Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/WVDdYi47m-6hf2_QV0K2CVkP7zw.roa
File: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (raw, json)
Hash identifier: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=
Subject key identifier: 59:50:DD:62:2E:3B:9B:EE:A1:7F:6F:D0:57:42:B6:09:59:0F:EF:3C
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 019427479468FEA7A0B6B37E6F8EB0550833
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/WVDdYi47m-6hf2_QV0K2CVkP7zw.roa
Signing time: Thu 02 Jan 2025 13:49:49 +0000
ROA not before: Thu 02 Jan 2025 13:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43957
IP address blocks: 46.245.200.0/21 maxlen: 21
79.170.208.0/21 maxlen: 21
92.61.48.0/21 maxlen: 21
92.61.56.0/22 maxlen: 22
92.63.144.0/20 maxlen: 20
94.102.96.0/20 maxlen: 20
185.31.28.0/22 maxlen: 22
185.52.20.0/22 maxlen: 22
185.93.214.0/23 maxlen: 23
194.50.151.0/24 maxlen: 24
2a00:b220::/32 maxlen: 32
2a02:4140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:94:68:fe:a7:a0:b6:b3:7e:6f:8e:b0:55:08:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5950dd622e3b9beea17f6fd05742b609590fef3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:f5:6a:29:d3:40:dc:39:b6:65:57:6b:aa:
fa:44:b1:69:f6:43:88:5c:fb:24:42:4e:2a:2e:85:
a1:07:39:10:51:17:82:52:98:bc:ac:2d:be:02:2a:
71:8a:fd:50:8e:10:5b:1d:e1:42:4a:9b:db:f2:7e:
11:be:81:93:51:71:db:dc:ba:e3:f8:46:04:84:ba:
ec:fa:62:ec:97:58:6a:ac:0f:73:59:13:19:42:54:
6f:3a:96:5e:a5:be:1c:19:b7:32:f2:0c:a9:37:bb:
76:92:9c:34:8b:5b:b3:11:b4:f1:e8:e2:0e:73:23:
f2:dd:ed:58:c8:79:d9:08:b8:fd:89:5b:e2:d8:cf:
71:5f:ff:d8:3e:49:5e:84:77:58:bb:5f:a9:fb:da:
96:4d:a9:2b:49:ad:26:94:f3:16:9c:66:57:a0:42:
2f:16:ac:51:44:1b:3b:5d:ad:1d:89:1a:ac:34:a8:
79:20:8d:e4:90:0d:4f:dc:ea:68:55:40:b7:6a:0b:
05:0a:f8:9c:83:ce:b2:72:e6:28:46:93:a5:87:62:
9e:ec:68:01:e2:c4:bb:6a:0c:65:f3:89:da:0d:dd:
d4:33:1d:07:48:32:6a:eb:1e:b2:3e:c6:24:40:08:
df:cb:1d:93:f1:54:35:69:1e:2b:d7:4b:82:c9:15:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:50:DD:62:2E:3B:9B:EE:A1:7F:6F:D0:57:42:B6:09:59:0F:EF:3C
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/WVDdYi47m-6hf2_QV0K2CVkP7zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.200.0/21
79.170.208.0/21
92.61.48.0-92.61.59.255
92.63.144.0/20
94.102.96.0/20
185.31.28.0/22
185.52.20.0/22
185.93.214.0/23
194.50.151.0/24
IPv6:
2a00:b220::/32
2a02:4140::/32
Signature Algorithm: sha256WithRSAEncryption
96:74:60:a5:e2:b6:12:4b:e3:62:81:ff:4a:bb:3e:5e:66:b1:
5b:dc:8e:47:f0:65:0a:76:3f:df:da:a1:84:54:48:ed:93:5d:
69:55:a7:07:96:34:87:13:51:66:f3:96:bb:7d:2c:7d:f2:d8:
0d:30:b8:f1:be:fb:5d:4f:db:a9:aa:8b:ce:3b:a0:e6:31:6c:
c7:ca:75:f8:74:24:12:76:49:78:f3:07:73:4a:a8:39:d4:25:
b6:92:3e:9a:0e:c4:ec:40:d9:9c:41:bc:af:ee:d2:72:12:d4:
39:bd:85:30:eb:0e:d8:58:f2:4b:65:fb:04:f5:18:3e:5d:64:
29:94:cd:32:80:58:4d:55:e5:4e:c8:de:4c:dc:db:75:26:af:
60:a4:76:e9:ef:c3:22:2c:09:36:9e:d1:45:18:32:a2:6b:7c:
0e:5f:c2:d1:da:98:44:0a:75:e6:56:b1:17:2b:0a:c5:bb:22:
49:af:12:f9:3a:85:20:46:18:84:c5:83:40:c4:be:d8:3e:c8:
6e:14:de:35:a2:da:84:d9:3a:e6:44:a9:e9:5f:ca:82:52:50:
db:db:c8:c7:a4:ae:7f:8d:de:c5:ed:b2:19:c0:4f:c0:15:9d:
5e:23:4b:2d:69:d7:cf:c7:fe:8e:51:7a:d4:b8:d4:0e:05:ad:
a4:01:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:38 2025 by rpki-client