Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/WJ8mDGp2R9SerzYw88vehn3HSik.roa
File: WJ8mDGp2R9SerzYw88vehn3HSik.roa (raw, json)
Hash identifier: h5SXKLsi4QXI6eIjbslnIuS0eoxKGY5pZRrkhG82mKM=
Subject key identifier: 58:9F:26:0C:6A:76:47:D4:9E:AF:36:30:F3:CB:DE:86:7D:C7:4A:29
Certificate issuer: /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial: 019691626097A3397BEF5A22D42428B49142
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/WJ8mDGp2R9SerzYw88vehn3HSik.roa
Signing time: Fri 02 May 2025 14:24:25 +0000
ROA not before: Fri 02 May 2025 14:24:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.22.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:62:60:97:a3:39:7b:ef:5a:22:d4:24:28:b4:91:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Validity
Not Before: May 2 14:24:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=589f260c6a7647d49eaf3630f3cbde867dc74a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:ac:65:e0:40:ce:8d:94:03:15:1c:bf:d9:
72:14:5e:26:be:3f:f3:d7:80:6b:ec:0c:8d:f2:a2:
41:43:6c:fb:8e:db:6b:ea:e0:69:9c:c9:81:98:a9:
7f:7e:78:7d:30:c7:ea:08:c6:1f:70:49:c2:b9:85:
bb:65:b7:ee:06:f0:8b:74:c4:96:2a:36:c4:66:3b:
41:0a:4e:8e:ad:22:c8:56:35:af:bd:b9:4d:4e:51:
6d:86:69:9d:a2:11:6b:b9:eb:2e:e1:cb:5d:d7:e2:
55:4f:af:26:91:1b:77:09:90:ba:41:0f:83:cd:1d:
ff:79:c7:8b:23:d1:ad:12:bb:73:29:c0:25:92:f2:
1e:7a:89:8f:e3:84:c1:6c:ea:87:49:c1:6e:3a:9c:
c5:88:80:d2:a9:a2:5b:dc:b2:3b:37:2f:c4:64:80:
31:69:ce:27:fa:a6:07:b7:3e:9e:7a:27:11:30:89:
f4:bd:ab:20:32:17:23:99:a5:53:de:d2:0d:cf:52:
22:37:36:f0:f7:07:13:1a:7f:bf:1e:9d:b4:62:77:
ef:c0:77:84:87:54:a1:e9:e2:7f:78:6b:c6:0e:95:
e5:47:82:94:94:85:cf:92:78:5b:c3:57:9e:6d:55:
79:56:b7:f2:a0:3a:ac:36:c3:57:fc:e3:ee:56:2f:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9F:26:0C:6A:76:47:D4:9E:AF:36:30:F3:CB:DE:86:7D:C7:4A:29
X509v3 Authority Key Identifier:
keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/WJ8mDGp2R9SerzYw88vehn3HSik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:ab:9d:46:fa:a7:db:ca:0a:ff:22:77:41:f0:2b:29:9a:3f:
ef:9d:8c:98:e7:a7:49:73:a7:fb:70:1c:6e:51:50:92:57:f0:
c7:52:e4:98:92:a2:42:02:a9:98:03:77:8b:f4:ae:17:18:7b:
c1:61:3c:61:e6:ef:3a:47:03:4b:e6:1f:76:71:ca:45:68:03:
f5:de:e9:1e:20:c1:37:ad:c5:c8:79:a4:bf:fb:94:81:11:42:
8b:88:d3:9a:f4:bb:47:37:29:71:63:1c:e2:01:4f:52:d1:49:
02:5b:cc:07:47:9d:0b:2e:52:65:2f:cd:1a:74:6c:c1:3c:ac:
7f:f9:66:f9:f0:1e:6f:6e:f6:f3:1f:1d:06:7d:d1:47:b4:05:
f5:01:51:2d:bc:53:22:22:6a:e6:36:56:0d:f2:32:ae:15:8b:
11:1d:32:c4:10:1d:09:87:58:83:51:7b:0d:0f:ed:ef:4f:bd:
19:a9:c7:08:6f:2d:68:40:1d:2b:ef:21:89:7c:31:19:10:5a:
49:aa:f1:ac:db:6b:23:74:03:7a:ce:03:91:41:a7:f9:f8:39:
bf:34:ee:ad:1c:1c:15:ae:18:88:cb:66:d7:db:cc:86:94:86:
53:40:2d:96:82:0f:30:eb:2b:34:ae:ab:7c:94:1d:7c:19:40:
ca:dc:23:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 22:21:59 2025 by rpki-client