Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/W8WjY9YYv8iljwDY45MThfbAk84.roa
File: W8WjY9YYv8iljwDY45MThfbAk84.roa (raw, json)
Hash identifier: dxrwQI2i6fKiTUhyw6w33TI4PVDbBCXq3QCNhLROPGc=
Subject key identifier: 5B:C5:A3:63:D6:18:BF:C8:A5:8F:00:D8:E3:93:13:85:F6:C0:93:CE
Certificate issuer: /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial: 019427479203CAB7939FE8D0CA29BC6D88E9
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/W8WjY9YYv8iljwDY45MThfbAk84.roa
Signing time: Thu 02 Jan 2025 13:49:49 +0000
ROA not before: Thu 02 Jan 2025 13:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 185.89.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:92:03:ca:b7:93:9f:e8:d0:ca:29:bc:6d:88:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bc5a363d618bfc8a58f00d8e3931385f6c093ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:6e:4e:2e:2a:c0:57:a8:86:0a:0e:63:d6:
d6:0a:24:55:86:fe:29:99:7c:54:32:fe:55:16:1f:
45:bb:66:2f:59:08:a1:ec:06:61:1a:e5:e3:5e:52:
fc:34:51:6c:d2:85:10:d5:f7:6a:52:37:7f:f2:f1:
f8:37:0c:f3:01:f9:b3:db:90:28:56:ad:fa:47:1c:
78:1a:ab:a6:b8:74:37:cf:07:09:78:39:d2:86:d8:
cc:44:37:b8:ed:cc:aa:81:48:3d:50:b3:8d:d7:ce:
61:37:ca:e5:84:62:ca:de:4e:fa:b2:f3:c5:29:dc:
47:85:8e:a0:f0:b5:30:7a:38:56:b0:d6:66:b5:7d:
16:75:64:07:1e:94:5e:53:94:3b:ff:17:ba:a9:73:
86:cd:8b:26:b6:b6:46:ee:ef:16:33:e5:70:0f:ed:
0b:e4:f6:8a:1b:32:52:ad:bf:67:c0:8d:ee:dc:e1:
2d:13:04:13:15:84:69:3d:77:3f:92:ef:34:03:b9:
8b:9a:0f:25:03:c6:33:7b:03:1d:ae:3c:ad:d9:0a:
bb:19:42:0c:fc:d5:6a:54:cd:fa:8d:7e:04:0e:31:
23:e1:1d:1a:0d:28:30:28:9e:53:57:c1:5f:96:ae:
c9:7c:8b:26:29:57:18:cf:ae:67:02:04:25:ee:43:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:A3:63:D6:18:BF:C8:A5:8F:00:D8:E3:93:13:85:F6:C0:93:CE
X509v3 Authority Key Identifier:
keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/W8WjY9YYv8iljwDY45MThfbAk84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:7e:3b:2d:1d:0d:96:7d:81:b5:a4:28:6c:af:37:0a:e6:65:
11:eb:bd:f2:1c:a8:8f:64:8b:97:db:b5:42:2f:20:39:9f:7c:
b0:a9:ed:21:de:4e:fa:53:76:93:76:12:20:63:6e:9c:d9:70:
9e:68:a9:22:bf:e0:f9:15:6b:a7:e8:8e:89:df:38:20:4d:11:
8e:0f:f9:03:3e:63:fe:cc:25:6b:be:1e:d1:ba:e7:7a:f9:90:
4a:f8:dc:13:39:64:53:2c:97:ad:ee:bb:9a:be:a4:0a:01:28:
82:d4:4b:20:b7:b6:35:25:52:ff:84:47:cf:23:b0:ad:3f:1d:
c7:70:39:ba:7d:7a:86:c5:60:cd:68:44:68:84:4d:3a:31:54:
69:a0:9c:87:33:31:c0:a7:a8:65:a1:b9:a0:0f:69:5d:70:2a:
53:06:dc:a5:5a:d7:7f:0b:45:c2:84:c3:9f:63:d7:c4:10:86:
b6:bc:56:41:a1:4a:e1:9f:ad:2f:ba:60:1b:ab:5a:c3:8d:c6:
bc:0d:dc:67:39:e3:e0:f8:67:c2:1b:bd:4c:74:0e:53:a7:6b:
3a:74:57:b1:81:b5:3f:8a:6c:49:0a:5a:05:6c:24:c7:05:23:
37:c2:4f:bf:12:72:15:58:e7:5d:ab:3e:0f:8f:1e:23:22:53:
ae:62:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:30 2025 by rpki-client