Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/WS5dJtxLFKB6EZr0k7FG-L1WfpI.roa
File: WS5dJtxLFKB6EZr0k7FG-L1WfpI.roa (raw, json)
Hash identifier: EcGFRU20uqBbFC1foj+y9OBYi5L7+bc1+NFOuFXpPjg=
Subject key identifier: 59:2E:5D:26:DC:4B:14:A0:7A:11:9A:F4:93:B1:46:F8:BD:56:7E:92
Certificate issuer: /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial: 0194228D87C401F9F2F8EB6BCAB8135DDCA6
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/WS5dJtxLFKB6EZr0k7FG-L1WfpI.roa
Signing time: Wed 01 Jan 2025 15:48:08 +0000
ROA not before: Wed 01 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20952
IP address blocks: 185.57.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:87:c4:01:f9:f2:f8:eb:6b:ca:b8:13:5d:dc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Validity
Not Before: Jan 1 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=592e5d26dc4b14a07a119af493b146f8bd567e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:af:48:36:09:ef:70:b5:b0:e9:05:da:f6:
10:48:da:1e:86:9e:59:e6:85:a8:fe:9d:93:75:08:
4e:d8:7d:c3:80:ce:32:46:a6:65:1a:2a:cd:c4:58:
42:87:67:6a:db:1c:4d:16:8c:54:55:12:c0:17:08:
d6:9d:24:13:e3:67:50:a9:4d:97:61:bf:da:9a:dc:
58:a9:48:94:cb:e1:96:57:21:ee:da:49:39:fd:13:
78:47:71:80:68:d6:01:de:ed:39:f6:c7:ac:80:a6:
ab:b8:47:a4:50:97:4a:60:9f:0b:d9:43:d3:54:08:
ab:e2:c5:7c:66:83:f6:89:e9:fc:53:18:e6:fc:46:
04:db:01:e6:c2:bc:6f:8c:d3:6b:5d:e3:4e:d0:f3:
93:1f:b6:1a:4a:cb:13:28:de:5f:bb:7a:eb:e4:dc:
d3:82:e5:03:a3:5e:58:44:f1:18:91:87:5c:b3:91:
36:7e:9b:34:0b:d1:f9:c1:ea:8d:53:e3:6b:1d:a3:
70:1c:ae:3f:15:9a:3a:2e:0a:0e:fd:bc:e9:1c:8b:
c7:2d:04:28:a8:11:0a:85:97:38:22:65:03:23:a9:
e1:b9:5a:98:d1:6c:59:c9:55:77:48:d9:19:56:66:
eb:7b:53:ee:6a:c4:b6:2e:6d:6f:7f:3d:72:b1:2a:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2E:5D:26:DC:4B:14:A0:7A:11:9A:F4:93:B1:46:F8:BD:56:7E:92
X509v3 Authority Key Identifier:
keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/WS5dJtxLFKB6EZr0k7FG-L1WfpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b9:7c:43:c0:bd:2b:32:89:59:96:8a:ae:6b:92:64:a5:77:
ae:51:96:6e:15:a9:08:ac:12:06:6b:2e:1f:8a:3a:f2:71:ce:
57:3b:49:d2:fa:4a:19:5e:c3:2c:f2:7e:16:e3:e6:4a:45:11:
4f:bb:c6:57:a4:8a:83:77:82:56:bd:b6:07:96:aa:0f:d6:8a:
2e:cc:ce:ae:7a:ab:72:f1:8b:d4:95:83:cf:a3:d2:0d:9a:06:
85:a3:69:99:a9:5b:7c:8d:2f:9c:e2:a1:3e:67:c1:b3:e1:64:
6a:6b:fc:b8:44:2b:7e:14:08:b2:23:6d:02:67:43:08:cf:26:
53:5c:83:ec:d1:62:36:8b:b9:3a:59:36:b8:1f:be:d7:5d:7d:
a8:d6:5b:3c:e1:b8:c1:dc:ed:dc:e0:69:d4:28:c0:4c:9c:42:
e3:67:5c:3b:36:14:55:42:3a:20:cc:b2:00:75:ac:48:bb:52:
a8:38:8b:df:c6:3c:9d:56:61:12:ed:79:a0:8b:39:0a:46:0e:
07:6f:6c:1b:22:5c:2e:6e:b3:c5:f9:51:88:ca:ec:7a:53:59:
0f:d1:0a:2f:86:e1:8b:7b:18:a0:af:7f:ed:2a:ed:2d:79:35:
c3:62:7b:d3:a4:b2:bb:45:ca:6a:62:0c:d2:94:05:19:4e:bc:
de:6e:97:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:52:51 2025 by rpki-client