Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/wPWSAuQLoLC84i_wxl8zAMN7M_I.roa
File: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (raw, json)
Hash identifier: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=
Subject key identifier: C0:F5:92:02:E4:0B:A0:B0:BC:E2:2F:F0:C6:5F:33:00:C3:7B:33:F2
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 019427481F486C56BFACD362DBEADBF7B566
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/wPWSAuQLoLC84i_wxl8zAMN7M_I.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13186
IP address blocks: 185.123.120.0/22 maxlen: 24
212.66.160.0/24 maxlen: 24
212.80.160.0/19 maxlen: 24
213.170.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1f:48:6c:56:bf:ac:d3:62:db:ea:db:f7:b5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0f59202e40ba0b0bce22ff0c65f3300c37b33f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:b0:18:d4:0f:2a:07:d9:01:84:cc:87:0e:
81:23:2c:dc:6f:d0:f5:b0:9f:d0:dc:e3:ab:0f:d0:
56:f3:d5:4a:4c:7b:94:4e:7e:7c:56:82:d9:b7:9f:
74:09:68:3f:d1:d2:50:98:d9:a1:37:8c:01:93:c9:
ff:6c:e5:9a:60:d1:47:0b:5b:ec:9b:3d:04:37:04:
b5:74:68:e6:6d:61:cb:10:b7:27:77:ee:45:db:a0:
5c:da:b4:9c:75:3e:f3:bd:b0:6a:76:d9:47:7a:a2:
9c:36:9d:b2:8e:22:f7:f9:5e:0f:d8:5f:e6:7f:0e:
c3:31:9f:f0:fb:7b:94:37:ae:46:74:4e:b4:46:86:
11:95:ec:64:59:04:31:82:39:95:df:dc:7e:4e:75:
2c:70:2a:8b:f5:b2:06:0b:92:2b:36:c9:29:18:46:
fd:d0:f9:6b:da:0e:af:1d:c8:99:d3:94:38:fc:6a:
ea:c4:7f:06:77:25:1c:4c:25:e6:5e:7a:7d:ab:6c:
1d:86:ed:40:e4:ab:2a:ac:29:6e:07:16:dd:99:09:
6e:fd:a0:00:87:c1:2e:49:f8:4f:98:9c:45:d7:95:
1e:02:c5:f0:df:8a:59:05:c9:88:d4:eb:46:f4:6a:
fa:93:3d:b4:05:dc:1d:75:0f:85:b9:83:f0:4a:4d:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F5:92:02:E4:0B:A0:B0:BC:E2:2F:F0:C6:5F:33:00:C3:7B:33:F2
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/wPWSAuQLoLC84i_wxl8zAMN7M_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/22
212.66.160.0/24
212.80.160.0/19
213.170.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:b9:fe:15:e9:19:3d:0e:f4:44:4e:22:e7:5a:4d:cf:80:9e:
03:8b:a1:88:d5:bf:29:aa:c0:c0:63:38:b9:05:28:34:d6:c3:
8e:3d:95:64:42:3e:35:a6:f3:32:8b:94:2b:a4:ea:26:43:ac:
cd:2b:7e:e8:ef:e5:08:f7:a6:bc:35:a1:45:64:84:ba:37:33:
80:aa:03:37:44:31:51:80:62:e2:08:d4:c4:e1:27:55:10:45:
26:e2:7a:83:a7:5e:96:f4:28:fa:a1:82:01:f1:1c:53:4b:9e:
d6:86:e5:ea:35:4b:c8:d2:38:4d:de:cf:20:d0:17:c9:91:67:
cd:17:34:82:e1:38:84:77:fd:56:ad:c0:6c:92:63:55:5f:e8:
5e:1d:f8:d0:02:62:1a:10:8f:b1:88:15:cd:e9:01:5c:c7:f6:
c6:36:a7:d8:c4:69:2b:4a:85:d2:a7:06:ab:a1:b2:0a:71:bb:
b1:24:73:8a:85:fe:88:95:47:e7:a1:45:24:0b:6b:ca:9a:b0:
ba:3e:1e:c2:be:21:c5:1e:6f:c6:ba:59:7f:09:88:43:3f:5b:
d3:47:d3:5f:1d:ef:9e:b1:c4:12:71:e9:57:a2:4d:86:1e:73:
44:f7:f9:91:3a:3d:26:29:75:7d:15:58:50:44:d9:d6:17:58:
7c:3f:28:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:57:45 2025 by rpki-client