Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/waH8IAWJobQ6L7bUqgkK53xCTeE.roa
File: waH8IAWJobQ6L7bUqgkK53xCTeE.roa (raw, json)
Hash identifier: IS59tVTgKEwjNEPfGzSx0NT3W+pFMJKHN/r+n7/7nW4=
Subject key identifier: C1:A1:FC:20:05:89:A1:B4:3A:2F:B6:D4:AA:09:0A:E7:7C:42:4D:E1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0196FC4AAED92DF69DB2931F65075E5BC992
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/waH8IAWJobQ6L7bUqgkK53xCTeE.roa
Signing time: Fri 23 May 2025 08:37:54 +0000
ROA not before: Fri 23 May 2025 08:37:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153393
IP address blocks: 92.118.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:4a:ae:d9:2d:f6:9d:b2:93:1f:65:07:5e:5b:c9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 23 08:37:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1a1fc200589a1b43a2fb6d4aa090ae77c424de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:79:a4:8c:c4:e8:0c:d4:64:d7:de:73:84:
71:19:1d:9c:1b:14:9f:67:03:45:53:f2:5a:43:14:
47:86:3d:be:f3:dc:29:a6:89:27:1f:f8:66:eb:bf:
0f:e4:6c:80:2f:8b:00:56:22:bf:03:42:0c:3f:68:
a0:cb:a0:b5:23:f0:2a:5c:51:36:33:51:09:69:66:
68:95:bf:2a:ee:83:b2:b9:8a:23:f0:0b:04:31:5f:
5e:5c:84:18:24:64:e8:1d:e9:bc:cf:7f:f1:6b:4f:
fc:b9:ab:0f:83:15:b4:d0:e5:c6:cb:30:e2:59:06:
0f:58:30:17:1b:60:e4:bb:aa:5e:48:cf:96:82:25:
52:b5:15:32:03:74:b9:f4:ea:bc:c3:09:ce:e7:40:
7d:14:68:12:b0:7e:b8:a0:72:cd:16:68:58:7e:97:
a3:65:ef:eb:4f:07:a4:74:c5:b6:81:48:93:14:0f:
0e:93:87:cb:45:f0:cb:ce:e1:e5:e9:2b:33:77:82:
68:5a:a3:af:65:db:56:62:da:36:22:cb:39:9b:8b:
46:89:b1:fc:95:19:55:09:8c:20:e1:38:51:77:8e:
31:e7:eb:5a:58:b6:ea:da:b4:81:9d:e7:26:7e:0e:
cd:22:c0:3c:f0:08:0c:d1:46:ea:fe:cf:50:07:fa:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A1:FC:20:05:89:A1:B4:3A:2F:B6:D4:AA:09:0A:E7:7C:42:4D:E1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/waH8IAWJobQ6L7bUqgkK53xCTeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.235.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ff:fd:a4:65:c2:38:18:0e:69:36:bf:23:cf:11:8d:d1:30:
b9:e8:2f:68:15:ac:7a:45:14:ec:89:12:1d:3d:fe:f7:1e:5a:
dc:2e:29:c5:2e:97:2b:fc:83:de:a0:34:40:0c:56:6a:cf:4e:
16:fb:89:5d:e2:34:a8:9c:26:44:58:85:12:72:67:ee:fb:89:
6a:e3:85:f6:2a:be:0a:8f:c1:c1:99:73:17:9e:9a:da:06:d5:
e1:ee:ff:6b:20:c0:dd:72:cd:c4:b8:66:3d:c7:fb:bd:1d:ec:
44:79:d8:67:0c:39:1b:1c:ff:a9:b1:01:21:ff:25:0c:ad:3d:
14:15:b6:fd:2a:39:8b:61:e1:52:dc:3c:5a:14:e7:f9:72:74:
92:5a:b4:7f:39:ad:b2:e4:08:65:ee:af:ac:19:cc:e2:05:c8:
3c:5c:4c:fc:90:bb:78:5d:46:2a:66:d2:04:15:c2:05:e6:41:
7c:71:49:17:75:83:e4:dc:4f:93:6c:a5:11:41:57:94:33:b8:
3f:48:31:7a:32:10:47:f7:fb:09:bc:42:a8:db:ed:ed:37:fe:
99:0d:5f:1d:4e:b6:e6:25:4e:e8:a1:91:4c:8b:fd:e9:98:c3:
b3:2f:80:9b:41:5a:27:85:4d:e0:0d:97:fe:dc:4b:0d:0a:ab:
be:39:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:10:20 2025 by rpki-client