Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/1wgyqmi_UciW12siJdugVw6Ld-k.roa
File: 1wgyqmi_UciW12siJdugVw6Ld-k.roa (raw, json)
Hash identifier: snVi/KaQbyE3zvHoMyWAoIjHS+8HXjO/4KSOB7jYfqk=
Subject key identifier: D7:08:32:AA:68:BF:51:C8:96:D7:6B:22:25:DB:A0:57:0E:8B:77:E9
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019524442DA030A0E5CB1DD47EA81F08FF42
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/1wgyqmi_UciW12siJdugVw6Ld-k.roa
Signing time: Thu 20 Feb 2025 16:50:02 +0000
ROA not before: Thu 20 Feb 2025 16:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213461
IP address blocks: 85.142.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:44:2d:a0:30:a0:e5:cb:1d:d4:7e:a8:1f:08:ff:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Feb 20 16:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d70832aa68bf51c896d76b2225dba0570e8b77e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:4e:53:fd:d3:83:c0:c2:ae:0f:7a:67:44:
9e:98:72:6b:39:2b:1d:dd:2f:73:3f:2a:3c:93:66:
9c:eb:02:4a:12:70:c2:78:6e:11:35:89:f7:57:28:
79:65:1d:ca:94:bc:71:da:bb:85:26:64:55:92:83:
ce:72:17:69:c7:9d:92:07:b0:83:f9:e9:91:f4:01:
03:b0:ec:a2:b5:84:8e:44:ef:73:b5:7a:45:2d:a6:
6e:5e:07:1b:86:c5:cf:0d:61:f8:14:f1:dc:00:cf:
00:91:86:23:69:5c:e7:7f:cf:2b:18:0a:ca:c3:18:
b5:cd:b1:61:85:1a:f2:9a:25:46:f8:d0:73:44:d0:
27:aa:fd:80:6e:77:f2:d2:66:03:af:c6:c7:ed:7f:
3e:49:4f:3f:d5:49:e4:df:3a:ca:53:7a:74:ea:e4:
97:9a:fc:b5:57:b5:9d:2c:2e:ff:17:59:93:c8:f6:
1a:f6:ab:75:e7:e7:33:63:eb:54:dd:17:fb:d1:ba:
4c:21:e7:fa:03:93:be:69:db:4b:5d:29:11:4e:fa:
69:d4:3e:e8:b3:ef:f2:08:96:85:61:29:4f:98:73:
6b:ca:4f:df:0f:4f:6c:90:c5:f5:a3:52:bb:6b:80:
4b:85:d3:95:26:9a:e1:0c:20:b0:bc:d6:86:97:21:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:08:32:AA:68:BF:51:C8:96:D7:6B:22:25:DB:A0:57:0E:8B:77:E9
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/1wgyqmi_UciW12siJdugVw6Ld-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.112.0/24
Signature Algorithm: sha256WithRSAEncryption
84:8e:30:ca:3e:53:fb:3a:aa:05:40:e6:96:a7:89:e4:c0:a0:
5e:f7:09:a1:5e:45:d4:14:ef:0d:23:b5:a0:9f:21:04:91:b9:
98:03:f4:cf:29:d1:77:5f:33:7a:2c:8c:35:72:c2:54:1a:c5:
6e:5f:ce:46:de:e5:db:9f:4f:f6:4e:be:e7:10:62:8a:e9:15:
83:ce:9d:ba:0b:64:e7:da:2a:da:b9:11:c8:0f:ac:ce:3a:61:
df:00:8c:52:fb:b7:cd:a1:05:38:f1:37:44:bf:7d:84:91:86:
69:d4:4d:b6:1f:92:25:40:43:07:9d:8f:e6:99:34:e4:97:63:
b7:a7:74:36:8a:67:9b:e1:76:4b:cf:58:dc:6b:7e:c8:bd:31:
f5:bd:80:85:e3:17:7a:39:1f:a4:6b:38:ab:3c:b7:ff:67:a3:
77:0e:20:ba:b5:8e:fa:60:00:24:85:dd:cd:dd:2c:dc:24:b2:
02:5e:50:bf:32:38:f6:70:91:43:fe:9c:84:8e:ac:ca:71:e9:
4d:67:61:bc:95:03:04:bc:21:3a:9e:c1:0c:19:be:0f:38:37:
10:7c:a1:cb:2b:ef:32:c3:7c:6d:a7:f3:2b:a4:3e:b7:a2:97:
89:57:32:0c:b4:13:1b:31:36:2e:f9:bb:2c:2f:9d:a6:fc:f3:
ee:ec:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:50:41 2025 by rpki-client