Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/WxskEzg_eTHvSuEBzAA22sakZZs.roa
File: WxskEzg_eTHvSuEBzAA22sakZZs.roa (raw, json)
Hash identifier: K1rJfDbGKj9KRp/YpH3B7J7gJ4JwFgTcq0fjTVjZ8TI=
Subject key identifier: 5B:1B:24:13:38:3F:79:31:EF:4A:E1:01:CC:00:36:DA:C6:A4:65:9B
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B680C63468313171E16DC71CF56600
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/WxskEzg_eTHvSuEBzAA22sakZZs.roa
Signing time: Thu 02 Jan 2025 15:50:59 +0000
ROA not before: Thu 02 Jan 2025 15:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200702
IP address blocks: 45.159.16.0/22 maxlen: 22
77.120.56.0/22 maxlen: 22
91.212.198.0/24 maxlen: 24
91.212.201.0/24 maxlen: 24
91.212.220.0/24 maxlen: 24
91.212.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:80:c6:34:68:31:31:71:e1:6d:c7:1c:f5:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b1b2413383f7931ef4ae101cc0036dac6a4659b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:83:79:bb:53:ae:b5:4a:27:a1:69:8f:4a:
f4:f1:66:54:d1:08:9a:cb:a5:30:ee:cb:55:3a:ef:
ee:a2:b6:f5:f3:09:b9:4f:d7:2c:fe:e5:b2:83:03:
13:a7:47:35:51:6a:98:e1:a2:86:9d:50:dc:1f:e0:
0c:a0:3b:b9:43:dc:be:43:d3:99:80:a2:11:52:87:
62:d0:91:72:69:a8:ab:b9:ca:5f:44:4c:f3:43:b7:
5d:d8:f3:5d:d3:ca:f0:6d:1e:6c:50:ff:d2:80:41:
51:85:b4:fa:42:a6:5e:7b:bd:09:40:f4:8c:2b:d7:
c7:fa:74:1f:54:57:a9:2c:5c:5c:73:b8:91:5a:50:
0c:6b:75:7a:99:ab:83:e9:85:30:76:7c:0f:d7:e8:
d3:a5:30:8c:b9:20:ce:69:d9:80:8c:7a:64:57:3c:
a2:0e:28:e4:29:42:89:bc:28:13:02:1e:41:36:10:
9a:9b:d6:de:a4:75:f8:fa:4a:0c:9f:52:e9:e3:b0:
4f:e1:f7:ef:50:8a:ae:54:c5:a3:31:f3:00:38:8e:
41:83:7a:59:18:39:bf:19:06:32:3d:06:71:fa:d6:
f7:d7:c7:9d:bc:c1:5f:57:d4:69:91:a1:57:0a:83:
c2:d5:9a:1c:50:84:4a:1e:75:72:c1:59:4f:c8:b7:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:24:13:38:3F:79:31:EF:4A:E1:01:CC:00:36:DA:C6:A4:65:9B
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/WxskEzg_eTHvSuEBzAA22sakZZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.16.0/22
77.120.56.0/22
91.212.198.0/24
91.212.201.0/24
91.212.220.0/24
91.212.226.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c8:31:7b:bb:90:d2:49:be:c7:26:ab:12:da:e0:c0:72:84:
da:08:2c:68:58:f3:c9:ac:6d:8c:cb:0d:1e:97:9f:30:52:0d:
1a:02:65:f1:d6:d9:0c:1a:7c:1d:61:d5:78:ce:a6:f5:90:fe:
ca:f4:e0:82:4d:73:71:62:8e:6e:46:3b:d1:86:39:74:c7:a7:
d2:fe:2c:1c:10:9d:ee:fd:9d:c9:c8:03:a9:00:78:aa:e8:89:
57:71:bb:80:32:6f:f3:a6:a5:52:68:3a:28:78:4d:50:bb:5e:
38:64:12:d2:90:2c:4b:92:82:6a:ed:80:51:5d:b6:df:c7:4e:
ea:ee:0a:04:e6:3b:4b:d6:82:0b:dc:46:db:1e:72:bd:1b:ac:
b5:73:a6:2f:6f:78:b1:79:9e:56:a9:c3:c4:0c:7f:96:38:04:
ba:0a:37:23:0b:7a:09:ee:77:ea:77:95:a5:ce:f1:81:55:8c:
a9:9d:56:de:0e:66:26:b1:2d:79:72:77:be:55:53:09:d1:37:
42:d6:e1:fa:08:64:88:93:bc:a8:39:ce:7f:d2:a8:37:da:c4:
10:c4:59:89:5e:41:94:51:87:24:b2:2d:d5:73:15:45:37:cd:
54:56:34:86:29:f9:ba:f2:f1:b1:f3:99:fc:cf:7c:5b:23:01:
a6:6a:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:08:38 2025 by rpki-client