Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa
File: wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa (raw, json)
Hash identifier: lm9Zbfc6llKnFMQrYcsYug5Fz4BrAVnfVm1lHsp7Cfo=
Subject key identifier: C0:53:3C:2B:C7:42:81:C8:D5:20:5E:84:59:D8:90:76:54:0D:5F:26
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 019420D5F1E7EA63B3FCEA1153FC287C18A9
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 212.23.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f1:e7:ea:63:b3:fc:ea:11:53:fc:28:7c:18:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0533c2bc74281c8d5205e8459d89076540d5f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:fa:da:fc:03:e0:de:19:bb:6d:32:63:5f:
b6:21:1a:f4:6f:5f:db:70:b9:99:b1:81:4b:dc:0c:
52:80:68:6f:ee:15:d7:43:88:d0:1f:ef:fc:44:06:
e7:ad:86:f1:28:15:a2:36:ee:25:6e:98:1f:46:5a:
e2:54:3a:87:0b:c7:a2:5a:98:8e:4f:52:44:20:7b:
e7:49:53:c6:ed:57:33:d9:49:78:f2:3d:3d:f0:29:
dd:63:f3:6e:b7:ce:0f:af:b9:8e:3b:05:68:64:5a:
c9:96:86:cf:84:f1:98:f9:14:cc:c3:1c:fa:3f:64:
f3:99:57:9a:a5:37:29:72:ae:3a:59:b8:75:08:d4:
c1:6b:98:98:82:c8:7d:f9:36:9a:55:d3:70:15:ad:
a9:d6:5e:51:2b:2a:8e:fc:a8:a8:5c:49:c5:6c:e6:
4b:a6:cc:67:9d:2b:8c:1c:9f:26:f6:70:a4:d1:b5:
bc:bf:e7:07:7d:05:34:9f:e7:58:f8:a8:14:3a:86:
35:5d:60:76:bc:88:3d:95:26:27:34:05:75:5c:94:
9a:55:33:d6:25:7e:c4:61:40:62:b1:c5:05:ea:b5:
24:6e:29:4f:3f:a3:89:f5:7d:dd:e6:1e:2d:db:80:
f6:b0:93:f2:1a:7d:49:b6:92:a3:3e:e6:95:75:5a:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:3C:2B:C7:42:81:C8:D5:20:5E:84:59:D8:90:76:54:0D:5F:26
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.216.0/24
Signature Algorithm: sha256WithRSAEncryption
08:66:18:7d:44:fe:f8:68:e9:b6:5b:45:31:31:88:d9:bd:a5:
f4:22:b7:7a:bf:be:b9:2f:79:3f:b2:54:d8:4a:d2:1b:c6:34:
3d:4b:19:a4:a2:c9:ec:0e:e1:ca:85:c4:62:59:3b:d0:94:31:
37:fa:8c:c3:77:f7:a9:ed:f0:b5:2a:c6:27:4c:12:40:7c:90:
7f:e5:cf:9e:d9:e4:af:b0:86:b5:a9:77:b6:85:aa:23:fe:ef:
3a:e2:a1:49:52:2b:32:f7:cb:6d:1d:b8:05:05:bf:2f:cd:0e:
1d:06:6c:93:c6:86:4c:7d:44:47:ae:94:62:52:13:27:a7:c2:
b2:a7:59:f6:8e:71:df:86:f3:4b:9d:09:a0:c8:cb:87:0b:5a:
b4:1b:a6:1b:f9:c8:ea:fa:f2:eb:db:7f:d7:dd:59:dc:ad:c6:
f1:41:fa:ba:13:41:44:7f:b6:27:89:40:d4:b3:ad:77:92:6f:
94:25:0e:ff:6c:94:76:43:1f:ba:4f:fd:a0:5d:2b:fa:b5:80:
0a:fd:ad:29:4f:e7:b3:c2:b7:7e:b6:9b:51:5a:8a:58:9f:8d:
91:4b:41:63:06:b7:4b:72:ec:b4:d2:80:e9:0a:2b:60:d8:9c:
e7:2a:58:61:8b:59:6f:d7:2e:96:f6:d8:26:80:59:39:cd:11:
8d:67:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:44:18 2025 by rpki-client