Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa
File: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (raw, json)
Hash identifier: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=
Subject key identifier: 59:DA:D9:C6:1C:B7:7C:BA:39:73:90:22:E8:C4:5D:4F:2A:90:E3:AF
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B5960E74CA913AD83D73FC28B23C0
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35773
IP address blocks: 109.160.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:59:60:e7:4c:a9:13:ad:83:d7:3f:c2:8b:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59dad9c61cb77cba39739022e8c45d4f2a90e3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:86:d5:78:0d:69:00:11:93:1f:f3:9e:5d:
db:73:18:db:3a:9e:fa:15:f2:05:7c:36:c5:a8:e4:
fb:45:f2:d1:ba:ea:61:a3:25:7c:15:05:1d:9c:f1:
27:4b:61:74:6e:7d:a3:c2:ab:54:ec:1d:88:93:ef:
8b:e4:7e:dc:82:34:cd:99:1b:39:eb:b8:f4:87:e2:
ec:b5:27:9b:22:51:5f:79:92:9a:c9:c8:49:6c:fe:
88:1c:61:66:12:39:ba:6a:c3:dc:49:c2:fd:fe:91:
3d:cd:b1:5c:c4:6c:eb:49:73:4f:53:1b:a2:3e:a8:
9c:99:6c:65:a4:f1:69:8f:0d:c5:04:2b:73:d7:3d:
d0:44:97:1e:38:3f:3c:36:aa:91:61:3a:65:51:be:
93:da:76:53:f1:08:00:fa:2f:ad:2d:56:3e:96:67:
1e:6d:d1:0a:5c:3e:0b:d1:0a:06:39:b9:3c:cc:6d:
88:99:bb:06:3f:de:d4:28:fe:0a:1d:b8:ee:f5:c7:
7d:82:30:ab:32:9a:8a:a1:91:32:98:a4:8c:74:a0:
6e:d1:57:b7:48:3c:3c:15:c1:7e:09:ad:b2:08:11:
19:f4:69:7c:a9:4c:e9:fe:ad:20:31:ae:a6:58:4e:
b7:c4:fe:49:6e:9c:dc:5d:cb:ce:55:7f:1f:fa:67:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:D9:C6:1C:B7:7C:BA:39:73:90:22:E8:C4:5D:4F:2A:90:E3:AF
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.112.0/24
Signature Algorithm: sha256WithRSAEncryption
23:57:4c:10:74:cd:01:f4:cf:6f:ed:46:46:5a:f5:91:9a:72:
99:d0:a8:40:08:81:bb:5f:e3:1d:4e:ed:a9:34:6c:e5:57:22:
3f:34:94:5d:6e:6f:32:6f:70:6b:e9:a0:ad:d6:d5:3b:00:c7:
cb:04:e8:1f:d9:d4:7d:7c:59:c1:85:1c:9b:8e:13:3d:9b:ea:
fa:6d:f6:9d:04:3f:d1:30:e6:0e:e5:d5:3c:f4:94:a3:98:b6:
53:db:68:54:f2:c9:77:bb:eb:77:04:6c:25:46:35:98:e9:ef:
dc:a5:a3:2b:6a:98:f9:70:f7:58:6e:8d:96:77:d8:92:da:8e:
12:1e:aa:17:74:d1:27:b2:4a:d0:5c:ce:b7:05:6c:4a:4c:04:
c9:84:a3:53:23:df:c6:e5:e9:4a:86:9c:51:f4:a0:d3:e8:00:
e1:ef:bc:6f:c3:41:59:d8:c3:ca:d0:63:d2:55:85:34:d0:82:
82:a3:78:12:51:4b:eb:d0:89:b1:2a:38:b3:ec:69:3b:24:24:
31:7a:04:ae:b8:d3:5b:9a:b4:4c:a0:01:58:d0:09:20:0d:a1:
60:14:d5:e3:2d:22:84:2c:14:92:55:a4:0c:f1:56:44:77:11:
d7:09:a9:37:a8:52:8a:97:50:ee:d0:5f:fb:e1:64:bc:83:5a:
5d:c0:2c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:56 2025 by rpki-client