Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/wnDq4aU8tb7aq27_f9IUURhtXDk.roa
File: wnDq4aU8tb7aq27_f9IUURhtXDk.roa (raw, json)
Hash identifier: 4ostqPF2d75Oo6YbzK9Ave4fsZaiDfJ9hZP1VHlKv4Y=
Subject key identifier: C2:70:EA:E1:A5:3C:B5:BE:DA:AB:6E:FF:7F:D2:14:51:18:6D:5C:39
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B239EE27C310449854858A0A27E3C7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/wnDq4aU8tb7aq27_f9IUURhtXDk.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47913
IP address blocks: 31.12.92.0/22 maxlen: 24
45.83.116.0/22 maxlen: 24
45.88.148.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
45.92.124.0/22 maxlen: 24
92.119.40.0/22 maxlen: 24
141.98.132.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
194.33.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:39:ee:27:c3:10:44:98:54:85:8a:0a:27:e3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c270eae1a53cb5bedaab6eff7fd21451186d5c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:b8:e2:9c:85:ac:5c:99:ed:4f:1d:d3:cc:
99:0d:01:9f:a8:ab:08:14:29:6e:e8:f1:57:4c:ed:
a5:f6:3c:ac:19:cc:b3:a5:ce:69:5f:75:61:d6:a2:
92:db:1b:c5:44:c9:7d:d4:85:4a:67:25:98:85:28:
d4:ea:15:07:b9:df:bd:8b:f4:f7:13:30:77:88:b4:
7d:f1:bc:93:f6:de:c8:03:ef:2a:3a:f2:8c:6a:e1:
b9:51:13:d5:45:36:dc:10:f2:79:d1:95:55:2c:7e:
a1:a4:4b:21:32:f4:d7:76:f0:8c:64:a4:8e:6e:68:
aa:e2:61:dc:16:a6:fe:42:d0:43:00:18:b6:39:83:
b6:f1:8b:f7:6c:5d:33:97:f8:d1:43:df:f6:2f:e6:
13:c1:66:35:c4:4a:68:92:d4:d2:8a:db:61:eb:30:
9e:8a:17:ac:6a:2a:2a:9e:b2:61:4d:4d:5d:73:b9:
b3:2c:b8:bd:62:2a:2f:27:19:69:75:f4:f7:66:22:
c0:92:31:1e:a4:ea:f0:6e:f2:1a:eb:d0:b1:ad:11:
1b:d0:23:7a:a1:2c:b2:e8:93:77:ea:2a:56:11:11:
05:c1:c5:ea:2b:e0:48:30:30:24:96:45:45:47:e5:
20:89:4d:e8:b5:7f:55:ac:d8:a3:57:1c:90:c8:76:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:70:EA:E1:A5:3C:B5:BE:DA:AB:6E:FF:7F:D2:14:51:18:6D:5C:39
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/wnDq4aU8tb7aq27_f9IUURhtXDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.92.0/22
45.83.116.0/22
45.88.148.0/22
45.89.100.0/22
45.92.124.0/22
92.119.40.0/22
141.98.132.0/22
185.149.20.0/22
185.166.160.0/22
194.33.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:97:af:28:fb:f2:96:9e:6b:c9:2c:07:28:65:b3:99:70:b1:
da:d8:f2:7f:51:62:22:c7:4d:6a:22:ef:55:21:75:b4:89:b5:
e1:3a:d9:bf:2d:1a:b9:8b:f6:f6:99:15:67:21:a7:9c:89:7a:
f0:f5:7b:ac:6b:21:30:34:27:62:71:50:12:ef:4b:99:f3:ed:
72:29:27:f7:de:f1:cb:21:28:f1:50:05:ca:2e:99:4c:2b:28:
99:e2:5e:74:09:a6:0e:c8:f8:a3:1e:16:70:c1:f7:54:a1:ca:
d2:f9:81:e5:94:11:9f:6b:ba:24:e0:ed:d2:38:c1:3f:23:09:
d2:4a:5e:45:23:dc:5d:bc:b8:24:d3:c5:04:b4:0d:1c:94:ae:
74:9e:83:f8:b0:f8:b5:f1:ba:a0:d9:91:fc:83:11:b0:3e:c1:
7d:1a:80:48:0b:31:80:c5:9d:18:01:f6:66:03:fa:db:54:89:
53:fd:dc:f3:f3:6a:5d:9c:c9:dc:2b:7c:d9:f6:8c:aa:e8:6a:
c6:82:f6:34:65:67:40:79:84:16:38:a3:9e:72:c0:98:de:ff:
2c:94:e0:4d:1e:99:bd:91:b3:7e:15:01:e8:d5:cb:a1:a7:54:
7c:55:7a:8f:df:7a:bd:1b:59:6e:53:03:54:40:fc:6c:a8:95:
5a:6f:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:13:08 2025 by rpki-client