Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/WJhqTCUN_AjGjAYRDp33eZN0BY4.roa
File: WJhqTCUN_AjGjAYRDp33eZN0BY4.roa (raw, json)
Hash identifier: 06Htmns2yq5ClkGiqHYQcD9sTifSqYU3RXoOiPSPCkE=
Subject key identifier: 58:98:6A:4C:25:0D:FC:08:C6:8C:06:11:0E:9D:F7:79:93:74:05:8E
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0196B0CEE28237EEFFC024B5BCF90080EA46
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/WJhqTCUN_AjGjAYRDp33eZN0BY4.roa
Signing time: Thu 08 May 2025 16:51:10 +0000
ROA not before: Thu 08 May 2025 16:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215955
IP address blocks: 81.22.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:ce:e2:82:37:ee:ff:c0:24:b5:bc:f9:00:80:ea:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 8 16:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58986a4c250dfc08c68c06110e9df7799374058e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:6d:1d:a7:12:e5:10:3c:60:96:2f:2e:5a:
8d:45:bf:ac:37:f6:56:31:5c:54:c7:4c:e6:72:ad:
c2:88:88:31:d8:3b:39:64:cc:b7:be:e2:90:d9:ef:
f9:57:60:2c:7d:57:f9:0d:6d:d9:74:cd:f2:25:7e:
c7:65:85:24:27:5f:e7:59:7d:c3:2b:90:4a:71:be:
7d:c0:b9:c8:3e:f7:8b:bd:65:cb:ef:78:03:c0:b1:
c5:79:44:91:f3:6b:11:a9:4d:87:d9:3e:40:6f:d1:
9c:02:f1:48:cb:83:9e:de:97:06:25:4b:3d:2a:84:
22:4f:fb:fc:56:47:b8:dc:f8:8e:76:f3:b1:2a:af:
5a:42:32:60:ab:b9:73:33:f7:c9:7a:a0:63:15:4a:
a3:46:da:03:9b:30:b8:0d:70:28:c2:b7:6c:66:5d:
54:5c:cf:90:88:6c:ce:fc:10:11:47:d5:88:65:c5:
96:4c:06:7d:0d:df:ce:c6:7f:54:cc:d7:47:cc:c0:
41:47:fe:f6:63:bf:d2:32:13:79:80:fe:9f:ce:e0:
e0:9d:0f:e6:c1:61:0c:97:82:aa:61:9d:3e:68:05:
06:7d:61:c5:d8:be:b0:00:af:81:aa:41:f7:5e:b1:
ca:a9:a5:69:72:02:fb:04:ad:a7:36:88:24:04:e3:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:98:6A:4C:25:0D:FC:08:C6:8C:06:11:0E:9D:F7:79:93:74:05:8E
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/WJhqTCUN_AjGjAYRDp33eZN0BY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a1:e4:e9:d2:01:54:48:ec:d7:29:e1:df:e5:b9:2f:d4:b0:
fb:22:5d:30:44:a5:dc:7e:0f:81:9a:ac:48:de:99:20:e8:7c:
eb:af:84:b0:9e:2c:20:4d:a4:6f:e8:ce:9b:76:4d:65:b1:2d:
ce:0d:50:4b:9e:bc:ef:16:a9:73:05:bf:b8:a1:ea:f8:d6:55:
aa:af:50:ef:05:93:6d:07:6d:72:2d:59:93:b0:59:04:4f:98:
25:bd:1c:b5:76:b2:fd:49:ba:be:83:0c:01:3c:f8:f3:9f:52:
3f:b8:e1:5e:52:0e:b9:d1:ed:90:14:89:aa:23:9d:f5:cc:ef:
f5:85:cd:52:51:d4:64:46:ff:0c:6a:c6:a1:1c:4d:5a:d1:30:
54:91:29:b8:8b:ca:dd:89:c2:f4:f2:51:45:44:bc:d4:2f:d6:
57:83:a4:99:17:88:1a:de:d7:cd:9a:f8:d4:77:29:09:5b:2b:
12:d4:20:95:e0:80:9b:4d:47:f3:0c:fd:27:00:8d:8a:ee:51:
69:11:ab:22:4c:ac:d1:a9:17:95:24:0b:27:a6:5c:89:3a:4a:
ec:48:aa:92:1b:69:d7:23:f8:f6:a2:69:14:e2:39:27:3e:f6:
88:51:c8:31:81:8c:f0:5a:ee:59:0a:65:65:d5:9e:dd:65:32:
bc:30:b7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:20:43 2025 by rpki-client