Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/wYadpHd2MX7rl23MXpoBrWpPMd0.roa
File: wYadpHd2MX7rl23MXpoBrWpPMd0.roa (raw, json)
Hash identifier: ChsIKqBtAjttRoCTB73tSTtBmtG5Dj14Yia5A9yjnoo=
Subject key identifier: C1:86:9D:A4:77:76:31:7E:EB:97:6D:CC:5E:9A:01:AD:6A:4F:31:DD
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 01941FFAB8B214967033B3212616E6C57A64
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/wYadpHd2MX7rl23MXpoBrWpPMd0.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204533
IP address blocks: 185.248.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b8:b2:14:96:70:33:b3:21:26:16:e6:c5:7a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1869da47776317eeb976dcc5e9a01ad6a4f31dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:69:6f:56:e8:30:40:87:c9:22:48:10:d1:
c3:91:06:52:24:ca:13:5d:89:27:b4:34:61:1c:8a:
0d:6e:6f:c9:6f:e5:79:54:b7:31:ee:de:5b:54:de:
7e:c6:56:69:b5:4e:83:10:8b:a9:58:67:5a:c6:ef:
05:04:59:a4:7f:59:06:13:14:e3:18:42:7d:47:e3:
cb:3a:00:75:de:1a:40:03:34:a7:e8:d0:d5:45:f3:
c9:69:19:6c:07:e6:04:59:ef:6f:1f:7a:12:01:68:
3a:e7:75:18:05:f1:2e:72:d6:34:7e:54:c5:90:8a:
7e:cf:c8:fe:f1:c3:47:a0:0c:cd:5a:d0:0f:bd:78:
12:2b:31:fe:65:e8:af:40:60:91:3a:0b:a5:b0:5b:
51:c8:fa:d3:fd:7d:39:25:22:13:bd:f1:98:30:ee:
f5:1a:4b:07:37:14:b1:db:8f:44:16:52:c0:fd:c8:
a8:0f:f3:cf:39:30:b6:e0:38:ad:3d:a9:19:b7:5e:
d8:3b:8c:04:d9:0b:2f:7f:41:c5:2c:7f:7c:f4:79:
3b:ec:c7:fe:da:47:68:5c:0b:a3:94:a4:93:99:01:
4c:36:5d:4d:b7:96:11:17:09:e0:7c:6c:1c:45:c1:
b4:8f:45:a9:bf:94:b8:54:34:b8:ed:0f:ec:76:d8:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:86:9D:A4:77:76:31:7E:EB:97:6D:CC:5E:9A:01:AD:6A:4F:31:DD
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/wYadpHd2MX7rl23MXpoBrWpPMd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.32.0/24
Signature Algorithm: sha256WithRSAEncryption
01:35:29:39:d8:f6:db:f8:f1:ab:2a:c8:db:fd:3c:f3:25:f5:
c5:23:8d:31:97:29:2b:b1:82:c5:25:54:eb:76:b0:3a:86:d6:
df:1c:51:80:2a:88:f6:e2:fd:bf:17:95:b3:d4:be:5a:ce:81:
3d:06:3b:38:2c:4e:5a:2c:25:07:c9:ce:6a:c8:d9:fd:f1:ca:
ec:49:65:8a:07:f9:1d:3e:6f:24:55:29:8b:90:aa:4c:fe:5e:
fd:4b:84:c1:1b:6d:ed:0a:33:b4:9e:e9:f3:d3:93:10:74:7b:
fe:41:57:35:6b:27:66:93:89:f7:9f:5d:4c:10:0c:25:f8:fb:
3b:14:08:47:c7:38:7e:15:1a:5d:16:61:04:9e:4d:95:19:0e:
69:8d:90:90:ba:66:ee:c2:1f:f3:2a:4b:07:a5:2a:87:95:62:
66:82:e1:cc:a1:f6:16:cb:9b:ac:7b:48:eb:59:60:e1:e5:6e:
9c:d1:07:63:73:ec:3a:67:d7:99:67:6a:66:7d:db:5c:e6:95:
03:4e:22:23:4c:a6:60:4e:2b:c8:44:16:cf:c5:79:e9:34:22:
4d:64:83:fe:90:53:f3:46:b8:45:f7:43:37:74:a2:0c:10:1a:
d8:11:89:65:15:e0:fa:d2:0e:b4:d6:bb:cf:59:76:c8:7f:fc:
25:43:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:20:04 2025 by rpki-client