Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/WKpkuG_M2tT9KPbip1eBAkWy0LI.roa
File: WKpkuG_M2tT9KPbip1eBAkWy0LI.roa (raw, json)
Hash identifier: kiiHtTX/QlpfIGAQUeZ2av6ezh1TlPujLY7SBF8U+BA=
Subject key identifier: 58:AA:64:B8:6F:CC:DA:D4:FD:28:F6:E2:A7:57:81:02:45:B2:D0:B2
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 0194258EF0BD91B59A2C1FF39537561259AD
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/WKpkuG_M2tT9KPbip1eBAkWy0LI.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197709
IP address blocks: 91.242.231.0/24 maxlen: 24
185.238.60.0/24 maxlen: 24
192.162.144.0/22 maxlen: 22
193.227.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f0:bd:91:b5:9a:2c:1f:f3:95:37:56:12:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58aa64b86fccdad4fd28f6e2a757810245b2d0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:14:b0:e4:de:55:ac:55:93:40:bd:22:bb:
4e:8f:9c:64:89:73:68:fd:76:c9:6d:26:9f:90:38:
1b:25:fc:44:5f:03:84:e1:ce:e5:b8:23:83:ff:23:
4c:93:82:21:ff:13:83:c5:f4:13:3f:37:1a:82:d0:
3b:0e:80:62:c8:00:89:99:ce:b9:26:98:79:f0:cb:
78:2f:6a:21:56:8a:40:fb:b4:fa:6d:f6:5e:5b:ae:
0e:c1:c7:46:94:71:22:05:dd:f9:b3:9f:ea:42:45:
4f:4e:35:5e:3f:95:3b:c7:7c:7d:76:96:34:25:b1:
1a:7e:b0:97:17:5e:46:4f:45:1d:04:34:98:36:fe:
66:c9:c6:18:d1:05:41:1f:6b:95:75:18:91:c9:7e:
cb:99:cf:90:0b:35:98:12:b9:0f:2d:aa:bc:7f:9b:
db:16:f9:ca:7a:6c:7b:8f:87:59:05:cd:a9:e6:aa:
57:74:f9:a2:e4:8f:30:a3:55:39:77:05:f9:3c:7c:
31:b4:56:73:b7:df:90:b5:26:83:93:98:6b:79:72:
4b:d6:67:0d:25:ef:9d:01:d1:f2:50:fa:67:4d:e8:
40:98:2c:cd:9c:94:eb:c8:6a:d2:b1:24:30:28:4a:
98:4b:0d:3d:a7:06:59:3b:dc:56:97:a9:29:9c:e9:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AA:64:B8:6F:CC:DA:D4:FD:28:F6:E2:A7:57:81:02:45:B2:D0:B2
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/WKpkuG_M2tT9KPbip1eBAkWy0LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.231.0/24
185.238.60.0/24
192.162.144.0/22
193.227.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a6:c4:ca:3c:04:60:ad:24:91:25:5f:ba:a3:63:12:9b:09:
b7:a4:4d:51:53:0c:fc:c3:59:84:40:23:c7:ad:ca:0f:73:9e:
e2:61:90:6b:e2:02:ec:bb:ac:4d:33:3c:61:15:04:47:3b:a1:
2b:30:27:2a:c8:0f:32:72:00:83:4f:3a:8b:97:6d:10:84:32:
bd:f2:c6:dd:82:57:90:1d:67:69:ed:f5:22:de:cb:9e:0e:2c:
1b:5a:2b:0f:bc:d8:60:3e:6a:58:07:53:16:bc:52:5c:f9:61:
f0:4d:df:35:20:c0:36:ec:1a:b2:98:0c:f6:93:3a:be:95:61:
00:be:d9:68:3d:db:ef:1a:c4:ba:6e:55:16:c8:6c:18:95:34:
c6:a3:86:77:0d:e2:1d:17:81:cd:96:6c:ac:c5:e1:f4:63:84:
8f:98:4d:a0:08:12:05:b9:e9:29:d6:1b:f6:ae:c1:27:ef:06:
c1:b2:6c:6b:7f:9e:0b:72:7d:7c:87:43:c7:ab:c4:a8:e8:e2:
b9:8e:d2:20:82:e9:b5:9d:27:fc:12:31:c6:d4:f2:a3:cc:49:
95:9e:c3:7b:33:bb:52:4b:63:76:2b:ab:18:ce:d5:cd:b1:20:
1b:d7:ee:ff:d0:2e:dc:2a:0d:1e:08:77:f0:d9:ff:e3:ae:c6:
6d:64:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:26:48 2025 by rpki-client