Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/WhuuzI-giOvU0WJGmRMWrjSlbX0.roa
File: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (raw, json)
Hash identifier: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=
Subject key identifier: 5A:1B:AE:CC:8F:A0:88:EB:D4:D1:62:46:99:13:16:AE:34:A5:6D:7D
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 01941F8C2C6CAA13BCFF0E1C09FF605F7841
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/WhuuzI-giOvU0WJGmRMWrjSlbX0.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206408
IP address blocks: 185.130.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2c:6c:aa:13:bc:ff:0e:1c:09:ff:60:5f:78:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a1baecc8fa088ebd4d16246991316ae34a56d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:96:d4:4d:68:e9:f1:55:da:16:2b:d9:50:58:
d7:b1:0d:78:66:25:fe:d0:8f:67:45:ce:f9:ec:0a:
99:38:29:69:34:00:97:4a:6a:d5:bf:93:9b:10:33:
b6:cb:65:8c:f6:e3:08:2d:48:6c:1b:a8:e5:15:fb:
19:b8:08:e4:46:20:34:6d:c2:9a:22:2f:85:c5:d8:
b3:28:8d:79:a8:6d:c3:5c:a2:49:0a:e2:9e:bc:64:
4c:a4:45:db:03:e4:d3:e6:6b:1e:9c:ca:2b:ac:6d:
e4:ba:64:76:bc:54:ac:9a:45:bf:33:ad:2d:31:57:
c2:22:5e:05:fd:49:6c:af:9a:a7:80:c6:a8:7b:58:
40:b8:ec:3d:32:f6:a0:7e:8a:de:b9:9e:09:eb:27:
1e:ca:b6:f7:ab:d3:8e:18:47:0f:41:11:18:c2:a3:
be:2b:d1:4a:d2:74:3c:69:d1:91:3b:39:4c:71:0b:
06:c2:f8:08:58:fd:12:bf:3e:6b:0c:95:67:53:9f:
4a:75:00:fb:8d:f6:9a:f8:20:9d:21:7c:84:94:55:
3c:3f:27:ef:b6:aa:0a:db:d1:99:dc:b2:e4:6e:f5:
e5:bc:a4:ff:9b:7a:3e:f7:58:e0:91:a4:52:13:58:
1d:32:f0:26:12:38:fb:3d:f2:db:93:86:94:bf:3e:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:AE:CC:8F:A0:88:EB:D4:D1:62:46:99:13:16:AE:34:A5:6D:7D
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/WhuuzI-giOvU0WJGmRMWrjSlbX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.0.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d5:54:b6:b6:a3:29:63:50:2a:11:10:41:13:30:78:0e:d4:
fe:e2:e5:ce:67:a0:a5:15:1d:8c:4c:7f:18:bb:e0:15:2d:7a:
49:cf:7c:9f:9f:8f:7b:5e:d3:ac:35:78:09:1c:a0:9c:a7:e6:
a6:9d:25:4a:66:f0:fc:97:bd:51:f5:ed:0f:e4:5a:ff:35:f2:
61:21:06:7f:01:b5:3d:9b:5d:96:54:26:58:09:d6:7f:f1:a0:
fc:cc:9c:19:c5:87:c3:72:d0:f3:3c:2c:50:f0:39:32:4c:89:
fd:79:90:a9:8c:dc:41:2b:25:9a:66:35:6f:93:57:78:56:41:
41:d2:74:b4:a2:b1:98:a2:2f:f8:72:cb:1d:cb:7c:6c:76:7a:
b7:43:b8:c6:4d:45:30:35:5a:20:1e:3d:23:87:d5:01:7c:2b:
3c:33:da:39:cd:cf:52:90:b6:e4:e4:5a:4e:70:02:24:ef:5c:
ad:77:1a:50:8a:2e:5c:f5:2a:89:bb:63:a6:d0:87:bc:bb:1b:
c2:bf:b9:dc:7f:62:34:c7:d0:52:00:f9:1b:08:67:3e:8d:f4:
79:40:3d:71:97:85:23:1a:63:ab:4b:f8:76:dc:5f:ce:0d:57:
64:a3:16:89:5f:7a:1f:fa:46:00:68:25:57:48:a8:2b:40:9d:
95:65:a2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:08 2025 by rpki-client