Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/w0wAwCKFIqoAmbB301MrAM7vQ4M.roa
File: w0wAwCKFIqoAmbB301MrAM7vQ4M.roa (raw, json)
Hash identifier: 2yGF3Y9Vr7k2FqKTETKlWzM6DlGaxlS+0cuWig86hMw=
Subject key identifier: C3:4C:00:C0:22:85:22:AA:00:99:B0:77:D3:53:2B:00:CE:EF:43:83
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01948F87740B34E2540C41D83E6CF7ED9D0D
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/w0wAwCKFIqoAmbB301MrAM7vQ4M.roa
Signing time: Wed 22 Jan 2025 19:40:06 +0000
ROA not before: Wed 22 Jan 2025 19:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.220.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:87:74:0b:34:e2:54:0c:41:d8:3e:6c:f7:ed:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 22 19:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c34c00c0228522aa0099b077d3532b00ceef4383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:e6:ec:d9:20:3e:76:90:53:e9:80:54:99:
5a:f1:59:ba:dc:86:80:e0:b3:04:46:5d:ea:f5:3c:
fe:f9:96:81:a7:71:c1:35:ee:fc:a6:74:ae:94:dd:
34:28:81:d7:d0:9a:d5:c3:01:28:de:94:1d:0c:38:
ce:db:19:c0:9b:1f:9f:2c:9d:9d:7a:5d:a4:81:72:
40:65:98:1f:1e:db:8e:54:eb:99:4a:79:fa:05:ea:
b1:72:55:1a:83:af:1a:8c:56:7e:10:dd:e5:e0:c9:
1a:75:1d:01:65:27:b0:c8:4d:9a:fc:6e:af:74:c2:
f2:6b:9e:88:a7:26:4b:84:bf:54:2b:87:8d:cb:53:
11:58:6d:19:1f:c1:5d:19:59:cc:ac:0e:00:b4:41:
68:8c:88:6d:83:78:11:c1:cb:f2:5b:cd:2b:36:fb:
57:7b:db:a0:44:8b:e7:91:8e:bd:6b:cf:ec:cb:b7:
93:9a:4b:0f:d7:98:5d:82:b4:ed:46:f9:42:55:8b:
63:43:41:97:53:63:80:36:4f:e2:87:e4:64:fb:13:
ea:b4:70:7a:d4:51:7e:bb:0d:fe:6b:f2:4c:b4:36:
f2:90:89:66:fe:38:7d:cd:30:53:c1:e9:e4:dd:60:
3e:23:34:48:f7:29:67:78:8a:c0:7e:c4:93:59:c3:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4C:00:C0:22:85:22:AA:00:99:B0:77:D3:53:2B:00:CE:EF:43:83
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/w0wAwCKFIqoAmbB301MrAM7vQ4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.146.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:02:9d:c1:a4:1b:44:d0:ae:67:47:7a:d1:a5:9a:42:23:dd:
fa:f3:63:26:42:32:75:c3:b4:5f:a1:72:90:44:32:c0:b6:3e:
33:0a:9e:03:7b:7c:0b:4e:b2:59:13:11:1d:84:0b:60:83:28:
ab:3b:5c:88:e9:d6:df:f4:3c:fd:1b:3c:2a:04:9a:bf:da:47:
8d:8f:6d:3d:db:ef:48:ed:82:f3:fe:26:41:da:a7:12:4a:97:
0c:b6:ef:6e:1c:b1:52:21:c8:65:ec:41:c3:38:25:21:e4:91:
b1:d1:df:ea:d4:0a:f2:de:8b:f9:39:ae:c5:8c:3f:87:d1:0c:
13:c5:bb:ec:7b:54:23:b8:84:47:63:b7:ba:ad:30:41:b3:cb:
68:ea:e5:97:92:bc:78:20:4f:60:fa:79:cb:23:aa:a7:c2:89:
8a:12:67:5f:8e:bf:81:ee:a8:cf:c5:16:7c:6c:5c:47:6f:a5:
bb:ae:94:2a:9f:c7:69:48:d0:46:a4:c4:55:f6:22:34:5a:5c:
ef:27:ff:42:bb:4c:42:48:4e:a4:5a:ba:ca:59:81:89:9c:26:
3b:c3:fb:51:b6:b1:70:66:0a:8b:ec:ee:ea:3d:d6:6c:47:1b:
90:dc:73:13:d1:91:b6:07:57:07:0e:51:32:9a:8b:80:b2:b4:
d3:23:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:17:22 2025 by rpki-client