Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/wkXfodQiMlzIrY-XwijDv3ZScmc.roa
File: wkXfodQiMlzIrY-XwijDv3ZScmc.roa (raw, json)
Hash identifier: QibJgJXwTU1FbLJ1XY5UdzigDZl+rgmIxHJ+4Yba4lI=
Subject key identifier: C2:45:DF:A1:D4:22:32:5C:C8:AD:8F:97:C2:28:C3:BF:76:52:72:67
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 0194258F9BAC703592CE58D1B58045D07540
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/wkXfodQiMlzIrY-XwijDv3ZScmc.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 176.103.222.0/23 maxlen: 23
194.169.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9b:ac:70:35:92:ce:58:d1:b5:80:45:d0:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c245dfa1d422325cc8ad8f97c228c3bf76527267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:b4:41:35:7e:c4:df:64:a3:4e:ad:7f:b8:
a0:c6:f9:94:f3:9f:38:42:50:1b:26:3c:53:be:76:
88:c4:60:5f:4f:4f:a8:3e:d2:ac:64:b6:6e:23:f6:
63:18:db:0c:4a:74:28:b8:ea:40:6b:f7:71:d1:dc:
0d:0c:83:89:b9:b1:07:2f:f3:82:79:4a:1c:4c:24:
9b:53:5b:f5:16:39:de:c5:72:70:10:2e:50:e0:48:
6f:41:57:f4:11:1d:32:22:cc:84:a2:b7:e8:81:54:
16:65:f6:f1:cb:f5:9d:49:02:67:92:63:ae:f4:7e:
07:b9:e3:56:70:dc:51:06:db:99:f9:45:01:1d:81:
44:f3:89:1c:9c:22:66:9f:d7:a9:cd:a4:95:e2:22:
3f:0a:3d:69:97:70:15:05:29:64:e9:c0:ec:33:82:
03:31:63:4f:de:67:ea:28:4e:06:f0:a5:8f:89:d0:
b0:63:f7:9e:ac:f2:a3:01:a9:6c:c0:b6:37:67:4a:
23:b8:db:49:cc:56:a7:e3:29:ab:79:c4:6e:c1:e0:
3a:20:88:0a:81:f1:8c:c3:b3:2d:57:d8:18:d2:f2:
56:85:99:71:b9:ea:fe:24:5f:b3:ef:5f:59:37:0e:
12:ac:55:31:06:4c:5d:15:1d:de:53:08:ad:ae:6d:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:45:DF:A1:D4:22:32:5C:C8:AD:8F:97:C2:28:C3:BF:76:52:72:67
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/wkXfodQiMlzIrY-XwijDv3ZScmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.222.0/23
194.169.245.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:c5:0e:fc:ab:6e:03:a3:3b:b5:3d:55:54:87:f8:e6:7e:2c:
43:89:43:fe:bb:54:c5:a6:83:d7:eb:33:75:00:2d:9a:89:04:
44:60:df:69:dd:db:57:61:cb:79:c6:f3:b0:be:68:b7:7a:31:
4e:44:5b:32:af:de:bb:0c:d1:b5:71:e7:9b:70:99:a4:9c:04:
9e:04:1b:ec:e9:c4:7e:47:b5:4f:70:85:27:ea:ab:db:97:5e:
6a:df:61:a5:2b:ce:bb:c8:23:23:d1:df:28:1e:82:93:e0:15:
b4:90:c7:c8:fe:01:8f:f9:8f:58:72:1c:ef:9b:72:c2:42:e2:
5b:f3:ff:c4:6f:40:0d:75:43:b0:2f:16:be:0e:c7:09:0a:6c:
25:be:30:76:2e:53:f4:33:3f:e0:23:eb:cb:3b:82:82:f7:55:
e4:44:9e:7c:65:0c:4b:f7:83:26:13:a1:f6:fe:1b:a2:46:65:
7d:c8:4c:d6:2e:62:ff:43:b6:59:8d:25:00:68:b7:d3:97:b5:
29:34:94:e6:a2:eb:ce:03:5f:cf:d7:03:c6:d9:7b:9c:b7:07:
ed:a9:76:28:8a:88:6f:20:ec:0e:d7:a5:94:40:5b:bb:d3:bc:
6a:a8:03:97:c5:5a:26:eb:cc:eb:72:37:ac:6d:7d:0e:cc:8c:
1a:2c:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:42 2025 by rpki-client