Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/wapfnXLlA7DvDqRs4g9z4YLu3L0.roa
File: wapfnXLlA7DvDqRs4g9z4YLu3L0.roa (raw, json)
Hash identifier: Hxhpn18vB/H4YZziS5GXimeo8mFzlErLcl0bPjfu1Vc=
Subject key identifier: C1:AA:5F:9D:72:E5:03:B0:EF:0E:A4:6C:E2:0F:73:E1:82:EE:DC:BD
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019423D757F975595D2221F1C5C78F39B6BB
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/wapfnXLlA7DvDqRs4g9z4YLu3L0.roa
Signing time: Wed 01 Jan 2025 21:48:22 +0000
ROA not before: Wed 01 Jan 2025 21:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212139
IP address blocks: 62.175.249.0/24 maxlen: 24
84.124.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:57:f9:75:59:5d:22:21:f1:c5:c7:8f:39:b6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 21:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1aa5f9d72e503b0ef0ea46ce20f73e182eedcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:ba:4c:64:2e:b3:02:b9:39:ce:e7:8f:bf:
51:b5:ee:bf:e3:8a:bb:36:fe:fc:10:08:91:c5:3c:
8b:36:ae:60:51:47:fd:2e:d9:8c:59:dc:ce:6e:93:
ed:c5:74:be:e9:e5:48:0f:b1:59:da:66:39:89:24:
b5:86:2b:0d:88:fa:eb:c6:f4:b0:3c:37:49:30:ca:
6e:13:d2:2c:7e:28:53:39:cf:8b:e7:37:fb:9b:09:
84:3a:ec:8d:54:09:da:c7:d8:82:ad:52:db:94:d2:
75:25:c0:94:35:8e:52:39:46:0f:34:86:75:61:1d:
d8:c8:3e:fa:ab:a9:fd:c7:41:ee:5c:08:75:95:f4:
64:47:8e:2a:8a:5c:d9:23:7b:1e:10:37:f0:df:30:
ec:c4:45:54:cc:a4:f2:c9:c5:7f:d9:10:13:98:88:
d5:c6:b1:d4:78:38:1f:7c:b7:38:0c:36:4b:18:8c:
2d:03:ee:4b:19:23:3f:d3:44:15:b8:e4:91:d9:59:
44:22:8c:82:5a:23:e1:b8:4a:81:1a:63:a8:4b:46:
0a:cf:18:17:aa:bf:80:97:64:41:a1:d1:ef:62:e2:
6b:f5:54:d6:9f:f1:f9:f1:a0:3b:30:e8:26:f3:b6:
f8:8d:db:07:4a:4e:e1:0e:00:a5:20:a2:14:29:e4:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:5F:9D:72:E5:03:B0:EF:0E:A4:6C:E2:0F:73:E1:82:EE:DC:BD
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/wapfnXLlA7DvDqRs4g9z4YLu3L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.175.249.0/24
84.124.119.0/24
Signature Algorithm: sha256WithRSAEncryption
22:83:8d:c5:f5:ff:b5:22:ac:12:21:10:61:03:88:df:0a:02:
78:e2:c4:8d:95:ba:bf:d4:c3:e3:fe:20:51:1a:aa:1c:30:af:
bd:34:6f:6f:e8:95:5b:cd:21:91:72:5b:a3:cb:5a:b9:ee:40:
ce:b0:15:8f:60:89:87:6e:3f:36:81:4d:2c:75:46:a5:27:f4:
45:63:84:62:ad:ad:5e:85:13:73:d3:95:ce:01:13:9a:fa:84:
a5:7c:2a:35:aa:00:6a:79:10:de:fa:99:59:2a:4a:e5:a2:67:
38:64:ac:51:ca:ef:b1:50:a9:48:1a:d0:f8:28:df:7e:b5:2a:
b2:97:3b:d5:29:52:04:59:00:7f:4d:e3:2d:05:f3:50:cb:ca:
d5:9a:ca:4a:96:39:cf:d5:d6:39:8e:ae:29:c0:af:a9:2b:87:
ec:1d:22:51:25:1e:51:65:bc:70:8d:f2:66:c0:5d:50:ef:78:
e3:05:73:33:98:54:70:95:a9:b1:3f:81:ad:d0:f8:8a:43:0f:
6b:62:28:80:4e:7f:30:ab:17:82:14:73:ea:40:5f:59:5a:e0:
11:1c:14:35:8c:3e:9e:f7:30:c1:e7:3e:16:8b:9a:63:70:75:
77:d4:02:43:ea:68:c7:f8:d9:67:c8:80:e6:41:8e:02:de:45:
51:85:13:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:18:28 2025 by rpki-client