2:9c:4c:90:14:19:53:5d:d9:a4:ed:59:6a:f1:a8:
cd:d8:c3:78:59:d6:87:55:48:8c:90:2f:c4:84:a9:32:9c:f8:
3f:13:8e:68:3f:fc:7b:15:10:ad:6c:ab:97:35:a0:0e:d7:b3:
77:93:09:13:e1:a9:d4:00:32:8d:99:34:7a:30:c4:04:b8:8d:
5e:c8:cd:e0:4a:e6:85:57:f6:f9:e8:5f:f5:85:04:3d:ef:a5:
66:95:33:bb:c2:27:8c:db:c8:45:b7:03:04:9f:a0:3d:ff:42:
1c:e3:1c:52:35:69:5a:24:90:1e:38:4f:99:9c:ad:3e:81:5b:
e2:4c:e1:c3:f6:83:1c:95:17:64:1f:08:76:92:a3:8d:5f:82:
f7:eb:0c:1a:38:d2:60:f1:a0:f1:03:b4:f7:9b:c6:11:44:bf:
10:24:ff:93:86:8c:bf:05:6e:bf:50:93:af:1d:f9:e5:ff:50:
01:dc:3a:18:ef:29:59:3c:65:a5:0b:0f:65:e0:fa:3a:2e:a7:
17:23:68:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:56 2025 by rpki-client