Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/WcSAU3UG3fbCDubUuAbDmN9BNXw.roa
File: WcSAU3UG3fbCDubUuAbDmN9BNXw.roa (raw, json)
Hash identifier: lUiGwZsu8aUjDmUrAqfxfzum4CcP/EsvidCuJT28td0=
Subject key identifier: 59:C4:80:53:75:06:DD:F6:C2:0E:E6:D4:B8:06:C3:98:DF:41:35:7C
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 019425FC7324051246EFCA5F6FC92666CB36
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/WcSAU3UG3fbCDubUuAbDmN9BNXw.roa
Signing time: Thu 02 Jan 2025 07:48:08 +0000
ROA not before: Thu 02 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203802
IP address blocks: 185.123.80.0/22 maxlen: 22
185.123.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:73:24:05:12:46:ef:ca:5f:6f:c9:26:66:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Jan 2 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59c480537506ddf6c20ee6d4b806c398df41357c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:24:f2:39:0d:38:97:72:91:a6:32:db:7c:
4a:cb:3c:0c:ac:44:4c:6a:f9:e9:52:44:9f:62:be:
d6:42:85:de:f0:00:07:aa:8f:04:a8:b9:28:27:b5:
3b:40:5c:b8:da:00:a8:8f:6f:2c:25:f9:68:fa:e8:
0e:71:e9:2e:2a:96:1f:ce:54:f9:32:02:5c:12:bd:
58:ac:14:ce:42:ca:b5:38:ee:6b:bc:17:e4:43:ea:
25:e5:ff:9c:ef:ac:48:89:41:e8:91:8e:83:ac:a0:
e8:3c:b3:6f:8a:9a:03:f7:bc:15:73:3e:7f:fb:9e:
32:80:ba:62:15:4c:3a:9c:f0:d0:4a:b2:55:e3:92:
5b:18:d8:7f:4f:a0:28:32:c8:13:23:a6:df:fe:f2:
c2:a5:10:d8:df:21:44:64:cd:f1:88:25:a8:62:e1:
81:ee:e5:0d:3a:9c:55:a1:ad:f4:c1:5a:37:de:e6:
b3:20:11:29:86:b1:9e:ca:a8:60:e5:75:eb:6d:9d:
38:97:69:eb:41:9c:52:bd:83:0b:08:ad:9d:71:f6:
1b:d9:b5:98:0d:6e:16:f7:82:09:7d:c3:b9:ca:e1:
9a:bc:10:48:52:66:2f:8b:d0:74:9b:13:f3:fe:5f:
99:bc:23:ea:6f:7a:7e:92:93:1e:7f:cb:5d:31:78:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C4:80:53:75:06:DD:F6:C2:0E:E6:D4:B8:06:C3:98:DF:41:35:7C
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/WcSAU3UG3fbCDubUuAbDmN9BNXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.80.0/22
Signature Algorithm: sha256WithRSAEncryption
89:10:f9:23:ad:a2:df:7d:e0:fb:d6:1c:59:a1:5a:ba:da:43:
4d:3e:b8:c8:b9:b5:20:77:62:ab:f1:65:6e:5e:cc:21:5b:a3:
0a:e9:89:cc:be:ff:d3:98:b8:f6:e7:51:2c:2f:ab:ae:e7:a0:
ef:37:6e:8a:dd:a5:89:0b:c0:5f:78:b2:07:65:6f:13:7b:06:
a7:33:88:20:42:e4:07:06:7a:b4:55:86:8a:f2:ee:29:1a:96:
cc:59:08:0e:0d:34:4c:bf:ae:d0:e8:c6:de:17:c1:89:69:d4:
dd:67:5a:d3:89:38:c6:a7:42:d6:05:77:57:15:51:16:4d:1d:
b1:6d:f0:71:a9:2b:88:b7:44:68:7b:65:6f:5e:45:32:df:42:
e1:5e:d2:74:a3:c5:34:2b:43:d3:37:e1:dc:2a:9d:4b:96:c1:
9f:55:72:6f:df:4d:0d:4b:48:0f:03:0c:a7:07:a2:08:d2:51:
75:59:8e:af:22:5e:8d:b8:65:89:b5:ad:2b:f1:41:14:2a:a4:
3e:75:b7:5c:26:bb:93:e2:7e:f3:16:00:65:57:74:bf:c1:b3:
6b:a9:79:54:53:3d:8c:f1:1e:41:f3:eb:43:06:6d:6c:50:45:
05:55:23:e1:dc:de:a5:d3:77:73:0b:b9:05:12:5d:83:e3:7a:
9f:a3:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:00:38 2025 by rpki-client