Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa
File: wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa (raw, json)
Hash identifier: mivAj3GDT4jOPus8xPGZd/X8AcNpsiWRHJ+pMHxOhWY=
Subject key identifier: C2:30:2F:68:67:A8:67:C6:CA:F2:C7:5B:0E:11:CF:AB:47:01:F1:F4
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 019425214FD7D914CC76ABE389D6CEDDC629
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa
Signing time: Thu 02 Jan 2025 03:48:47 +0000
ROA not before: Thu 02 Jan 2025 03:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39806
IP address blocks: 185.166.232.0/23 maxlen: 24
185.166.234.0/24 maxlen: 24
185.166.235.0/24 maxlen: 24
195.190.149.0/24 maxlen: 24
195.190.150.0/24 maxlen: 24
195.190.154.0/24 maxlen: 24
195.190.157.0/24 maxlen: 24
2a0b:2200::/29 maxlen: 64
2a0f:c140::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4f:d7:d9:14:cc:76:ab:e3:89:d6:ce:dd:c6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Jan 2 03:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2302f6867a867c6caf2c75b0e11cfab4701f1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b3:ef:7c:3d:92:67:5a:6b:ec:e7:0e:88:e1:
9e:cf:e3:3b:3d:19:07:c4:b0:ff:57:83:77:74:53:
84:54:fc:35:a4:c2:72:dd:4f:48:ba:64:59:84:67:
74:48:95:e6:2c:3b:9f:4e:f1:af:ae:14:94:bc:5b:
fa:f6:0f:1d:ce:35:f6:20:d6:21:f9:dd:e9:59:bd:
45:81:b1:b1:97:2f:aa:ea:f9:08:c7:76:06:db:c6:
48:b6:df:c3:db:3e:d0:49:98:d1:06:7e:5b:f2:ba:
19:ac:c6:8b:d6:35:cd:b4:b2:6e:28:c3:1f:e1:f4:
9d:16:5c:48:38:0d:28:53:9d:d2:18:82:3e:48:85:
e9:a9:f2:ea:70:fd:e4:27:9c:c9:46:cb:cf:30:2f:
54:3e:9e:f3:8b:e9:da:12:4e:a8:32:ff:74:75:dc:
d7:55:e0:b3:56:fc:37:cd:bf:24:4d:d7:91:b6:2a:
af:02:88:f2:e5:41:0b:82:91:d7:67:00:0c:6a:87:
1f:01:98:73:56:43:54:9a:b3:c6:b5:1f:57:62:01:
b8:1c:e9:af:40:7c:4f:98:6d:a5:1b:30:90:98:74:
c2:e0:07:58:94:12:ae:19:86:f9:87:ba:ee:27:ae:
53:cb:85:b2:1c:94:4b:39:bc:43:ff:db:03:fa:a9:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:30:2F:68:67:A8:67:C6:CA:F2:C7:5B:0E:11:CF:AB:47:01:F1:F4
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.232.0/22
195.190.149.0-195.190.150.255
195.190.154.0/24
195.190.157.0/24
IPv6:
2a0b:2200::/29
2a0f:c140::/29
Signature Algorithm: sha256WithRSAEncryption
6d:42:22:ab:fa:63:52:5a:0f:c5:99:a8:09:87:60:6e:c9:5b:
dd:dc:77:9e:54:6c:ed:49:fe:85:4c:28:64:0f:88:66:16:ff:
ab:bf:90:ec:2f:cd:3d:62:48:8a:bf:cc:7f:11:aa:a4:cf:26:
1f:aa:0f:37:61:de:36:cc:a5:5a:e9:8a:51:c2:02:08:f0:ab:
33:de:67:28:13:b7:eb:dc:db:f3:cb:de:fc:f8:85:7e:1f:71:
45:dc:47:12:14:ba:d0:9c:11:a8:2c:42:47:a8:c6:0a:8d:44:
32:ec:5f:f0:21:cf:f3:c2:c1:d6:10:d9:39:df:69:2e:a2:81:
dc:f5:1e:f8:46:71:9b:b2:34:cb:4b:ff:88:f9:5a:4c:65:d3:
dd:d3:2b:84:73:1d:ae:16:3b:0f:9e:59:e9:89:a4:50:b8:d4:
bb:76:b4:76:96:98:d5:68:8e:b4:da:2f:fc:06:eb:e9:89:fa:
6c:93:7e:02:e4:05:18:29:9f:ea:09:fe:2f:3d:7e:98:e2:fe:
4d:aa:f7:97:d9:02:df:0c:c8:7a:a5:d8:f9:d4:21:89:13:c6:
21:2b:73:58:d2:bf:27:23:5d:d0:4f:d3:5b:eb:c5:dd:3d:99:
48:80:31:95:0e:11:3a:ed:e3:b0:08:06:fa:27:f5:05:c7:ca:
1e:c1:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:03 2025 by rpki-client