Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa
File: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (raw, json)
Hash identifier: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=
Subject key identifier: C1:8C:4C:75:74:94:10:38:D4:D4:2B:F7:FE:3F:31:40:3B:E2:D7:28
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC0F363BDF4CF4028A8AB72D9DB333
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 81.22.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0f:36:3b:df:4c:f4:02:8a:8a:b7:2d:9d:b3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c18c4c7574941038d4d42bf7fe3f31403be2d728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:5b:70:a6:5f:68:b0:0e:d2:a6:ef:8a:02:
36:76:8c:c8:e6:00:ea:15:34:69:fe:8a:f3:dc:95:
ad:4d:31:ef:7e:b3:b4:5d:cd:06:64:63:aa:02:84:
66:36:62:e1:32:d0:5b:7b:62:e0:ed:16:ab:cb:ca:
87:bf:ae:54:f4:9d:e6:c9:c9:1f:70:66:0d:d1:58:
76:b0:82:06:dc:d7:c7:44:cd:f6:b3:48:ed:a9:04:
9b:a4:9e:1c:65:28:cb:57:bd:7a:f7:39:63:6f:08:
c6:53:a6:f3:9f:68:10:5e:c9:f8:27:55:67:b5:90:
74:a1:87:5b:49:dc:ad:9f:c4:c7:6d:4e:9f:31:eb:
00:07:45:e9:22:86:2f:87:15:1e:2d:b3:a3:89:66:
46:89:66:38:ca:0b:e3:18:72:24:82:4d:c0:65:49:
74:79:73:b4:c5:be:b1:e8:ef:ef:03:36:c2:13:2a:
5c:a4:fc:8b:35:10:6a:75:de:2c:7e:13:d0:7d:52:
ee:da:7b:a8:d8:8f:0f:45:7e:1f:d8:2c:d8:1f:1e:
3e:b0:ff:29:44:8c:11:90:b8:76:49:b7:2b:df:13:
e6:f4:06:55:57:2f:4f:d8:28:ef:51:69:79:9f:07:
39:d5:d1:fc:ca:ee:a6:12:d1:02:af:89:b0:e0:73:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8C:4C:75:74:94:10:38:D4:D4:2B:F7:FE:3F:31:40:3B:E2:D7:28
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b4:be:9d:79:6d:2a:50:da:ac:42:1b:58:4f:d7:44:24:bb:
b8:65:ef:e0:90:b0:72:f9:5d:f6:6b:10:22:18:28:91:83:79:
d4:de:98:f8:40:02:a9:9d:e4:92:e6:d3:ed:5a:17:02:1f:d7:
4c:26:54:b3:b4:d8:df:02:75:5e:bb:41:e3:3e:0a:19:61:cb:
bc:ec:d1:99:68:e2:51:1a:e8:1e:3d:a6:8f:60:4f:08:80:a1:
40:a9:46:b8:95:9b:a2:0d:ac:9d:a0:ca:9f:b6:f0:3d:6b:fb:
a8:ab:60:16:bb:bf:66:af:76:5a:6d:f3:5d:fe:8b:81:08:d7:
6f:98:65:e0:1d:49:a7:40:af:10:5f:cb:cc:d3:93:bf:67:a5:
5e:69:f8:58:88:be:b9:70:42:8b:b4:ce:8f:c1:ae:70:d8:02:
f3:d5:c3:b9:5d:14:44:31:19:8d:be:e6:3f:b6:52:37:c7:5a:
8a:74:90:3a:04:d3:53:2b:07:13:6c:47:5b:60:1f:97:6d:25:
2c:ec:28:5e:26:5d:1f:b9:5c:a1:5b:49:30:f4:c0:74:af:65:
f9:6f:7e:34:ad:df:ff:7c:9b:03:ec:97:4f:43:22:5f:e3:96:
cf:3a:3c:ea:2d:b5:4e:8c:75:6e:ff:13:04:4e:4c:30:14:0f:
5e:3c:60:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:23 2025 by rpki-client