Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/WylnrO-wU58E26AefCAQ7nrb79w.roa
File: WylnrO-wU58E26AefCAQ7nrb79w.roa (raw, json)
Hash identifier: y1OWdCLTeRgES3w6dtbyOUz1ZW2NZGMx2qqGlzUOOl8=
Subject key identifier: 5B:29:67:AC:EF:B0:53:9F:04:DB:A0:1E:7C:20:10:EE:7A:DB:EF:DC
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 0194258F3BF1D342C745A29BFB874F786B16
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/WylnrO-wU58E26AefCAQ7nrb79w.roa
Signing time: Thu 02 Jan 2025 05:48:51 +0000
ROA not before: Thu 02 Jan 2025 05:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51167
IP address blocks: 91.239.43.0/24 maxlen: 24
195.191.65.0/24 maxlen: 24
213.109.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3b:f1:d3:42:c7:45:a2:9b:fb:87:4f:78:6b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Jan 2 05:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b2967acefb0539f04dba01e7c2010ee7adbefdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:25:5e:cc:a2:16:c3:aa:a7:08:11:70:4a:
f3:8a:51:44:09:1b:8a:79:f3:bf:9f:71:28:75:13:
c7:31:c4:26:b4:52:b2:9d:de:dc:04:22:fb:e0:b7:
c2:4d:fa:ea:d0:24:d0:16:70:d1:ad:06:52:9d:c0:
2b:76:a9:36:cd:ec:86:1b:c3:5b:d4:9d:1c:47:cd:
59:95:25:a1:50:02:6a:f8:76:8e:d9:6c:d7:3b:f3:
82:ec:07:0b:14:1a:7a:44:f5:c2:22:4e:59:6b:2a:
b2:a7:ea:a7:4c:88:69:4f:dd:bf:c6:26:49:b1:cd:
3f:54:0a:2c:ec:cc:02:69:87:3d:95:b1:70:64:94:
6f:21:57:da:f1:c5:a0:d1:ec:d9:5c:f9:09:c6:4b:
06:71:c1:2f:05:6f:85:4c:9b:e5:f4:68:01:0a:92:
b6:4a:32:6f:13:13:1a:29:a2:f0:28:61:fd:ec:93:
ad:f5:08:dc:ba:53:c1:1e:a6:51:c1:c8:86:f5:9b:
66:d2:89:b0:b2:2a:43:84:1d:db:ff:b3:2a:82:ba:
1c:25:28:d2:ba:c2:01:e9:f6:55:cf:64:8d:f1:1f:
6d:15:3b:58:d6:6d:6f:bf:47:bc:20:c2:f9:1d:43:
76:cc:14:b6:f3:00:e0:02:52:dd:bb:a9:25:f7:58:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:29:67:AC:EF:B0:53:9F:04:DB:A0:1E:7C:20:10:EE:7A:DB:EF:DC
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/WylnrO-wU58E26AefCAQ7nrb79w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.43.0/24
195.191.65.0/24
213.109.76.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:3e:87:8f:28:82:68:4e:6f:4d:65:8f:c5:6e:0c:27:37:27:
f2:2e:88:0e:a7:ed:fb:27:a9:91:cc:34:ed:53:37:3a:53:56:
c2:c8:fe:09:37:dc:3e:c2:53:2c:05:08:a2:e8:c6:65:ca:d6:
a2:c2:99:ce:97:9f:a1:2d:21:d9:ed:0c:41:96:6d:b6:d3:89:
27:70:02:82:be:6e:4a:fe:41:81:a4:b0:c7:6a:cf:1b:86:f6:
d3:08:0c:54:e6:53:b4:f1:40:3b:0f:eb:64:42:7e:9c:00:6d:
fe:30:ca:f5:4e:79:a1:72:e7:66:8b:cc:3a:42:9e:93:45:cd:
40:89:2e:29:59:5e:70:b7:d6:7a:9c:0c:a8:d3:8c:13:6f:07:
38:04:be:ba:8e:36:06:ab:93:58:a3:7d:15:de:8a:e3:a9:5a:
d5:41:03:07:ee:68:8f:ab:87:2d:d7:a5:ac:ae:d6:78:82:c1:
b1:65:cf:17:fb:10:a5:cb:e8:d4:b6:ac:99:b2:98:19:f5:fd:
ba:30:f4:fd:51:c4:01:75:66:b4:ed:f5:5f:b8:ab:14:ca:a7:
43:c6:e8:c8:41:f6:e1:8e:cf:48:d6:6e:3d:e9:c8:f3:18:07:
ca:62:5d:51:98:bb:56:9a:89:0d:a6:37:0e:7b:cd:72:3c:fa:
b2:13:f8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:05:58 2025 by rpki-client