Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/wOKO5BfevHhq6oErWALub8pu8xU.roa
File: wOKO5BfevHhq6oErWALub8pu8xU.roa (raw, json)
Hash identifier: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=
Subject key identifier: C0:E2:8E:E4:17:DE:BC:78:6A:EA:81:2B:58:02:EE:6F:CA:6E:F3:15
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 019425221CCC15FAE2FE86752EB0FF6AA27F
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/wOKO5BfevHhq6oErWALub8pu8xU.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 185.110.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1c:cc:15:fa:e2:fe:86:75:2e:b0:ff:6a:a2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0e28ee417debc786aea812b5802ee6fca6ef315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:e8:a5:08:e8:ee:9e:f1:f2:69:f3:f8:0f:
58:93:35:d9:a6:a5:07:1b:55:d6:1d:d7:e2:8b:a2:
7d:22:35:22:81:3c:e6:33:67:c4:e6:a0:f9:82:63:
8e:3f:9b:d5:ba:75:12:df:13:de:e4:4e:a7:86:c8:
f4:c5:11:81:8c:42:d6:dc:76:be:00:54:2d:fb:37:
1a:4d:0e:99:67:e9:66:cb:bd:17:3d:65:eb:a2:17:
b3:69:c3:3a:0f:16:37:9d:34:6c:2e:a6:1f:6e:21:
4a:a6:6f:f7:6f:ce:ac:cd:c4:54:a1:c1:59:d8:b9:
50:34:bb:df:58:5e:8d:65:ec:6b:48:cd:99:67:d7:
c4:86:25:ed:b6:dd:bf:af:6d:b7:c3:fc:4a:dc:12:
7f:4a:3a:ea:4d:f1:60:ea:00:f4:9a:e3:3a:22:e0:
6c:d2:4c:03:35:04:a3:77:32:8c:12:c0:e5:2c:74:
0c:26:dd:24:d4:1e:e2:3c:2f:77:52:9f:06:47:3f:
a8:da:4d:c2:e7:e3:b2:23:1b:6c:97:74:fd:f3:5b:
09:11:fd:c5:a1:b9:20:79:51:4b:1e:6c:8a:b0:9c:
b0:cb:70:43:9d:e8:f9:fa:73:ea:35:22:16:37:81:
3f:de:30:14:2a:56:ba:b8:5c:f9:0b:19:41:31:46:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E2:8E:E4:17:DE:BC:78:6A:EA:81:2B:58:02:EE:6F:CA:6E:F3:15
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/wOKO5BfevHhq6oErWALub8pu8xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f0:0e:18:c8:74:9e:56:13:f5:83:6d:eb:45:b5:b6:2f:70:
b8:8f:d8:a5:c6:da:5b:f6:e1:32:6b:50:ff:d2:a0:0c:6e:d4:
da:33:8f:44:e5:55:08:a1:55:84:36:d5:4c:33:6d:a0:89:e2:
2d:82:14:12:f7:a9:aa:98:8e:99:da:9d:da:6a:aa:b1:3f:f8:
4a:d2:01:55:7d:3e:f7:dd:0e:c9:ba:29:ac:5f:0b:af:ee:96:
f7:75:14:31:25:81:58:bf:f0:ce:fb:68:66:d1:26:b6:0d:28:
2c:4d:e6:c6:2f:24:dc:37:45:c7:c7:3e:cf:85:cc:d0:88:be:
da:96:8d:bd:bb:0c:ec:5e:e2:fc:aa:64:3e:52:e3:d2:26:b6:
0a:d4:65:89:4e:c8:ab:ec:47:c3:56:b2:53:83:49:76:01:58:
a8:e8:84:6a:f4:6c:fd:63:97:6f:c9:ab:1c:3b:f1:e2:6c:06:
76:a4:18:01:5f:fc:8f:17:d9:f5:f8:b5:ee:00:7a:a0:ca:66:
ad:50:7a:6b:b0:da:75:ff:10:df:d6:16:6b:a4:ae:de:fc:cd:
44:d8:52:8c:04:f6:f4:20:09:77:22:d2:36:03:b4:b3:a1:43:
53:c1:46:82:cb:1a:02:54:da:78:68:b7:b7:f6:a1:9a:c7:04:
bd:c9:ad:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:19 2025 by rpki-client