Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WARsgwxQht-4HvtCsqyvHUfR8mY.roa
File: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (raw, json)
Hash identifier: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=
Subject key identifier: 58:04:6C:83:0C:50:86:DF:B8:1E:FB:42:B2:AC:AF:1D:47:D1:F2:66
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 01951D2F70116384E402DFA697F30CD2CE5E
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WARsgwxQht-4HvtCsqyvHUfR8mY.roa
Signing time: Wed 19 Feb 2025 07:50:02 +0000
ROA not before: Wed 19 Feb 2025 07:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57140
IP address blocks: 185.145.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:2f:70:11:63:84:e4:02:df:a6:97:f3:0c:d2:ce:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Feb 19 07:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58046c830c5086dfb81efb42b2acaf1d47d1f266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:83:9e:08:b5:01:e2:3d:e2:2c:12:a5:36:
5d:70:93:cc:f3:84:a3:16:1d:a5:16:3e:9b:0c:75:
6f:e8:52:a2:82:c6:1f:b0:48:8a:1a:08:4f:22:1c:
f7:05:01:0e:03:de:cf:c2:b1:16:fd:e4:9f:46:61:
6b:3e:44:3e:b2:51:c3:49:fa:86:fb:ff:ef:51:c9:
46:05:29:99:cf:95:db:b6:49:65:04:1d:c2:59:b3:
ed:38:53:7f:b8:03:8c:d0:60:fc:8c:86:59:d2:a2:
e2:fb:32:d3:13:b4:74:bb:26:cc:14:83:a7:6e:8c:
be:8c:63:fe:ff:08:e7:df:60:b1:67:2a:d1:5e:a1:
bf:f9:80:b9:c2:3d:58:ac:4c:67:80:d1:5e:22:30:
e1:a3:69:38:5a:4a:16:69:e8:0f:1d:70:05:bd:1b:
7a:78:7a:16:a5:ea:3e:9d:31:39:57:81:e6:af:aa:
92:8f:41:37:8a:f7:ca:2a:fc:ea:e6:15:fa:3e:6e:
12:c2:86:95:62:39:bd:da:7e:eb:3c:f9:03:8e:23:
78:19:3e:28:55:13:41:36:ee:04:b1:f7:ee:51:24:
34:e9:f1:0c:76:18:64:cc:e9:78:24:6e:e0:c5:2e:
f2:24:a2:c2:7b:b6:32:c2:3b:d4:49:92:37:a5:a4:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:04:6C:83:0C:50:86:DF:B8:1E:FB:42:B2:AC:AF:1D:47:D1:F2:66
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WARsgwxQht-4HvtCsqyvHUfR8mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.40.0/22
Signature Algorithm: sha256WithRSAEncryption
76:e7:24:ac:77:2a:ed:d3:e7:7d:cb:7d:b3:fd:ac:0f:d2:85:
b5:a7:7d:12:c8:3c:04:c6:42:ed:f8:ca:bb:2b:a4:11:98:01:
8f:e2:a8:ef:b4:03:ef:e6:43:65:34:0c:3f:f9:2b:84:aa:4a:
0f:17:67:44:e4:af:99:5b:c9:fa:28:18:67:dc:16:3c:08:98:
1f:c5:f3:8f:2e:20:92:5c:e1:d6:dd:fa:a1:d6:6f:14:f6:d9:
bc:43:4c:c3:d9:7e:2a:99:7b:f1:d1:51:27:f6:92:6f:2a:c5:
31:74:8b:06:c5:ce:4d:32:cc:78:2a:75:b5:a5:ee:4d:c4:4a:
98:b2:db:b4:67:ae:7b:7f:25:6c:da:d1:af:4f:5b:07:8e:18:
a0:cc:40:a2:f4:15:77:77:80:9a:27:0f:c6:a0:d1:1f:86:a6:
a6:2a:53:00:c8:2d:f9:bc:40:7c:18:86:8e:36:6b:e0:e4:02:
49:66:93:b1:87:d6:b7:59:f8:31:8e:04:a9:aa:0f:76:37:16:
df:df:15:1f:22:3a:92:1f:f9:82:da:5c:56:c2:0d:8b:96:72:
39:72:95:a9:74:6b:d7:a8:b4:e2:9b:3e:c3:a3:f7:fb:a6:b1:
bf:7f:d0:31:8a:69:ec:aa:71:b8:56:dc:8b:45:de:70:99:33:
d9:fb:92:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:11:41 2025 by rpki-client