Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa
File: WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa (raw, json)
Hash identifier: yqIxBJiLiShm8irHVY2/sGIwoQoJ1y3znhIp9whAo54=
Subject key identifier: 5A:36:6A:27:43:61:13:93:7F:AB:C6:79:7E:F5:AA:F0:FD:AF:4C:A5
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 0194236A0424842B26A813443AB74E57D48E
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209147
IP address blocks: 185.88.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:04:24:84:2b:26:a8:13:44:3a:b7:4e:57:d4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a366a27436113937fabc6797ef5aaf0fdaf4ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:95:87:45:08:37:1c:54:12:f0:c9:ef:68:
50:30:a9:f7:69:08:ba:30:89:f9:e4:1f:be:b2:d0:
4a:75:d5:98:88:46:3e:c0:10:77:0e:ce:25:4b:e4:
e0:fa:c3:16:cd:fe:8f:41:5c:d7:f0:82:b8:c4:ec:
8f:73:38:f2:df:18:c7:ba:b3:57:bc:4b:e3:5f:f8:
ac:de:c0:d2:09:f0:51:09:78:3e:59:e3:fc:ed:cb:
96:26:5e:4e:40:a8:7e:9a:3c:11:a4:1d:44:91:36:
a2:02:52:6a:82:0d:06:39:8d:6f:c5:71:05:18:59:
4b:80:a3:fb:41:f7:f2:32:c0:c7:d3:e6:d9:01:9d:
15:fd:34:98:61:b9:5e:ea:1e:a7:a7:7a:1b:08:d2:
83:32:3c:3e:d3:a9:ef:8e:4a:9c:89:9a:86:9d:4c:
8d:e8:20:de:78:f7:e9:f8:62:3c:4a:a8:53:c6:91:
87:44:5b:05:21:48:7e:37:f6:4f:8f:94:25:8f:2f:
32:b2:eb:e7:f0:0a:ad:44:0d:85:61:32:27:71:30:
a3:71:ae:bf:67:a5:96:3d:ea:6a:aa:c8:5b:4e:e3:
af:20:9b:f9:92:b1:cc:9b:fc:97:0e:01:be:e9:f8:
c6:9c:9f:14:8a:26:fa:bc:83:9c:ee:98:37:37:69:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:36:6A:27:43:61:13:93:7F:AB:C6:79:7E:F5:AA:F0:FD:AF:4C:A5
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.20.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ac:97:75:2b:fd:85:c0:78:b9:dc:68:ef:3b:1d:61:cf:e6:
d4:e3:80:c0:e0:14:29:62:35:dd:6f:fa:53:f7:4a:f6:ad:8a:
1a:61:a0:50:7f:4b:a5:e4:1b:61:53:90:2a:2e:ab:52:c2:fc:
3c:65:a6:e0:73:b2:1b:f3:88:28:0d:08:ca:25:66:0d:e4:e9:
39:b9:52:0c:e2:10:cf:42:55:36:81:61:aa:b1:f2:fe:2e:f3:
fb:4a:f5:94:79:62:ae:e8:96:28:0f:0e:b2:93:8e:53:58:80:
33:44:ce:1a:bd:42:26:91:2e:8d:6f:19:47:2b:8a:19:d0:9e:
e1:e3:11:a9:fc:d1:49:d0:9f:e1:b9:0e:d8:b5:c3:d6:8a:19:
70:98:23:ab:c4:d0:18:99:1e:fe:b9:9e:50:ff:e8:17:28:6e:
41:36:36:08:c9:ba:f4:55:74:ad:eb:f7:d1:6c:ab:07:37:88:
78:da:be:cc:81:26:ad:ff:30:89:74:66:9c:d6:19:eb:99:1b:
30:0e:06:1d:3d:5d:fc:a9:41:70:30:ec:2f:ee:21:fe:c7:ae:
b5:59:5f:ef:d2:ff:7a:d3:67:d9:90:37:3f:ce:de:5f:10:ee:
a5:93:05:48:4b:94:81:cc:26:bf:e4:a4:8d:6c:28:4b:95:bb:
53:6c:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:44:12 2025 by rpki-client