Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/WntehPztUAsCnfsYWJyPGRUsUHM.roa
File: WntehPztUAsCnfsYWJyPGRUsUHM.roa (raw, json)
Hash identifier: 5/L8DbJ4CG3bN8z8g844cMQvNk+i0ElV2AgHgE9q718=
Subject key identifier: 5A:7B:5E:84:FC:ED:50:0B:02:9D:FB:18:58:9C:8F:19:15:2C:50:73
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 019425FD84C39951ABFDD45C0D6283FB84E1
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/WntehPztUAsCnfsYWJyPGRUsUHM.roa
Signing time: Thu 02 Jan 2025 07:49:19 +0000
ROA not before: Thu 02 Jan 2025 07:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204342
IP address blocks: 185.251.164.0/22 maxlen: 22
185.251.184.0/22 maxlen: 22
188.240.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:84:c3:99:51:ab:fd:d4:5c:0d:62:83:fb:84:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Jan 2 07:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a7b5e84fced500b029dfb18589c8f19152c5073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:59:1f:44:8e:80:aa:7b:32:87:98:5d:11:
44:06:34:37:4c:59:80:f8:1d:37:a3:49:84:6e:f6:
4b:49:93:87:e5:de:78:e9:d8:a2:19:0f:4d:c0:62:
7e:16:bb:2a:83:a5:bb:66:31:4a:fd:84:09:34:ae:
8f:ea:6b:89:26:ff:f3:1f:ef:5f:2d:30:a1:16:a6:
5b:b7:ac:94:43:e3:f9:85:89:a9:8c:82:7a:20:d5:
b1:7e:f8:d9:62:78:12:a5:f3:e8:fe:ee:d7:2a:0f:
ef:80:9c:4b:6e:bf:03:c9:91:e1:89:85:e7:59:b8:
6f:b4:32:4b:ad:6b:17:c8:95:a6:6a:0e:24:91:2f:
0f:a3:cd:43:d3:37:85:38:5e:fe:7f:cc:22:bd:e9:
0c:57:de:12:bb:70:e8:58:96:1b:3a:3a:4c:e6:e6:
f1:a1:eb:3b:2a:6c:75:f5:85:53:75:78:8c:a8:df:
df:09:3a:60:c7:85:81:3d:ec:c3:2d:32:65:b1:99:
5a:e0:87:d6:7c:f8:bf:04:12:e3:77:ae:8c:b7:1f:
57:51:20:4d:a8:7d:06:13:7b:e8:70:6f:70:6f:5c:
a6:3f:d1:37:c9:51:a3:ea:fc:66:82:12:2c:67:8d:
6e:9b:99:b0:6c:60:0a:27:35:8d:9b:5b:d0:8e:ae:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7B:5E:84:FC:ED:50:0B:02:9D:FB:18:58:9C:8F:19:15:2C:50:73
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/WntehPztUAsCnfsYWJyPGRUsUHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.164.0/22
185.251.184.0/22
188.240.40.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:ea:20:26:b6:0c:c5:b8:3a:b8:c8:89:63:22:dd:d2:e0:04:
f5:7d:01:44:23:06:ef:00:d1:00:5b:f8:20:70:57:2f:f0:1b:
dc:9a:7f:f6:09:b5:5f:80:e8:0d:7d:ee:ce:5e:20:38:75:55:
4a:62:41:36:8c:84:9c:3d:5e:d4:a1:90:e2:17:2b:86:e3:96:
98:ed:05:32:31:f3:31:7c:ce:ed:f1:8a:23:82:80:4f:b4:c5:
0b:40:f1:19:98:fa:de:d6:12:43:ed:25:bd:d2:ca:d9:33:7d:
6e:46:27:c9:7b:ba:42:f5:9e:b6:e6:35:b7:9f:29:a9:aa:8a:
1d:65:52:97:66:3d:5b:90:03:ed:56:1c:79:b9:3d:f4:16:4f:
cf:b2:ee:9e:0f:ec:03:cd:9a:22:15:3e:9d:28:39:ab:be:2d:
06:ac:df:8b:14:5d:ec:75:cb:12:3f:1b:a3:57:0b:6d:e2:84:
84:75:da:ea:30:81:52:80:ae:c5:8b:33:90:9f:12:d8:06:d1:
b6:e8:75:84:0f:f9:4a:06:a5:ba:cd:05:c7:4a:20:8b:60:31:
6a:2b:7f:68:5f:66:1f:87:e5:b2:39:51:70:73:6b:de:37:74:
22:d2:4d:d8:4b:bf:ed:27:22:fd:7e:a5:91:43:be:eb:4e:7b:
62:bc:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:46:58 2025 by rpki-client