Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/WHIHIqWEsALKLs5d6Q-tOWQCla8.roa
File: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (raw, json)
Hash identifier: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=
Subject key identifier: 58:72:07:22:A5:84:B0:02:CA:2E:CE:5D:E9:0F:AD:39:64:02:95:AF
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019427B486466E6D6FA200852339FFBC1B33
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/WHIHIqWEsALKLs5d6Q-tOWQCla8.roa
Signing time: Thu 02 Jan 2025 15:48:49 +0000
ROA not before: Thu 02 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57045
IP address blocks: 91.221.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:86:46:6e:6d:6f:a2:00:85:23:39:ff:bc:1b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jan 2 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58720722a584b002ca2ece5de90fad39640295af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:53:e8:b5:0c:54:8c:1e:bb:d5:4e:e4:d1:
2a:d0:f8:47:6f:3b:21:b2:6d:0c:cc:c2:29:01:1a:
77:75:1a:e1:3a:c3:f2:b0:fa:c0:ee:6d:59:f1:b6:
ba:c8:e0:8a:0b:7f:15:f9:6d:ad:c9:1a:d7:cb:0a:
03:4b:a8:9b:ed:80:76:e8:9f:f8:f9:21:b6:94:3a:
25:e2:57:d4:72:0e:82:ef:b0:60:94:af:1b:a3:8f:
f7:29:5d:c7:61:cf:35:51:d0:2b:82:94:39:0d:19:
96:e8:ce:d3:85:0f:85:5b:56:31:e2:c5:8e:60:6d:
a2:2b:65:7c:e9:95:c3:07:98:1e:c0:08:04:ef:a3:
af:c8:7e:c8:c7:55:f4:b0:4e:f5:ff:19:db:d4:78:
c1:8a:73:14:06:e3:fe:01:d4:7c:17:b5:75:72:9b:
94:e9:27:33:06:cb:ac:be:9c:ca:b7:6a:b3:00:87:
80:d4:9b:77:af:f7:6a:b2:02:c4:cd:f5:82:f5:7f:
f3:7c:d4:e9:0f:22:7c:75:cd:6c:87:fe:f3:d1:bc:
1f:30:ae:44:55:3e:b4:0e:9c:0f:40:1b:de:5b:52:
b6:23:a9:91:d6:34:9d:ba:de:e8:16:ae:eb:d6:32:
15:cb:1a:71:65:51:b5:90:af:ce:13:7a:43:81:d4:
18:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:07:22:A5:84:B0:02:CA:2E:CE:5D:E9:0F:AD:39:64:02:95:AF
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/WHIHIqWEsALKLs5d6Q-tOWQCla8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.43.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9a:7f:66:a7:41:8c:b4:1d:84:6b:c8:6e:71:2e:9f:91:57:
fe:07:2e:b8:cb:05:da:27:d6:ca:7c:0a:ab:cd:27:40:a2:15:
43:b3:75:41:24:e8:68:a1:97:cd:3f:0d:ee:49:1d:29:d6:c7:
c5:76:b0:9a:f8:a1:2e:6f:08:e9:3b:95:88:7f:74:64:6f:ce:
7d:39:72:06:eb:b4:4a:26:07:94:ac:14:f7:fe:a8:85:15:c0:
82:bc:55:d3:e1:8b:0e:58:7d:48:44:58:9b:3a:59:36:c3:b2:
29:59:e0:3c:5d:c0:26:d6:6f:1f:cd:05:8b:44:b7:48:e8:11:
0e:85:59:ec:81:bf:b5:47:88:34:95:20:22:5f:19:0a:d1:fc:
63:78:81:fd:e4:de:98:98:1a:9d:a1:04:c8:ba:23:cc:e0:d4:
05:1d:f8:e0:78:c5:2e:d9:2d:41:5b:3b:3c:29:8b:72:86:02:
7e:a1:ce:79:a2:61:42:04:e0:e6:09:7b:ed:ff:9f:0a:22:d4:
7a:10:a7:cb:b8:43:3f:e3:b2:40:11:6c:52:48:de:e4:e0:ba:
34:c8:82:eb:7a:a1:30:95:34:fa:55:a7:58:f4:81:d1:e1:70:
8f:3b:f7:b9:98:ff:f7:46:b4:16:00:ad:60:2d:1e:3b:4a:c6:
b8:9b:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:00 2025 by rpki-client