Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/Wu_sLBd52P_80aF3hK1EyS_6DCc.roa
File: Wu_sLBd52P_80aF3hK1EyS_6DCc.roa (raw, json)
Hash identifier: 84Ssu5t49rk7+hfFW1vqYrXMV8Dl21sv4EL9/rh88NY=
Subject key identifier: 5A:EF:EC:2C:17:79:D8:FF:FC:D1:A1:77:84:AD:44:C9:2F:FA:0C:27
Certificate issuer: /CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Certificate serial: 019425216307E448ED6D26F1D8846649A6FC
Authority key identifier: FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/Wu_sLBd52P_80aF3hK1EyS_6DCc.roa
Signing time: Thu 02 Jan 2025 03:48:52 +0000
ROA not before: Thu 02 Jan 2025 03:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 194.156.84.0/24 maxlen: 24
194.156.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:63:07:e4:48:ed:6d:26:f1:d8:84:66:49:a6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aefec2c1779d8fffcd1a17784ad44c92ffa0c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:78:2d:6d:81:80:41:af:15:18:9e:48:48:
9c:91:4c:40:8e:d6:f2:45:15:53:47:48:7b:90:66:
f0:1d:7c:c7:75:5e:43:d3:01:e7:0b:c6:9b:19:c5:
88:88:45:02:df:1a:b9:64:5e:26:e0:50:b7:52:a5:
9f:65:94:c2:85:cb:8d:94:13:1d:86:47:f3:ba:40:
66:20:50:51:0d:38:23:05:9c:fa:d9:89:e4:f7:d4:
ed:7a:5c:e8:34:3c:c1:6f:8b:ef:a0:5b:27:db:14:
4d:d8:f8:57:5e:c9:7b:a5:9a:0a:5a:0f:c6:07:c0:
89:6e:37:c2:1d:74:5b:70:4a:ee:4c:9a:d2:e8:d0:
29:ba:d2:1d:da:64:93:27:63:06:30:49:37:51:a1:
2d:12:8e:4a:f2:cf:06:2b:02:b1:3d:33:3c:75:87:
ed:d1:41:4c:26:d3:a0:08:0f:12:ba:98:0d:62:c8:
8c:d4:38:6b:13:f9:59:b8:f9:1b:ec:e4:47:2e:23:
8f:56:af:dd:fd:1e:ce:04:a6:43:d3:9b:88:3c:3e:
5b:6c:c0:cf:8d:b6:e5:c7:89:7d:7c:a6:4e:6c:72:
7a:8b:19:00:a4:81:dc:d0:34:c2:b0:15:6c:70:47:
8a:d8:12:66:87:1a:41:da:ef:01:70:03:24:d5:24:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EF:EC:2C:17:79:D8:FF:FC:D1:A1:77:84:AD:44:C9:2F:FA:0C:27
X509v3 Authority Key Identifier:
keyid:FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/Wu_sLBd52P_80aF3hK1EyS_6DCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.84.0/23
Signature Algorithm: sha256WithRSAEncryption
22:00:ad:81:62:a8:fe:f8:0b:cf:d5:94:97:07:d0:77:fb:0f:
6c:b5:9e:df:47:df:aa:40:1a:ea:b3:31:4d:5b:e6:5e:73:97:
d2:6c:26:46:ab:d7:fa:db:a8:0a:da:1c:cc:e5:43:d5:fb:a9:
3b:2a:1e:b6:74:48:4a:e4:9b:39:30:10:39:d7:1a:4d:bf:db:
d1:5a:68:76:b0:24:92:cb:a3:b1:69:28:91:ff:86:cb:0c:84:
59:c1:30:ef:65:43:6a:ec:e6:c0:02:7d:09:a7:d8:ed:11:d3:
ad:8d:dc:62:c4:21:cb:4c:2c:0c:91:16:9c:b7:e6:6c:a1:34:
37:f8:27:b3:27:cc:fa:ff:dc:29:a1:ab:0e:d5:97:47:46:60:
12:f6:60:aa:57:5e:2c:d2:85:4e:ab:d8:16:0b:7f:ff:65:94:
d5:2d:f0:00:9d:d9:6f:2d:38:d2:53:09:26:d0:85:d3:6c:6c:
71:d8:72:47:23:74:0d:06:4b:1b:ae:a8:3a:3f:e8:55:ea:96:
1b:4a:52:96:bc:9f:83:f8:9d:16:f1:04:98:29:0b:28:10:2c:
9a:4f:6d:00:80:71:40:0e:50:34:51:a2:d2:e3:15:34:dd:16:
92:c8:0b:71:e8:98:53:88:13:20:5b:32:42:ab:0a:2c:fb:a3:
9a:a8:c6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:00:31 2025 by rpki-client