Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/wFG_1wRlWrytiChUWS0YXy18U-I.roa
File: wFG_1wRlWrytiChUWS0YXy18U-I.roa (raw, json)
Hash identifier: t+5ZCiR/UfDzq2HyCdUNOSA3Od7Ts5iAeQxRh3YXY0Q=
Subject key identifier: C0:51:BF:D7:04:65:5A:BC:AD:88:28:54:59:2D:18:5F:2D:7C:53:E2
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 0194D62CC826A383C0B23F133DD656AC12DA
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/wFG_1wRlWrytiChUWS0YXy18U-I.roa
Signing time: Wed 05 Feb 2025 12:54:06 +0000
ROA not before: Wed 05 Feb 2025 12:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 89.184.0.0/21 maxlen: 24
193.222.251.0/24 maxlen: 24
193.223.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:2c:c8:26:a3:83:c0:b2:3f:13:3d:d6:56:ac:12:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Feb 5 12:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c051bfd704655abcad882854592d185f2d7c53e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:0e:ce:2f:cd:5d:ac:c9:5b:dc:4e:8b:ae:
a7:14:76:6c:6f:31:b4:03:4b:48:10:49:ee:f6:a9:
00:ec:ee:f4:75:c4:b0:0f:13:36:67:06:b5:58:c2:
df:00:73:bc:0d:6c:07:dc:5c:5b:c3:b5:28:70:08:
8b:d5:98:e5:c5:e4:39:2d:0e:1b:74:40:f7:9d:7b:
7b:a3:f8:f0:7c:3b:db:fe:51:f9:21:6b:93:bf:b6:
c8:9c:bb:3e:2b:cb:83:70:06:25:6d:c9:11:5e:d4:
1a:fc:ad:03:91:b9:85:08:31:34:2a:e7:9a:e4:9f:
e4:6b:d3:a9:7c:4f:f3:01:9f:3c:15:fb:6f:f2:b3:
30:ec:35:cf:06:d6:1e:59:1a:62:ff:14:ba:bb:6d:
91:d5:26:c2:fa:77:ce:9c:7a:b3:66:2d:1f:56:b0:
7c:8e:16:65:a5:ed:57:b8:d0:0c:bc:0c:1c:16:62:
7a:1b:05:99:74:48:77:db:3a:87:70:79:dc:01:b8:
05:0b:a6:0c:dd:84:fd:41:56:79:96:5a:0f:e9:65:
49:72:96:4e:e8:64:aa:fd:bb:f7:fe:b3:9e:ac:aa:
03:de:07:2c:15:91:52:33:98:54:7b:b8:40:83:64:
e2:a4:7a:04:62:76:ef:e7:30:61:90:ea:49:cf:22:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:51:BF:D7:04:65:5A:BC:AD:88:28:54:59:2D:18:5F:2D:7C:53:E2
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/wFG_1wRlWrytiChUWS0YXy18U-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.0.0/21
193.222.251.0/24
193.223.69.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2b:36:2f:06:17:d0:12:15:af:a8:84:83:e8:44:97:fc:21:
2e:88:ef:19:22:b7:e2:8c:56:37:90:c5:b0:3b:55:50:24:e3:
90:60:e0:71:48:b8:d9:24:7d:86:e3:23:b3:f6:5a:3d:a3:36:
ad:7a:51:b2:52:7f:16:eb:33:01:a0:39:e4:f4:bb:06:da:c1:
0e:6f:e8:1a:e2:e6:9c:4f:d6:23:f1:ec:5c:f6:f8:fb:91:80:
7c:f0:22:a7:97:20:4c:73:cf:b2:dc:ed:65:0f:b7:57:3a:10:
f6:c1:80:c4:d1:b8:4c:25:a0:b8:ee:f0:f7:7c:70:7e:56:d8:
fe:55:35:dd:af:10:dd:98:34:fe:83:d6:15:a4:a9:15:cd:4c:
a8:f2:51:e1:50:d8:80:ab:8f:db:35:f4:44:6a:e2:6f:0b:8b:
78:46:3c:32:bd:12:80:d7:0c:03:74:49:7e:81:fa:1b:43:6b:
d8:e3:2b:ca:33:0e:4f:02:45:0c:cc:b9:f6:c7:ca:45:7c:3c:
dd:ad:c5:bb:51:f4:08:0a:2e:c3:ff:67:91:b7:18:dd:03:8a:
eb:54:a2:f7:62:ac:e2:1e:c7:90:28:17:41:c3:67:06:48:11:
21:e9:d0:91:ca:e8:d0:79:61:af:9e:1f:b3:9a:2c:64:1c:0b:
02:23:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:21:33 2025 by rpki-client