Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/wnex2LpnDh2tDYAOL_JlA2jqYbg.roa
File: wnex2LpnDh2tDYAOL_JlA2jqYbg.roa (raw, json)
Hash identifier: jkFPmngwGBf/VR9fqzS0+q+xo9EQNuNbpIxHsY+rxw0=
Subject key identifier: C2:77:B1:D8:BA:67:0E:1D:AD:0D:80:0E:2F:F2:65:03:68:EA:61:B8
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 01942369A38C89EA2D47DF53BA0E99A7A671
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/wnex2LpnDh2tDYAOL_JlA2jqYbg.roa
Signing time: Wed 01 Jan 2025 19:48:33 +0000
ROA not before: Wed 01 Jan 2025 19:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30882
IP address blocks: 79.171.240.0/24 maxlen: 24
79.171.241.0/24 maxlen: 24
79.171.242.0/24 maxlen: 24
79.171.243.0/24 maxlen: 24
79.171.244.0/24 maxlen: 24
79.171.245.0/24 maxlen: 24
79.171.246.0/23 maxlen: 23
79.171.246.0/24 maxlen: 24
79.171.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a3:8c:89:ea:2d:47:df:53:ba:0e:99:a7:a6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Jan 1 19:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c277b1d8ba670e1dad0d800e2ff2650368ea61b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:37:d9:fc:46:fe:74:a2:06:bd:14:e8:c4:
05:f0:27:22:46:75:5c:76:6d:a9:fa:53:8a:c5:a3:
7c:78:34:f0:05:d4:62:1a:5d:10:9f:c0:99:05:a8:
5f:44:9c:cd:f7:18:3c:c1:a4:7f:17:67:3e:25:c6:
bb:c1:f5:6c:6d:f1:7c:28:aa:89:58:cf:54:6e:46:
f7:45:a9:ab:ca:99:d4:a5:af:be:8b:c5:63:e9:50:
e6:fc:9c:cf:48:76:3e:ae:16:02:4d:ac:1f:04:ed:
02:16:42:e1:b8:0a:db:83:5b:9b:dc:8e:f1:52:e9:
4a:c7:4b:0b:b5:1a:6a:ff:26:91:56:79:a3:3e:73:
b9:bb:68:ce:5f:98:1e:b8:06:8b:79:11:10:cf:08:
f5:c4:fe:2d:c9:f0:19:cd:d7:86:8f:ed:b8:5b:2a:
24:9f:5e:4e:34:8f:99:a0:e8:aa:19:ef:f7:f0:47:
06:7d:c7:df:ee:fa:be:e8:81:cd:a2:58:8a:3e:fa:
a9:88:b6:ea:1d:17:2e:99:ba:94:a7:8f:a8:27:9e:
7f:7c:b1:85:8e:60:57:d3:b4:33:39:e1:c8:98:c6:
ca:0d:3b:38:b1:a2:8c:e7:40:24:03:31:5f:19:48:
76:2f:b5:98:14:e3:c4:aa:fd:00:3b:a8:e2:fc:db:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:77:B1:D8:BA:67:0E:1D:AD:0D:80:0E:2F:F2:65:03:68:EA:61:B8
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/wnex2LpnDh2tDYAOL_JlA2jqYbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.240.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:2d:47:a0:0e:c2:1c:3d:b9:e2:54:a5:bb:3f:bb:ec:1b:e0:
1c:19:25:7b:81:4c:56:cd:30:50:f4:8a:02:cf:a7:05:03:7e:
3f:23:88:eb:73:0c:ba:ce:b8:d6:eb:af:3c:fa:78:a4:0e:a8:
c1:5b:73:a7:a6:6a:d7:35:24:40:17:7d:5e:3a:b5:23:6b:52:
cc:01:55:4a:23:d7:92:aa:08:9b:9f:6b:0a:9c:01:2a:df:c7:
17:5b:bc:e1:10:a8:6a:2b:f5:f9:ee:af:f8:55:5d:ec:43:1b:
12:92:97:42:f9:dd:d3:76:cc:2f:e4:27:b4:b9:fb:87:1c:20:
ab:67:b1:4c:e7:e0:ef:b3:f2:c9:0e:92:8e:a8:14:e4:8b:57:
8d:09:90:cb:f3:64:c6:fb:38:84:d6:eb:67:56:37:0a:e2:aa:
eb:00:05:22:8e:e6:e3:0e:d7:34:d4:e7:d8:34:b9:5c:96:cc:
9f:5b:84:02:57:b9:49:1d:bb:4b:ae:09:f3:c9:08:08:5e:8c:
f8:8a:ae:01:b3:54:e9:d2:28:40:cf:47:da:4c:01:1b:c7:96:
09:90:ac:5d:fe:d8:3c:e8:96:e2:0d:e3:23:ed:07:b8:0f:dc:
be:d3:b3:87:59:d3:23:db:1c:ad:63:7c:38:69:d4:af:79:70:
4c:8d:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:11:15 2025 by rpki-client