Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/W66fAxMpRHUTy0LH4NsEkImgDCE.roa
File: W66fAxMpRHUTy0LH4NsEkImgDCE.roa (raw, json)
Hash identifier: AD4DNdRniTHPJR9jh88wIKBDDr7wVfxEb8cYqqVIi8s=
Subject key identifier: 5B:AE:9F:03:13:29:44:75:13:CB:42:C7:E0:DB:04:90:89:A0:0C:21
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 0194221F8E32B30BFBADBACB4A63ED450367
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/W66fAxMpRHUTy0LH4NsEkImgDCE.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 89.111.15.128/26 maxlen: 26
2a00:17c0:c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8e:32:b3:0b:fb:ad:ba:cb:4a:63:ed:45:03:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bae9f031329447513cb42c7e0db049089a00c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:ea:d4:42:c3:8c:e3:01:9b:66:81:25:83:
83:6a:5f:75:b6:35:b3:25:6e:f5:36:f9:3d:2a:c3:
45:03:a8:4f:9a:28:19:a5:52:64:cb:12:c0:7f:7c:
5a:2d:d3:31:31:87:ba:dd:53:a8:f5:e3:75:5b:9f:
38:8f:7f:8b:ec:8b:48:59:a0:4a:03:23:5e:7f:e7:
43:bc:cb:c7:78:87:d2:72:d0:a6:51:fe:16:61:02:
a3:8b:c7:c4:a8:77:95:ec:bb:8a:55:fa:fc:55:83:
a7:b2:f5:d9:d1:07:02:f3:b1:63:1e:a7:44:09:56:
99:c0:95:61:2e:aa:71:65:f2:7a:e2:79:df:b6:38:
ac:20:08:1a:52:79:ea:ef:64:11:f5:1b:d2:98:b5:
5f:95:74:9c:61:45:70:e1:06:94:1e:52:b9:37:bf:
b8:fe:84:4e:82:4b:e3:87:cc:f6:f2:a1:68:b0:f2:
95:30:36:34:fd:50:a9:d8:82:5f:7e:2b:59:8d:d7:
62:a5:d6:83:4b:53:76:e9:33:0c:96:8e:16:ba:47:
aa:06:87:17:17:7f:eb:b5:2e:1e:41:33:9c:62:de:
41:0d:d0:57:89:1d:31:85:89:32:82:77:77:ee:1f:
02:9b:05:35:65:d6:b9:6e:f0:2e:22:fa:e7:ac:88:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AE:9F:03:13:29:44:75:13:CB:42:C7:E0:DB:04:90:89:A0:0C:21
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/W66fAxMpRHUTy0LH4NsEkImgDCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.15.128/26
IPv6:
2a00:17c0:c4::/48
Signature Algorithm: sha256WithRSAEncryption
75:75:b8:f4:29:6d:3f:50:45:ff:2a:97:7f:7f:28:b5:21:b4:
02:50:f3:f5:ba:36:34:77:e8:97:46:7a:d5:23:f4:c4:56:dd:
27:e2:34:b6:da:5b:a3:99:93:de:ba:f2:07:58:f9:fa:5f:ec:
db:c2:8c:05:75:2d:d4:b8:d5:f7:e3:20:ef:54:b6:1a:43:6f:
82:c5:6d:7b:7b:a8:10:40:7b:e2:04:97:92:31:ca:5a:7b:2d:
e9:4a:5c:c4:6e:99:89:21:90:0f:b4:84:63:4c:7d:86:9d:f7:
15:72:22:dc:c8:37:c1:fc:32:8c:47:3d:be:d3:f9:0c:0d:fa:
b7:cf:5d:c1:5a:3e:1e:fa:9f:5a:6c:ef:0f:ca:91:80:71:d6:
5c:62:4f:2b:e4:fe:51:ca:84:30:2b:c0:17:83:3f:79:ad:6d:
51:dd:c7:b3:d3:ee:ca:e2:c2:0c:91:79:e0:aa:4c:b4:84:ff:
39:fa:c1:52:13:83:7a:21:32:34:f0:b7:9a:95:c0:77:d3:39:
ef:94:b3:77:d8:a3:25:f7:4b:cb:01:0e:31:5f:83:13:e9:1c:
82:75:7b:d9:6c:a3:b5:e8:38:e7:91:be:f1:8c:73:7e:ac:8a:
4a:26:b6:69:31:79:75:d0:dc:7a:4d:79:92:c7:40:b6:e7:58:
4c:5d:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:19:20 2025 by rpki-client