Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/WR90m5DgvTuhngQTVt_A_5zUod0.roa
File: WR90m5DgvTuhngQTVt_A_5zUod0.roa (raw, json)
Hash identifier: FY/boCiP1n6kQ8OnKj08oNsixb1HE3QlDcsMak5j0Lc=
Subject key identifier: 59:1F:74:9B:90:E0:BD:3B:A1:9E:04:13:56:DF:C0:FF:9C:D4:A1:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019671F567E752505C9E9E1FBA153B85DD0F
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/WR90m5DgvTuhngQTVt_A_5zUod0.roa
Signing time: Sat 26 Apr 2025 11:57:10 +0000
ROA not before: Sat 26 Apr 2025 11:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215633
IP address blocks: 194.107.116.0/24 maxlen: 24
2a0c:6e00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f5:67:e7:52:50:5c:9e:9e:1f:ba:15:3b:85:dd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Apr 26 11:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=591f749b90e0bd3ba19e041356dfc0ff9cd4a1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:54:fa:6f:10:0c:48:a3:48:ae:5d:80:38:
32:73:8c:d8:c9:24:6c:7d:e0:32:10:c1:aa:a5:5d:
a8:f7:f4:4c:2c:26:55:aa:82:5c:39:59:b5:1c:c7:
56:85:ac:30:79:5f:1b:07:7f:8e:5f:c6:96:85:ec:
09:a7:3b:8d:4f:2d:16:ad:70:32:44:57:bb:1a:67:
75:85:39:61:f8:ae:f2:9d:b8:a6:c1:ff:2e:dc:14:
47:25:c7:bc:7b:e5:c4:a6:0c:e8:48:9e:cd:73:86:
08:61:80:01:5d:86:8f:14:3d:76:ee:77:0a:ab:32:
c5:dd:cf:f5:c0:0d:92:18:26:57:9a:e3:82:90:5f:
4d:ee:ff:19:7d:14:29:04:b2:66:45:7e:2e:b2:a4:
43:19:d5:17:0e:e1:34:41:8c:45:2c:f0:4d:ac:7c:
56:17:91:75:88:f2:8e:a5:6b:4d:ee:06:81:96:b9:
9c:5f:2d:fb:4b:05:27:ca:26:e6:a7:2f:11:3d:2c:
88:94:57:8b:3f:9d:42:bb:51:63:4e:84:c5:c0:ea:
c3:95:63:92:d4:76:42:84:d9:f5:8f:00:18:0e:4e:
d3:4b:ed:0f:d8:3e:5f:d8:9d:99:45:d2:ba:31:35:
a4:89:19:4d:80:ec:cd:e4:de:96:ed:be:25:db:03:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1F:74:9B:90:E0:BD:3B:A1:9E:04:13:56:DF:C0:FF:9C:D4:A1:DD
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/WR90m5DgvTuhngQTVt_A_5zUod0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.116.0/24
IPv6:
2a0c:6e00::/32
Signature Algorithm: sha256WithRSAEncryption
d1:d8:de:2a:ba:6b:af:43:c7:c3:29:34:fb:54:85:f0:53:6e:
40:c4:5a:d1:4b:4b:f3:b0:72:5a:23:1b:80:51:2b:49:38:04:
6d:55:ff:d4:e8:fb:69:ab:ea:bb:63:5e:e9:9f:6f:0e:b5:9f:
89:30:8c:cb:53:39:49:38:42:a4:18:b4:f3:15:b0:cf:37:f8:
a0:3f:02:25:40:14:1d:c6:fd:be:f7:00:35:1f:88:d6:51:a4:
75:37:9b:a5:a3:f2:5c:8a:c8:65:b6:4d:25:15:31:17:df:8b:
66:9a:67:4c:b7:c0:2b:e9:c8:9f:fc:46:15:68:61:9a:e3:c6:
5e:62:b0:ef:18:88:28:7e:ff:db:02:6a:5f:11:cc:1c:ed:d0:
83:41:d7:2d:f4:78:ed:78:c6:8f:dc:e4:9b:03:8e:8b:1b:70:
c0:2f:9e:17:74:f3:25:42:1c:03:fa:08:65:3f:08:de:90:f5:
f7:a2:54:23:85:b7:67:34:90:f7:89:ac:05:55:9d:b8:12:6f:
69:ec:68:f8:b9:e8:f3:70:70:88:9c:9c:36:58:ac:47:21:ef:
37:ec:ca:13:ff:15:59:98:5f:bd:46:62:cd:5c:07:fd:9a:df:
ae:4e:87:11:a5:84:1d:14:dc:f2:7f:93:42:33:a6:a1:d5:34:
73:bb:a9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:06:07 2025 by rpki-client