Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/cwftnOMJWL6OI0cFl6W2kZiEivw.roa
File: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (raw, json)
Hash identifier: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=
Subject key identifier: 73:07:ED:9C:E3:09:58:BE:8E:23:47:05:97:A5:B6:91:98:84:8A:FC
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 019428262054F5E97346CFF287702E9A426A
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/cwftnOMJWL6OI0cFl6W2kZiEivw.roa
Signing time: Thu 02 Jan 2025 17:52:54 +0000
ROA not before: Thu 02 Jan 2025 17:52:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212413
IP address blocks: 185.235.98.0/23 maxlen: 23
185.235.98.0/24 maxlen: 24
185.235.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:20:54:f5:e9:73:46:cf:f2:87:70:2e:9a:42:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Jan 2 17:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7307ed9ce30958be8e23470597a5b69198848afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:0c:b6:23:1d:f2:d2:e6:29:ee:68:44:3b:
46:cc:ff:66:6b:c9:fb:7a:d8:5a:45:18:6f:da:02:
73:c5:ca:59:2e:10:2c:d5:03:72:b8:5d:be:f8:99:
c7:f2:25:40:28:87:79:e4:4d:ee:6e:11:93:84:8f:
a1:d6:ff:f0:19:73:fe:40:b2:c8:af:d1:9a:df:6f:
6e:50:53:ef:cc:c6:04:d0:6e:68:e6:70:3c:e9:a9:
25:67:78:1f:0d:e4:1c:23:80:6d:7d:ab:6a:64:c4:
71:54:88:05:8b:21:7e:6c:cd:ce:01:7c:d5:ab:38:
b0:5f:e7:1d:e1:ca:7a:a7:4a:a7:9e:f3:ef:29:60:
4e:22:bc:d9:5f:e7:e0:1a:c6:08:91:9d:bf:08:db:
0b:a4:f5:53:1a:c0:98:38:f6:1d:51:83:35:83:cb:
d3:17:63:29:68:bf:ab:09:ac:8f:e8:2d:0c:11:22:
da:d7:90:0a:d6:b8:af:d6:c0:c5:c4:00:46:dd:ef:
d8:3c:99:04:dc:98:23:83:e9:30:b6:63:97:aa:00:
27:a3:e9:42:cd:cc:93:c8:cc:03:11:b5:5e:8a:18:
50:27:c3:96:cc:62:9e:6a:07:55:98:08:b8:67:61:
c1:fe:be:10:42:19:05:65:be:4b:c1:4c:88:5a:a1:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:07:ED:9C:E3:09:58:BE:8E:23:47:05:97:A5:B6:91:98:84:8A:FC
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/cwftnOMJWL6OI0cFl6W2kZiEivw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.98.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:7a:57:db:9e:27:e6:43:88:b9:2a:e9:31:a0:10:9a:43:d5:
02:83:09:d3:89:64:99:5d:25:49:d6:67:2a:6f:92:a1:be:5f:
6a:c5:26:57:3a:80:96:16:75:6b:a8:73:c5:2c:bd:0d:55:19:
fb:e5:79:ed:16:00:60:eb:97:e6:2d:e6:f0:d3:47:c8:70:2c:
70:8e:a6:c4:d9:6a:27:9a:4b:5a:0f:10:28:13:47:41:04:8c:
59:e5:7c:42:af:50:ef:de:a8:d7:bd:7e:00:8f:dd:09:ff:6c:
6d:a8:94:6f:cf:ff:ea:03:82:f2:b0:44:8e:ab:98:34:89:c1:
08:d3:44:af:76:68:37:60:00:20:f0:9b:a4:85:01:dd:b2:9f:
d0:83:6f:8d:5f:b7:8f:a9:bc:74:93:ea:1f:b4:31:cd:68:7a:
99:b4:33:a9:0f:b3:c0:ce:c1:4e:3b:f0:99:8d:66:d4:3f:3f:
74:41:a8:99:08:85:48:a0:e2:61:1d:46:4c:b9:5c:06:83:19:
d6:a5:07:d1:07:53:3a:76:a5:92:3d:59:d0:85:b3:d1:7f:a2:
50:39:f8:57:55:43:a1:fa:6f:a6:96:ce:2c:52:5e:dd:63:c0:
e8:c8:84:c8:1c:95:90:42:36:d7:97:3f:0b:ae:0a:21:ad:21:
b7:05:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:31 2025 by rpki-client