Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/WKhjscqZWdN-nuM8dfIBcstyH14.roa
File: WKhjscqZWdN-nuM8dfIBcstyH14.roa (raw, json)
Hash identifier: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=
Subject key identifier: 58:A8:63:B1:CA:99:59:D3:7E:9E:E3:3C:75:F2:01:72:CB:72:1F:5E
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 0194266BEB57575859D16D534D3016BF3C81
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/WKhjscqZWdN-nuM8dfIBcstyH14.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2.255.190.0/24 maxlen: 24
2.255.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:eb:57:57:58:59:d1:6d:53:4d:30:16:bf:3c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58a863b1ca9959d37e9ee33c75f20172cb721f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:97:77:e1:56:54:76:5b:41:c8:18:c5:41:
c2:c6:58:fb:3d:0c:67:b2:05:e0:d3:33:09:17:ad:
9a:ce:10:db:76:b6:f5:59:f2:41:2f:62:00:36:cc:
d4:da:a1:a7:b2:bf:35:24:19:ea:3e:24:c6:49:ae:
1a:6a:ea:62:b9:79:5d:74:74:71:b1:16:f3:c2:c3:
a7:5d:95:04:bf:f5:c8:60:c3:73:79:c2:ac:ff:3c:
b7:7b:34:c3:1f:0e:8a:36:be:8e:7a:d0:b9:35:a7:
9f:a5:b9:be:42:28:f3:bd:f1:f8:0c:92:c4:c8:17:
88:5b:d8:3f:4a:44:a7:fb:bd:4a:2c:4b:32:db:ca:
c9:8c:06:33:1d:de:f4:43:17:20:af:bb:df:89:26:
8d:bb:f4:6e:e0:dc:b9:d6:05:87:77:60:74:d6:56:
9d:6f:4e:32:f5:4b:1b:99:4a:0c:53:9e:31:79:1b:
2b:64:06:85:76:c9:7b:4a:c3:48:3f:55:1f:1b:a0:
17:fe:c2:79:8b:94:a4:b5:0b:50:6f:23:a1:da:df:
6b:85:c4:f6:3a:24:68:73:49:1f:07:62:a4:a4:58:
79:c8:ec:a1:74:f8:86:00:ef:16:a6:a0:e7:74:3f:
fe:76:47:0d:ac:10:df:eb:7d:1d:e2:9f:89:6c:55:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A8:63:B1:CA:99:59:D3:7E:9E:E3:3C:75:F2:01:72:CB:72:1F:5E
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/WKhjscqZWdN-nuM8dfIBcstyH14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.255.190.0/23
Signature Algorithm: sha256WithRSAEncryption
37:41:f5:d4:56:4a:7c:89:85:1f:22:a1:d2:bf:48:60:6a:07:
5f:91:69:2f:be:e2:ff:fa:04:ba:14:69:97:3b:1f:be:2d:0b:
ea:49:ad:59:26:3a:36:6d:97:1d:3b:23:74:9a:1b:d3:d9:2f:
9c:36:c9:fc:9a:b4:39:1b:64:4c:51:cb:17:1a:ed:5b:20:82:
66:b6:57:58:c2:cc:20:14:63:c7:d6:e6:5b:66:82:cc:b4:ff:
8e:eb:38:67:2b:56:ef:82:a1:16:e3:db:97:6b:b0:0d:f9:55:
1e:14:d4:52:20:b1:30:17:a8:51:d0:6a:9c:1a:17:6f:5b:0d:
d0:5f:5c:b8:ce:93:71:1a:ea:d3:03:91:f5:d8:a1:b8:a9:3d:
90:f0:6f:4c:f4:62:fb:5a:ac:f6:bf:88:83:bc:63:c6:3a:2e:
ce:7b:7a:79:c2:b0:f6:dd:dc:a3:f6:09:e9:77:1c:8f:75:29:
7c:17:10:c5:60:b3:20:83:46:93:58:4b:ee:4b:d9:73:0e:3f:
32:4c:85:03:25:c9:98:90:ee:5f:85:4d:20:df:36:02:8a:01:
ff:1a:d8:9f:ec:3d:3e:b2:f4:71:c7:94:07:15:20:e1:ef:1f:
2a:f9:9c:28:6d:a7:ea:8a:b2:75:37:5a:f2:37:18:6d:a8:55:
ad:3f:2a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:36 2025 by rpki-client