Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/WPYKhYBx_0YjrlD531nkz5OoDB8.roa
File: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (raw, json)
Hash identifier: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=
Subject key identifier: 58:F6:0A:85:80:71:FF:46:23:AE:50:F9:DF:59:E4:CF:93:A8:0C:1F
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 019420D6588E4B71B85B75CE84341344398F
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/WPYKhYBx_0YjrlD531nkz5OoDB8.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215868
IP address blocks: 89.40.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:58:8e:4b:71:b8:5b:75:ce:84:34:13:44:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58f60a858071ff4623ae50f9df59e4cf93a80c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:fe:80:93:4a:ab:12:ea:f5:e9:07:93:01:
c1:39:fa:af:8c:34:29:15:b1:a8:7c:15:90:c8:d9:
6f:b2:d6:5e:b1:ba:e8:ca:10:d0:18:47:5d:8d:b9:
da:10:84:26:7e:97:d1:15:5f:8a:71:e8:05:87:eb:
12:db:eb:b6:71:0e:dd:91:c7:8d:a6:78:58:e8:d3:
05:dc:57:21:9a:9d:bd:7e:d7:70:f9:d3:15:21:f1:
bc:57:5f:5e:14:04:83:69:12:6c:37:1a:96:76:25:
7b:49:ef:52:f3:20:c4:82:8b:fd:67:0b:30:ff:45:
f8:de:e0:a4:cf:12:80:65:57:14:18:29:80:3d:8d:
ee:58:d1:29:32:02:a7:e6:8b:1c:e7:4f:3a:44:6d:
28:2d:01:98:41:9d:3e:00:c1:37:ac:38:a0:c0:ff:
c0:0d:5a:0c:51:4a:37:f0:43:bc:e1:81:ce:45:48:
b3:7e:e5:23:1e:56:2b:f7:b2:d3:2f:1f:b5:db:1a:
2a:88:9c:37:f6:f6:45:ce:bb:2c:09:71:88:66:72:
fa:23:40:7d:e9:f6:41:83:72:36:38:af:12:44:bb:
cf:33:37:4f:f1:8c:44:cd:81:0c:35:9a:c5:eb:95:
de:26:ce:60:52:2a:de:16:1d:fd:8d:c6:db:2f:2d:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F6:0A:85:80:71:FF:46:23:AE:50:F9:DF:59:E4:CF:93:A8:0C:1F
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/WPYKhYBx_0YjrlD531nkz5OoDB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.28.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f7:44:b0:73:58:9a:9c:91:cf:47:b3:86:ce:ff:c1:54:fc:
a8:e0:bb:ac:bf:3a:8e:3a:47:63:a8:c5:93:f1:01:3f:a7:ad:
4c:72:66:cd:e5:17:4e:a5:79:d5:f3:80:9a:09:a2:70:63:52:
a0:9f:58:50:e4:27:ec:32:ba:b6:2a:cf:96:76:e2:38:3e:3f:
04:69:44:89:59:a0:79:89:3b:16:bb:46:63:d6:59:e9:23:ae:
ba:bd:ba:4b:c6:a8:c0:c1:db:df:ca:c4:d9:36:74:e3:51:a2:
25:47:be:3c:4d:4f:30:b9:23:9f:80:26:25:22:c9:32:13:8c:
be:36:37:2d:6d:dd:16:04:94:53:1f:40:9c:29:bf:46:4c:a7:
4f:d8:45:95:3b:28:93:2d:73:22:23:52:80:99:5c:7f:ae:89:
2f:fd:20:40:50:43:a4:4d:ee:8f:53:59:8f:93:42:cc:35:6c:
5d:cd:1b:a6:82:1c:7d:3a:3a:06:15:48:c9:bf:5a:cd:3e:72:
cc:ac:3d:8c:ed:bf:31:dd:8f:5a:56:7e:c8:96:24:72:13:c2:
8f:12:c1:ea:45:42:39:be:36:85:1d:b1:36:1a:2d:98:2a:2c:
34:4c:68:58:50:0f:8f:43:e6:ef:bf:d8:d5:6d:7d:64:97:de:
b1:7f:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:36:57 2025 by rpki-client