Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/wn3IojBdCy5Wl_2EBruQi7YNS44.roa
File: wn3IojBdCy5Wl_2EBruQi7YNS44.roa (raw, json)
Hash identifier: 1KdRgMRZAJuO8z+H0eUMB9aA/0ER0ehetz8BXxZxUoU=
Subject key identifier: C2:7D:C8:A2:30:5D:0B:2E:56:97:FD:84:06:BB:90:8B:B6:0D:4B:8E
Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial: 0194214423CDCE9C7B6298F98276A52CB7FB
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/wn3IojBdCy5Wl_2EBruQi7YNS44.roa
Signing time: Wed 01 Jan 2025 09:48:21 +0000
ROA not before: Wed 01 Jan 2025 09:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60044
IP address blocks: 185.57.216.0/22 maxlen: 24
2a04:dec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:23:cd:ce:9c:7b:62:98:f9:82:76:a5:2c:b7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
Validity
Not Before: Jan 1 09:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c27dc8a2305d0b2e5697fd8406bb908bb60d4b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:aa:ea:f0:0f:1b:dd:af:45:96:f7:db:04:
cc:df:19:45:0b:40:57:32:94:25:e5:e0:57:9a:85:
28:a8:7b:82:42:30:7a:e7:87:8c:72:c0:47:a6:22:
2f:0b:fa:7f:d2:21:4a:37:f6:77:0b:c8:1d:35:f9:
f4:02:61:4b:63:1b:12:aa:ea:53:f3:1e:71:5b:cc:
a7:f2:90:1f:2b:bb:ab:89:84:32:f4:9e:2e:e9:c6:
4d:a2:bb:b7:3e:71:97:09:a6:df:61:d3:16:3a:39:
91:71:a2:fd:d4:e6:06:cd:f9:e6:fe:67:96:42:6c:
37:2a:34:02:49:73:a7:36:81:02:22:9a:80:60:2a:
32:92:18:35:80:62:08:35:02:e6:61:e0:c2:bf:0b:
6f:b1:e0:b6:19:6b:36:3c:23:a8:c2:db:d8:9a:d4:
97:19:79:79:13:34:cd:49:af:8f:cb:7b:5b:03:4c:
8b:23:de:8a:b0:e3:dc:bb:3f:e8:91:a2:72:6f:0b:
da:22:56:b1:26:be:9d:e1:82:76:06:38:7c:b5:87:
15:60:01:d2:3e:c3:8d:63:11:65:5c:32:b9:8d:48:
11:95:c6:f0:01:da:f3:8a:c0:b3:99:7c:60:5d:fb:
15:0c:69:8b:cd:e8:32:07:df:d4:a0:b0:35:a0:de:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7D:C8:A2:30:5D:0B:2E:56:97:FD:84:06:BB:90:8B:B6:0D:4B:8E
X509v3 Authority Key Identifier:
keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/wn3IojBdCy5Wl_2EBruQi7YNS44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.216.0/22
IPv6:
2a04:dec0::/29
Signature Algorithm: sha256WithRSAEncryption
73:1a:b8:1c:f6:7d:34:26:40:6b:40:a1:6a:ea:c7:f6:d5:ec:
d3:18:c6:e6:54:83:bd:88:94:8a:fc:6f:1f:a1:eb:8a:1b:e2:
a2:4d:2a:c8:98:c9:3f:a9:59:48:76:5f:a3:98:74:7f:93:9b:
83:fa:e4:27:2f:4d:4a:82:a8:99:0e:9f:80:a6:3a:fd:12:11:
95:a5:62:d2:2b:34:13:ea:6a:09:08:59:2b:4c:a2:93:2c:dd:
cd:ed:b8:b0:32:6b:e9:79:2b:c6:33:2e:b1:95:4c:0c:ec:5a:
df:46:51:c2:bc:f1:55:98:28:d0:da:d7:05:a4:64:98:69:5e:
75:29:40:ec:93:d8:1d:5f:3f:dd:51:c4:e3:c3:d4:8d:57:48:
26:55:10:f1:db:e8:b0:cb:0d:5d:28:5f:26:eb:6e:8e:9e:9c:
97:75:a5:d0:52:86:30:73:11:ee:01:16:39:b3:d6:b2:30:e9:
bd:6b:b9:6b:f8:98:8c:50:6e:b4:2e:fc:e3:4f:25:47:a4:7c:
66:3c:0c:1b:15:55:e2:df:27:28:ba:a6:c7:01:32:5f:4f:34:
cb:77:83:17:2e:91:1a:54:c9:8e:94:4b:76:5e:9d:64:b4:05:
13:2e:01:bd:18:b7:42:57:52:3c:71:71:db:14:96:63:50:7c:
3d:66:5c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:53:29 2025 by rpki-client