Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa
File: W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa (raw, json)
Hash identifier: Mzqyt+0iiHuJ8ffJgOXtkPZgAbIE5kucHWjmbNGM61Q=
Subject key identifier: 5B:B2:F2:D5:08:7B:4C:01:7D:50:2E:51:CA:E7:BC:E7:F5:D0:B9:7C
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 0194252238B4A7D53FE943DB26B35CD87680
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 31.200.128.0/18 maxlen: 24
62.40.32.0/19 maxlen: 24
80.233.0.0/17 maxlen: 24
83.136.40.0/21 maxlen: 24
89.204.160.0/19 maxlen: 24
89.204.192.0/18 maxlen: 24
92.251.128.0/17 maxlen: 24
92.251.240.0/21 maxlen: 24
95.83.192.0/18 maxlen: 24
95.83.196.0/22 maxlen: 24
95.83.196.0/23 maxlen: 24
95.83.229.0/24 maxlen: 24
178.167.128.0/17 maxlen: 24
185.60.124.0/22 maxlen: 24
213.191.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:38:b4:a7:d5:3f:e9:43:db:26:b3:5c:d8:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bb2f2d5087b4c017d502e51cae7bce7f5d0b97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:50:98:13:99:98:24:7e:42:38:5a:9f:05:
d0:26:32:8b:94:f7:96:95:72:cd:6c:a0:cd:04:ca:
65:b4:07:6d:03:b6:2b:1f:d8:f1:21:3a:6f:de:36:
46:e3:5b:76:2f:51:8e:b3:24:f9:a2:71:99:9e:98:
02:4b:f5:65:82:67:bf:5f:a1:32:a2:05:be:f3:c8:
da:2e:41:8e:15:5e:2d:4b:fc:fa:29:b2:e6:8c:4d:
7e:9c:4e:df:5b:5f:db:c2:63:3d:ea:d3:0e:ec:e6:
f5:74:87:02:1d:51:12:03:37:b7:8f:84:fe:59:17:
90:dc:fa:33:b4:cd:f0:a0:5b:5e:de:3e:54:26:b2:
d2:40:61:8c:0c:d7:4d:23:91:a1:54:95:0a:24:39:
ac:14:ff:f8:1c:08:78:9e:23:2a:85:8c:da:d5:0c:
fd:9a:e3:9f:82:30:55:1b:ce:e7:2b:c0:fa:62:14:
a2:84:c7:c5:6c:97:88:6c:fb:ea:f7:b3:18:40:38:
6e:81:f6:be:c3:58:03:4b:c9:8a:b6:27:0c:b9:c5:
3c:75:ef:7c:6b:bb:86:c8:43:a3:b8:58:43:7d:e8:
04:35:74:ba:30:e4:82:08:7d:d4:b0:a9:dc:7d:6c:
bf:6b:16:7e:22:53:46:e9:6c:b4:2e:ee:6b:11:c0:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B2:F2:D5:08:7B:4C:01:7D:50:2E:51:CA:E7:BC:E7:F5:D0:B9:7C
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.128.0/18
62.40.32.0/19
80.233.0.0/17
83.136.40.0/21
89.204.160.0-89.204.255.255
92.251.128.0/17
95.83.192.0/18
178.167.128.0/17
185.60.124.0/22
213.191.224.0/19
Signature Algorithm: sha256WithRSAEncryption
b3:91:72:83:e0:d1:1f:cc:04:49:70:e2:1b:63:fb:e6:65:03:
59:2f:49:ee:4e:b6:51:32:7e:33:71:7c:ba:4e:23:c2:32:b2:
e1:69:e6:19:67:96:f7:88:2f:67:dc:2d:fa:65:38:69:2b:f4:
7a:61:7f:8b:82:3b:c7:ce:92:fe:d0:3a:b3:fd:56:ba:af:fd:
ce:3b:2a:d7:c6:d6:7f:05:1f:51:86:4a:82:00:fa:6d:18:86:
b6:d4:fc:7d:16:1e:3c:c4:9f:26:9e:46:1f:bd:02:21:79:6e:
2e:e9:29:b7:f9:c0:20:02:93:6f:c0:08:63:e4:c1:53:70:ec:
8a:9a:8f:c2:8c:e0:7d:30:82:c2:8c:af:b5:6b:9b:70:23:cd:
68:9a:2e:53:0f:de:fc:3d:4b:ab:f9:aa:18:eb:2c:52:63:be:
37:f8:cb:42:b9:98:65:cb:7b:00:40:8a:07:b1:86:8c:2d:d5:
79:18:68:dd:32:b8:ae:c5:7e:94:de:77:45:70:e3:66:80:4a:
38:48:ef:30:31:17:e1:ca:a1:96:30:4d:87:24:90:ec:89:ee:
50:fc:f0:9c:4e:a1:b1:65:30:bb:c0:2e:8b:b7:3a:d8:36:9c:
64:10:f1:42:81:1f:ba:13:8a:82:0f:66:a2:8d:0f:3e:04:cc:
b5:31:f3:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:57:53 2025 by rpki-client