Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/wtPW8rjnB4NENZEIpc5mDSX_MnA.roa
File: wtPW8rjnB4NENZEIpc5mDSX_MnA.roa (raw, json)
Hash identifier: 2y63dYWO6V1/po4xW8CvZ0E3YT0MzqdNzzTlTFQ0Gb0=
Subject key identifier: C2:D3:D6:F2:B8:E7:07:83:44:35:91:08:A5:CE:66:0D:25:FF:32:70
Certificate issuer: /CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Certificate serial: 019661A32D9F90C475538780A1D8F4046FAA
Authority key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/wtPW8rjnB4NENZEIpc5mDSX_MnA.roa
Signing time: Wed 23 Apr 2025 07:53:25 +0000
ROA not before: Wed 23 Apr 2025 07:53:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39019
IP address blocks: 185.204.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:a3:2d:9f:90:c4:75:53:87:80:a1:d8:f4:04:6f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Validity
Not Before: Apr 23 07:53:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2d3d6f2b8e7078344359108a5ce660d25ff3270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:c9:4d:91:b7:c5:3d:ef:f6:df:96:26:62:
e6:69:69:a4:0a:a3:4b:7d:4a:00:90:55:db:1e:80:
e2:6b:a6:ae:3d:97:a4:07:97:5b:9f:71:ac:6b:ec:
b5:23:7a:54:d1:27:78:90:29:01:f3:48:26:07:b8:
54:29:69:a4:70:e7:b4:08:61:91:22:07:0c:bc:e9:
4e:be:85:8f:a3:2a:a1:99:82:ed:84:85:0c:3e:04:
9c:01:b8:50:2c:70:76:13:27:f7:45:a9:50:34:c3:
bf:8c:86:8f:3f:2b:28:ce:f8:21:07:8a:52:97:45:
41:8c:e3:d1:0e:d6:af:a0:bb:79:12:e7:af:7c:1a:
ba:d7:63:81:23:5f:2c:1b:da:a9:6e:8e:84:8d:4a:
10:e4:f1:c9:3e:65:3b:f5:2f:4d:24:6f:6f:1d:48:
66:40:2b:42:60:cb:c4:dd:58:b6:dd:53:b3:44:cd:
ec:8a:f5:b5:f5:c9:0d:24:2b:9f:de:59:fd:a0:4d:
0a:6e:e9:83:ed:5a:d0:52:32:e6:29:fa:f3:b5:af:
67:23:fd:28:27:da:d4:55:88:25:d5:fe:ba:fa:3e:
5c:50:35:58:97:b7:c9:ee:98:a5:ef:5c:07:09:b0:
a6:17:23:48:22:80:66:7c:67:6f:75:d9:23:02:bb:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:D6:F2:B8:E7:07:83:44:35:91:08:A5:CE:66:0D:25:FF:32:70
X509v3 Authority Key Identifier:
keyid:BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/wtPW8rjnB4NENZEIpc5mDSX_MnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.100.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0a:bf:53:41:92:b8:70:ab:13:da:e5:ec:4e:a3:b4:41:61:
56:72:e7:9a:bc:73:fb:2b:cf:c7:2f:96:f1:a8:6e:5c:c6:3f:
da:6f:de:55:94:0b:c4:a2:7b:1d:dd:56:a4:42:f0:fd:45:5e:
18:71:06:ae:91:a4:29:76:d7:bc:38:a3:d6:8d:c8:14:00:af:
df:de:bc:e2:a5:bf:16:5e:0f:7e:54:20:4a:ef:fb:63:57:8f:
25:0d:9e:88:59:6e:06:29:e5:f0:cd:b9:52:bb:a6:21:7f:71:
2a:f3:71:0d:a6:01:62:ac:5b:54:57:fc:ae:d0:f4:9c:a3:b6:
80:6a:53:ea:6e:2d:23:3c:43:0e:a1:56:d5:49:64:5b:f0:b5:
8b:67:af:aa:57:5e:49:2d:a3:45:df:d6:b0:7f:09:66:a2:60:
cc:57:54:1d:52:43:03:5f:02:91:61:37:6e:89:5b:cf:9c:03:
4c:b5:84:86:3d:d2:26:7c:15:c8:d0:96:76:46:6e:0d:ef:97:
5f:11:a6:4e:d7:3b:83:8f:7d:a7:54:0f:29:3f:73:9c:f9:08:
e4:c3:7c:93:3d:bd:84:9f:7c:c5:e6:1a:cb:20:8d:11:85:9c:
43:e8:af:5a:f4:f4:f0:4d:27:93:31:79:de:74:0d:72:56:ea:
cf:df:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:43:52 2025 by rpki-client