Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/wajonDxdBm0pS767lGRq06Z84rM.roa
File: wajonDxdBm0pS767lGRq06Z84rM.roa (raw, json)
Hash identifier: Ne2muvaUoR5VivXU1vdN76aOmdMN56u55EBtWCDX1QI=
Subject key identifier: C1:A8:E8:9C:3C:5D:06:6D:29:4B:BE:BB:94:64:6A:D3:A6:7C:E2:B3
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 0194274843FA0BB051579AC13966ECCF8564
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/wajonDxdBm0pS767lGRq06Z84rM.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212163
IP address blocks: 92.55.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:43:fa:0b:b0:51:57:9a:c1:39:66:ec:cf:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1a8e89c3c5d066d294bbebb94646ad3a67ce2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:4f:ca:84:f9:cb:40:5e:e5:e4:ae:55:28:
eb:ab:86:13:3d:ff:5b:f4:24:7e:80:83:84:b1:11:
08:b8:47:7f:f0:00:79:74:a6:bf:99:8d:f5:7d:3c:
3a:f9:19:35:ca:45:51:d7:7f:0d:7e:23:6b:7d:48:
79:f8:7c:a7:bf:90:c7:79:0c:2c:f6:89:e6:6e:49:
da:22:e9:14:d5:b0:81:d3:47:69:72:dc:ff:67:80:
78:cb:ec:b9:dc:48:25:90:15:ab:41:79:f6:9e:90:
35:5a:c6:9e:37:4a:f8:9f:46:2a:d4:c3:61:ed:03:
71:6f:c5:e1:5f:d9:bd:70:1d:eb:f8:08:a7:9b:1d:
bb:19:d6:d8:fc:89:0a:de:13:e6:b7:0b:bf:f2:0a:
12:63:f0:a1:6c:69:19:b6:95:1f:83:ce:ef:5a:f0:
9d:10:e2:96:32:2f:4e:2e:30:6b:45:4b:cb:9d:da:
2f:1c:87:7c:a9:61:76:0a:c5:5c:16:d2:9e:87:5a:
ad:3c:48:7c:6c:da:60:96:3b:e5:d6:7e:ec:81:65:
29:c5:56:38:1d:91:ad:a4:63:57:06:ee:01:72:59:
88:4c:21:7d:93:99:69:52:79:3e:f3:23:e3:52:b3:
39:7b:ce:f0:6b:c8:20:9b:03:8b:c7:ff:43:8f:e4:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A8:E8:9C:3C:5D:06:6D:29:4B:BE:BB:94:64:6A:D3:A6:7C:E2:B3
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/wajonDxdBm0pS767lGRq06Z84rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.55.198.0/23
Signature Algorithm: sha256WithRSAEncryption
32:e1:3e:0b:59:8d:d0:d6:a6:c9:de:d5:e9:46:7e:e8:07:c0:
85:80:08:8e:6f:06:02:0e:9c:36:b2:86:d4:ab:e9:3c:47:b3:
e7:62:22:ac:ec:a9:df:f8:38:d4:d1:6d:80:72:46:54:3f:d6:
fa:56:74:ce:ed:92:99:b9:45:96:4b:dc:68:a8:3e:15:0e:91:
64:de:8d:cc:0f:8f:0e:a8:19:e7:52:f7:52:7b:92:4c:28:99:
97:e2:5e:a7:ba:4a:33:8e:3f:76:2b:b2:30:70:6e:19:57:e2:
ec:cb:64:cd:40:c6:91:85:5d:6e:83:da:10:d3:cd:0c:b7:ed:
fa:bc:d3:49:2c:cb:6d:14:a1:bf:61:b1:b7:41:bb:b5:5e:aa:
44:ba:df:14:9e:50:0f:cd:15:af:cd:54:ac:04:3b:63:cd:7a:
4f:88:a0:73:a1:32:dd:95:d2:c6:74:42:df:10:eb:b1:30:31:
9c:e7:f5:ea:5e:45:45:ee:10:f4:04:8b:97:dc:96:5b:0e:e6:
84:e9:15:12:1d:9d:5e:56:a4:59:2c:81:fc:7c:4e:c5:b2:84:
e7:b3:5b:e6:33:2c:50:88:53:23:ae:8c:b6:6f:48:a4:86:b4:
97:06:02:1f:79:9a:f9:cd:13:1f:79:cf:06:d8:0b:f6:5e:19:
08:50:7d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:26:36 2025 by rpki-client