Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa
File: W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa (raw, json)
Hash identifier: Hwc+g3pqAXEzqdnTsf6BwWsSvsLJSB5kNUhL8qZNZ1g=
Subject key identifier: 5B:52:A4:1A:FD:EC:8E:DB:04:69:D9:F2:0E:76:D9:2A:24:89:D1:6E
Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial: 019690EC0A9139AE50A6FAC4B71CE8F00F65
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa
Signing time: Fri 02 May 2025 12:15:10 +0000
ROA not before: Fri 02 May 2025 12:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31420
IP address blocks: 193.151.80.0/22 maxlen: 22
193.151.80.0/24 maxlen: 24
193.151.81.0/24 maxlen: 24
193.151.82.0/24 maxlen: 24
193.151.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:ec:0a:91:39:ae:50:a6:fa:c4:b7:1c:e8:f0:0f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Validity
Not Before: May 2 12:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b52a41afdec8edb0469d9f20e76d92a2489d16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:d2:0a:21:a5:45:01:ef:60:d9:03:47:f2:
95:a8:00:45:47:16:8d:90:95:84:40:69:fc:ad:b5:
14:ae:85:df:91:2b:2f:f5:60:6d:48:0e:65:2f:02:
0a:cd:d2:20:2a:5c:db:26:c2:76:c1:4a:36:5e:1d:
ac:b7:d7:76:cb:4f:88:93:0b:29:75:44:5b:b0:1f:
7b:a4:6d:d3:76:e1:d7:98:af:6e:2f:42:b7:f0:2d:
b2:47:75:67:c4:83:f6:a4:8d:ec:36:f4:e6:0b:20:
e5:13:c7:e2:ea:f9:54:6a:29:9e:9c:95:0c:78:69:
9f:b2:ed:c8:e5:37:75:9c:e2:c8:15:ba:ae:ae:6c:
4d:08:8f:6e:9d:b2:92:be:34:65:77:e3:05:39:17:
3d:a4:71:e0:7b:dd:64:2a:c0:cd:6d:46:5a:7c:d1:
1c:9f:4f:58:82:5f:9f:28:ed:b5:c3:21:34:03:bf:
bf:9b:1f:12:54:d9:3c:43:49:ef:98:21:e1:5d:aa:
35:3e:0c:40:5d:d0:67:67:f1:1c:8b:ff:38:bb:58:
28:79:f6:06:7e:ba:3e:6f:e4:8b:cc:db:fb:9b:5e:
b4:09:87:2e:8b:e9:d8:22:76:c1:bc:ee:81:40:8c:
e1:77:96:11:81:f1:bb:d0:f4:f6:b5:a1:8a:79:40:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:52:A4:1A:FD:EC:8E:DB:04:69:D9:F2:0E:76:D9:2A:24:89:D1:6E
X509v3 Authority Key Identifier:
keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.80.0/22
Signature Algorithm: sha256WithRSAEncryption
84:05:f7:93:8a:e0:cd:d8:67:80:0a:51:bd:43:9b:9b:9e:69:
aa:70:30:b5:10:a6:d4:fe:06:c9:d1:60:db:38:4f:2b:7d:ea:
87:5c:3e:b5:52:3e:ba:4d:59:ed:39:b2:4b:83:90:fe:82:8b:
e3:a2:b6:94:f9:cb:dd:9e:36:b2:6a:42:d4:a7:74:bd:89:aa:
16:0d:5d:f7:ee:49:68:d5:df:30:ba:cc:68:b4:bf:a0:fa:4b:
f1:1f:dd:0d:62:12:cd:15:55:b3:41:2d:8b:65:b7:6a:e9:f0:
66:fe:ce:80:a3:71:0a:39:59:7c:03:10:a8:72:15:77:75:2a:
d5:64:57:e7:f9:58:74:74:f4:70:21:e3:8e:05:b0:01:a7:31:
b9:fd:1b:2c:8a:01:a8:5b:b8:f0:92:06:42:82:40:b1:7a:3c:
10:45:53:cc:fe:50:1a:0a:1b:f4:e6:ce:b6:a7:e2:45:6d:87:
52:e0:cf:ef:c7:09:98:95:12:04:b6:f5:aa:3d:e4:8d:9b:18:
06:65:fe:2c:c1:62:2f:f8:03:df:73:2c:d0:51:3b:6f:8a:fb:
4f:90:80:01:69:c1:bf:83:ef:83:9c:4b:0d:b5:5b:6a:ca:17:
f0:8d:5e:2e:52:a6:2f:fb:42:b5:4f:ca:de:58:e9:d8:0d:78:
7c:7a:9f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:50:18 2025 by rpki-client