Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/wAhroXPNvLdteZoxcXWVyonpn3o.roa
File: wAhroXPNvLdteZoxcXWVyonpn3o.roa (raw, json)
Hash identifier: OBx51TGLI2Tyl8gKiqIk4oM/XlGHUTNQTSsRU8kwYpU=
Subject key identifier: C0:08:6B:A1:73:CD:BC:B7:6D:79:9A:31:71:75:95:CA:89:E9:9F:7A
Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e
Certificate serial: 019420D608A5E1D6A84261E2A98B8C832D6A
Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/wAhroXPNvLdteZoxcXWVyonpn3o.roa
Signing time: Wed 01 Jan 2025 07:48:05 +0000
ROA not before: Wed 01 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57167
IP address blocks: 46.254.107.0/24 maxlen: 24
195.14.122.0/24 maxlen: 24
2a11:b100:b100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:08:a5:e1:d6:a8:42:61:e2:a9:8b:8c:83:2d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0086ba173cdbcb76d799a31717595ca89e99f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:8e:82:13:f7:e7:e5:6f:12:b3:7d:df:d4:
e0:77:5f:06:f9:00:31:2f:de:9c:84:c2:e2:24:5f:
1e:fa:d1:7b:aa:2c:ed:c8:7b:ab:fd:41:80:35:3e:
6e:8b:0b:a0:b4:dc:79:2c:81:53:a8:2b:60:c1:03:
72:9e:31:8e:87:f5:7c:10:bd:23:74:12:7f:c2:40:
39:8c:de:a2:7d:5f:aa:0b:db:22:68:d8:c5:6c:f4:
30:4a:7c:4d:04:23:4b:f3:bb:f5:81:c6:0d:fa:8c:
89:99:43:52:c8:f1:32:a4:ec:d3:4c:ea:dc:be:d3:
ad:1e:0e:24:23:6a:a7:4b:c7:fd:1f:a6:60:32:79:
1a:a6:79:8d:bf:48:b7:83:21:82:ed:bd:98:27:bf:
bb:d7:dc:e6:3c:3a:07:81:dc:a7:fd:22:dd:16:59:
41:04:a9:a8:f0:62:86:e2:05:95:ff:a6:25:ba:8d:
51:df:6c:9d:4e:89:5c:ce:98:56:17:9d:9e:94:61:
23:cb:07:3b:57:71:f5:eb:a8:89:6f:c7:80:8f:e6:
cf:8e:7d:dd:02:66:81:17:81:2d:e0:b6:35:ac:c0:
c7:3a:64:f8:f3:e7:58:7a:34:b6:16:35:01:e7:f9:
fd:36:c7:64:b3:68:a7:3b:e0:d4:33:fc:5e:c5:7e:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:08:6B:A1:73:CD:BC:B7:6D:79:9A:31:71:75:95:CA:89:E9:9F:7A
X509v3 Authority Key Identifier:
keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/wAhroXPNvLdteZoxcXWVyonpn3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.107.0/24
195.14.122.0/24
IPv6:
2a11:b100:b100::/48
Signature Algorithm: sha256WithRSAEncryption
24:4f:73:5e:29:80:63:be:d4:53:89:ed:f5:fe:ea:4b:20:1f:
cc:8c:8a:05:c8:d7:52:5c:b3:71:10:72:a1:39:87:53:f0:24:
a4:d2:e3:50:a8:a8:96:46:da:e6:84:fc:01:8e:2c:54:78:f4:
27:6c:43:dc:f9:96:a3:6c:cf:9d:a6:bc:46:21:f7:3e:cb:bc:
3b:bc:8b:30:e2:ef:a0:18:82:58:d6:34:55:17:10:0d:98:3c:
6d:85:c9:b5:94:9d:5e:12:21:f0:4b:8f:c6:cc:aa:4c:40:d0:
54:19:1b:f8:16:89:29:8a:c6:a2:39:ee:5f:ff:7c:8b:d1:02:
d3:e0:c9:f8:b1:06:25:dc:30:a7:52:ef:39:0f:24:b6:22:66:
b0:be:dc:36:11:6d:ef:e4:cc:54:97:c8:d3:b6:3e:63:24:3c:
c8:1c:0d:c5:f0:e7:bc:88:74:1d:ef:20:a5:4a:96:96:e5:c2:
5e:95:88:58:bc:11:32:e3:4a:a1:0e:07:4f:a3:e3:2d:85:7a:
9c:19:34:cc:d7:c0:0e:ee:af:9b:d6:85:4e:ee:8d:50:36:f1:
67:0b:ec:74:22:17:92:1f:10:b9:41:36:93:9e:c2:2d:6b:ca:
08:4b:4d:80:69:dd:f7:46:96:4e:92:a0:f3:f9:09:ab:2c:d5:
e6:5d:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:05:01 2025 by rpki-client