Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/WbWclEjJKi9mR3DryK5x-S3Xkl0.roa
File: WbWclEjJKi9mR3DryK5x-S3Xkl0.roa (raw, json)
Hash identifier: 1eFaQNtQW2m0UTZGPNrJUkahNCdOhwXNsr6+Ov6pcN0=
Subject key identifier: 59:B5:9C:94:48:C9:2A:2F:66:47:70:EB:C8:AE:71:F9:2D:D7:92:5D
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0194228DEFCD7C072AB3771AB601B70A1200
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/WbWclEjJKi9mR3DryK5x-S3Xkl0.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60077
IP address blocks: 78.110.112.0/21 maxlen: 32
78.110.112.0/22 maxlen: 32
78.110.116.0/22 maxlen: 32
85.198.8.0/21 maxlen: 32
85.198.8.0/22 maxlen: 32
85.198.12.0/22 maxlen: 32
85.198.16.0/21 maxlen: 32
85.198.16.0/22 maxlen: 32
85.198.16.0/23 maxlen: 32
85.198.18.0/23 maxlen: 32
85.198.20.0/22 maxlen: 32
193.151.128.0/19 maxlen: 32
193.151.128.0/20 maxlen: 32
193.151.128.0/22 maxlen: 32
193.151.132.0/22 maxlen: 32
193.151.136.0/22 maxlen: 32
193.151.140.0/22 maxlen: 32
193.151.144.0/20 maxlen: 32
193.151.144.0/21 maxlen: 32
193.151.144.0/22 maxlen: 32
193.151.148.0/22 maxlen: 32
193.151.152.0/22 maxlen: 32
193.151.156.0/23 maxlen: 32
193.151.156.0/24 maxlen: 32
193.151.157.0/24 maxlen: 32
193.151.158.0/24 maxlen: 32
193.151.159.0/24 maxlen: 32
2a05:1a30::/34 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ef:cd:7c:07:2a:b3:77:1a:b6:01:b7:0a:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59b59c9448c92a2f664770ebc8ae71f92dd7925d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:52:d6:6d:b2:4e:65:7f:3d:9e:f2:0d:6f:
3c:6f:10:a4:f8:40:50:83:e9:cb:02:4e:d4:56:97:
24:c9:fe:23:44:e9:eb:d0:41:37:03:77:25:c3:a6:
cf:41:63:fe:af:15:c3:5b:2b:55:93:65:a2:50:b0:
4c:84:14:c3:36:e7:68:86:ab:a2:95:51:27:ab:53:
b9:4f:5a:73:a8:11:5d:14:85:2b:6c:a4:f4:a7:46:
c2:36:cf:3f:9a:7e:fe:2d:e4:63:e3:89:02:db:80:
62:cc:ab:2a:86:5b:67:59:01:e4:ee:be:4d:d9:ca:
32:10:7f:7c:96:85:c3:73:84:52:00:0f:18:2a:b9:
3f:c4:5d:d4:88:d2:38:53:7b:08:1a:eb:b7:64:68:
46:92:0a:07:2d:ca:f4:f5:46:a8:ea:5c:54:57:93:
dd:49:dd:a6:f6:f9:bb:d1:61:26:04:ae:f9:9d:85:
53:7d:c7:90:d8:2b:c0:4d:40:a7:32:64:b3:f1:1a:
e1:4e:2f:42:e8:98:65:88:a2:57:4c:33:68:aa:e0:
09:62:11:10:2d:b4:9a:45:09:f0:67:96:c2:2f:11:
8e:b7:5b:5f:3d:75:4c:97:fd:20:78:27:d7:d0:b4:
87:86:31:f1:4b:f2:d3:df:9f:47:2a:5e:df:f5:c2:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B5:9C:94:48:C9:2A:2F:66:47:70:EB:C8:AE:71:F9:2D:D7:92:5D
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/WbWclEjJKi9mR3DryK5x-S3Xkl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.112.0/21
85.198.8.0-85.198.23.255
193.151.128.0/19
IPv6:
2a05:1a30::/34
Signature Algorithm: sha256WithRSAEncryption
66:fa:6e:fa:1b:65:a5:3f:28:ae:ad:7f:52:f4:ea:1a:8e:76:
07:bf:42:1a:7d:c6:bf:a0:24:0d:af:8b:62:72:e7:e6:a0:ac:
af:ac:bf:c0:2d:75:7a:7e:f1:b5:42:c7:ab:f3:d6:2c:76:fe:
3a:6c:e0:15:b3:38:6e:63:68:4f:15:d9:48:65:f8:f9:51:50:
ce:24:d5:54:77:72:fc:4e:0e:b2:82:d6:67:b5:b5:9a:23:33:
31:a7:6a:2e:a4:e9:97:6c:bc:c8:c9:6f:38:d8:b2:4f:c1:ad:
6f:2b:d4:86:ee:0e:68:96:45:80:33:d4:fe:3e:57:b8:3f:4d:
41:46:96:48:35:94:e8:93:94:9b:34:54:31:b7:9c:1a:17:84:
30:db:07:ff:5b:f1:cf:c4:6b:6b:c4:6f:21:fd:0c:1f:60:5c:
24:9f:8a:b0:ba:6c:97:a5:d0:3c:a2:84:a3:c2:f2:b9:7b:92:
63:85:33:04:b1:3b:9d:9e:0e:f3:14:44:a0:78:e7:1a:01:07:
d6:d6:a9:eb:36:13:37:29:c5:ec:dc:63:bb:b0:4b:e8:56:6d:
da:b1:26:8e:e1:fd:b5:d1:ec:fa:02:fc:b1:58:2d:66:33:98:
4c:a1:d3:39:5b:da:a6:b8:c0:a8:ce:5c:bc:2c:68:79:d4:60:
e2:18:d8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:05:18 2025 by rpki-client