Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wo_WEX4z4eD58ottrM0NklPIi9k.roa
File: wo_WEX4z4eD58ottrM0NklPIi9k.roa (raw, json)
Hash identifier: TnffIDpkJu55DaZS28z7FXclZicphCqEVHcDT1qOwlQ=
Subject key identifier: C2:8F:D6:11:7E:33:E1:E0:F9:F2:8B:6D:AC:CD:0D:92:53:C8:8B:D9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195B7FA027894B276FEC33D7B123C3D135E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wo_WEX4z4eD58ottrM0NklPIi9k.roa
Signing time: Fri 21 Mar 2025 09:12:49 +0000
ROA not before: Fri 21 Mar 2025 09:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 45.155.69.0/24 maxlen: 24
193.8.94.0/24 maxlen: 24
193.8.231.0/24 maxlen: 24
2a09:17c0:b19a::/48 maxlen: 48
2a09:17c7:fc3a::/48 maxlen: 48
2a0f:1200:d9::/48 maxlen: 48
2a0f:e1c0:3::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e200:5::/48 maxlen: 48
2a0f:e200:25f::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:e6c0:11c::/48 maxlen: 48
2a0f:e6c0:3af::/48 maxlen: 48
2a0f:e6c6:99::/48 maxlen: 48
2a0f:e7c7:fcd8::/48 maxlen: 48
2a0f:ea40:8::/48 maxlen: 48
2a0f:ea47:fc1d::/48 maxlen: 48
2a0f:ea47:ff49::/48 maxlen: 48
2a12:ecc0:3::/48 maxlen: 48
2a12:ecc0:4::/48 maxlen: 48
2a12:ecc0:66::/48 maxlen: 48
2a12:ecc0:188::/48 maxlen: 48
2a12:ecc0:316::/48 maxlen: 48
2a12:ecc0:34a::/48 maxlen: 48
2a13:18c6:44::/48 maxlen: 48
2a13:18c6:99::/48 maxlen: 48
2a13:8c82:2::/48 maxlen: 48
2a13:8c86:100::/48 maxlen: 48
2a13:8c86:140::/48 maxlen: 48
2a13:c900:22::/48 maxlen: 48
2a13:c900:66::/48 maxlen: 48
2a13:c900:110::/48 maxlen: 48
2a13:e102:2::/48 maxlen: 48
2a13:e107:77::/48 maxlen: 48
2a13:e107:29b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b7:fa:02:78:94:b2:76:fe:c3:3d:7b:12:3c:3d:13:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 21 09:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c28fd6117e33e1e0f9f28b6daccd0d9253c88bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:00:18:f5:40:d4:8b:13:b6:25:32:04:86:
dc:bf:01:9b:e4:8e:45:22:36:59:f9:8d:97:f1:29:
97:30:a0:0c:55:ed:f4:50:da:ec:36:50:cb:30:7f:
4d:a3:24:31:5d:2d:51:ba:48:52:8a:99:3a:3c:e4:
d1:c9:b6:27:fe:8d:89:c7:be:da:98:ec:a8:3e:da:
19:22:a9:20:e9:ed:f0:27:ed:bf:9c:6c:40:8a:97:
5d:ca:dd:e1:c2:09:fa:76:4d:a5:ac:60:7c:93:06:
d7:d1:9f:bd:ac:7d:ef:dd:1f:e2:51:44:d5:5e:5a:
ad:3d:4c:6a:31:d4:3d:3d:51:4e:24:c6:d3:46:ef:
e5:90:8d:7b:f7:97:97:23:34:3d:3e:d7:5c:1d:67:
61:17:d3:8f:5b:cc:cc:d8:80:68:dc:fa:99:bd:28:
2c:09:2f:b1:eb:1d:f7:99:43:86:b0:6d:57:58:77:
b3:24:33:d0:30:4d:5b:f9:0d:48:57:54:e2:9a:52:
b1:a5:c7:1f:43:6a:ab:26:1a:3d:cf:e2:78:a0:7b:
75:9b:f7:e4:fb:94:fe:c2:26:65:c4:97:ad:c5:2c:
0c:e4:bf:6e:01:6d:5b:fc:b2:ce:43:0b:e7:f9:6d:
0f:75:ea:b7:6b:1f:10:b1:29:c9:ef:21:75:45:58:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8F:D6:11:7E:33:E1:E0:F9:F2:8B:6D:AC:CD:0D:92:53:C8:8B:D9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wo_WEX4z4eD58ottrM0NklPIi9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.69.0/24
193.8.94.0/24
193.8.231.0/24
IPv6:
2a09:17c0:b19a::/48
2a09:17c7:fc3a::/48
2a0f:1200:d9::/48
2a0f:e1c0:3::/48
2a0f:e1c0:37a::/48
2a0f:e200:5::/48
2a0f:e200:25f::/48
2a0f:e207:fd38::/48
2a0f:e440::/29
2a0f:e6c0:11c::/48
2a0f:e6c0:3af::/48
2a0f:e6c6:99::/48
2a0f:e7c7:fcd8::/48
2a0f:ea40:8::/48
2a0f:ea47:fc1d::/48
2a0f:ea47:ff49::/48
2a12:ecc0:3::-2a12:ecc0:4:ffff:ffff:ffff:ffff:ffff
2a12:ecc0:66::/48
2a12:ecc0:188::/48
2a12:ecc0:316::/48
2a12:ecc0:34a::/48
2a13:18c6:44::/48
2a13:18c6:99::/48
2a13:8c82:2::/48
2a13:8c86:100::/48
2a13:8c86:140::/48
2a13:c900:22::/48
2a13:c900:66::/48
2a13:c900:110::/48
2a13:e102:2::/48
2a13:e107:77::/48
2a13:e107:29b::/48
Signature Algorithm: sha256WithRSAEncryption
ac:7a:e1:39:67:c1:5f:ca:8f:3b:fc:1a:5f:b9:7a:ef:35:00:
b8:b2:85:f1:07:3b:38:a5:da:38:e0:e9:f3:d5:c6:ef:41:b8:
12:c4:dc:0f:17:28:49:ec:c4:20:0a:34:31:fa:45:4a:07:67:
d8:d1:4a:b4:d4:42:9f:03:1e:c5:f3:69:7d:09:7e:14:9b:e1:
3d:ae:55:39:48:34:f7:ba:14:9e:12:59:56:89:41:c4:f7:d0:
60:e5:74:41:53:67:55:2e:06:5f:bd:02:86:4b:df:75:40:82:
71:fb:1e:97:38:59:1e:47:65:a8:9f:0f:36:6d:18:33:1b:cd:
84:ec:42:5c:16:a8:a9:70:42:c0:18:c1:73:d5:05:6f:78:88:
65:85:72:f0:33:8b:1e:7d:f9:92:6f:64:d2:df:a4:84:5c:9f:
14:11:72:f9:56:63:af:be:b5:e8:ff:2f:0a:fe:23:c9:88:44:
98:fb:e5:85:ac:c7:97:58:11:be:82:33:78:0f:57:4e:83:6a:
73:65:e4:d6:d9:4d:2c:00:25:59:82:df:dd:19:9b:b1:00:ca:
a7:4f:8d:f7:c0:10:42:6b:c0:77:fc:b8:5b:33:00:b0:c8:d8:
d8:f2:87:fc:2b:b9:56:69:5e:dd:9d:eb:c7:9a:e1:8f:fe:13:
a8:cb:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:05 2025 by rpki-client