Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wLdKmIJIYQ6-erwrap-Ksj3q0RE.roa
File: wLdKmIJIYQ6-erwrap-Ksj3q0RE.roa (raw, json)
Hash identifier: ubT605wTtf+vURFoRa2rqwwNl2eI+J4a5aCvYL+fB1c=
Subject key identifier: C0:B7:4A:98:82:48:61:0E:BE:7A:BC:2B:6A:9F:8A:B2:3D:EA:D1:11
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D7105920AD3250D730B7ABDEE5A9F9
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wLdKmIJIYQ6-erwrap-Ksj3q0RE.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50340
IP address blocks: 45.8.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:10:59:20:ad:32:50:d7:30:b7:ab:de:e5:a9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0b74a988248610ebe7abc2b6a9f8ab23dead111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:66:69:f4:59:97:70:56:33:da:10:c9:73:
0b:e0:18:ea:c3:aa:52:08:9b:d6:f2:27:53:5c:7b:
4f:0c:41:51:21:86:12:67:19:82:16:b0:39:1e:60:
f6:eb:04:ed:60:a6:e7:91:24:d0:dc:8d:ba:05:4f:
7e:5c:4d:9c:c9:68:fb:97:39:1d:18:86:bd:bb:43:
2b:1d:43:76:1a:a8:60:08:ed:4c:6d:10:00:7d:4a:
c9:d0:83:ef:b5:5f:6b:bc:2c:83:d1:29:87:c2:e8:
3b:11:1d:87:45:b3:e5:1a:b6:0c:08:f1:46:72:6b:
07:d2:ef:4e:5b:7a:97:13:b1:39:a2:de:d6:34:52:
8e:62:27:23:3c:8d:74:e3:01:00:13:54:a8:ff:54:
3b:62:08:c5:79:25:34:b2:a6:cd:e4:11:f9:e6:4a:
df:d6:9a:b3:1a:c2:85:be:70:d5:d5:f1:3d:15:70:
93:28:dc:6f:49:c6:a6:4a:ac:04:61:bc:0a:97:5b:
aa:cc:0c:76:de:c3:38:00:8d:65:5d:83:c0:f9:77:
bf:84:ec:66:17:3c:f6:a3:84:5b:22:4b:b7:de:06:
84:73:9a:a5:5a:a4:c2:47:52:40:bb:a9:9e:f6:e6:
75:94:12:54:ea:ba:3c:5c:06:3c:2a:5d:91:22:87:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:4A:98:82:48:61:0E:BE:7A:BC:2B:6A:9F:8A:B2:3D:EA:D1:11
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wLdKmIJIYQ6-erwrap-Ksj3q0RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.208.0/24
Signature Algorithm: sha256WithRSAEncryption
02:cc:db:86:c1:9f:45:11:21:ee:c7:42:b4:ec:b5:e0:25:08:
a7:47:ca:2c:ee:39:1a:f6:73:f2:1d:43:a3:43:c1:60:61:6f:
58:8d:0e:40:c6:08:6c:d0:02:a6:4f:df:20:da:cf:48:da:4a:
23:c8:24:92:3a:2b:75:12:87:16:aa:c7:e5:5b:ad:28:be:26:
11:8c:2a:51:40:87:08:4c:c0:48:33:72:3a:df:12:71:7b:8e:
bb:55:6b:4c:b6:0f:87:e0:54:b5:b3:33:5d:0c:cf:04:ef:0b:
57:89:a0:25:a4:ae:91:f3:09:f4:a6:13:22:b4:6a:5a:77:cc:
28:d7:fe:7e:a9:75:d5:f3:4a:55:67:91:a5:d1:d4:83:d5:c0:
98:33:23:6f:8f:99:53:4c:b3:f2:59:8f:fa:23:8c:9c:b7:ec:
78:e6:8f:fb:81:75:33:7d:f9:a5:c7:ac:5d:e9:1c:78:c6:f6:
af:ad:25:f7:98:71:ff:9d:45:0f:9b:84:76:04:08:84:d1:41:
9e:da:ed:ff:17:9e:f0:b8:2d:0f:2b:f4:ab:4c:e1:2b:30:65:
fe:99:2f:d9:08:d3:60:9d:66:88:75:d0:cf:12:2d:96:57:91:
0c:60:96:9d:0c:23:eb:8d:c0:8b:77:bc:16:35:7a:00:4a:dd:
34:50:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:53 2025 by rpki-client