Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/WNd31FKfDVJsTEByrggsuNBHueg.roa
File: WNd31FKfDVJsTEByrggsuNBHueg.roa (raw, json)
Hash identifier: tedpCisNTHVOKJzXOyZVhC8FIa9J18s6krEoaMi/yH0=
Subject key identifier: 58:D7:77:D4:52:9F:0D:52:6C:4C:40:72:AE:08:2C:B8:D0:47:B9:E8
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0194266B49F2869C3678B3A57D9D1BBB76CC
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/WNd31FKfDVJsTEByrggsuNBHueg.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150006
IP address blocks: 2a12:f8c3:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:49:f2:86:9c:36:78:b3:a5:7d:9d:1b:bb:76:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58d777d4529f0d526c4c4072ae082cb8d047b9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:2d:a0:d4:cb:6a:d5:38:6e:ea:b4:d7:26:
53:c0:61:a7:78:f2:f0:90:9a:9c:45:81:56:cc:19:
b1:76:9d:0f:64:00:d7:ff:c5:0d:81:13:21:1e:65:
04:63:0d:d3:3e:8a:c7:4b:37:ca:6c:3f:e7:d3:92:
95:f9:be:ed:ac:e3:d5:aa:21:16:aa:50:28:52:36:
78:cd:63:09:c8:a1:8f:ad:2f:03:f2:05:ae:fe:14:
fe:4d:dc:9b:64:81:55:10:ab:ea:5c:7e:de:07:6a:
d6:35:c0:3f:e2:88:c2:d1:f8:22:47:bc:a9:eb:66:
3f:c0:6d:a9:4d:26:33:fa:0d:1c:bd:b6:2e:d1:cf:
cb:7e:70:69:27:bf:a3:f8:c1:81:34:14:ef:32:4a:
7c:32:0f:52:b5:a4:52:93:f5:85:3f:60:d2:f9:e6:
b9:ab:7f:26:70:3f:ed:84:85:2a:9d:5e:60:7f:f7:
67:86:92:a3:b9:22:8f:b7:69:9a:78:0a:fa:87:fc:
f7:b2:e9:26:04:e5:08:d2:e7:ce:d4:28:13:a1:f4:
48:78:b1:85:8b:37:30:37:d5:95:03:e8:41:9e:bc:
74:21:e8:da:4f:b9:ff:1c:a8:97:2a:d0:e8:7e:ad:
b9:e5:4c:6b:fc:b5:79:44:f3:0e:38:5d:fb:e5:4e:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:77:D4:52:9F:0D:52:6C:4C:40:72:AE:08:2C:B8:D0:47:B9:E8
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/WNd31FKfDVJsTEByrggsuNBHueg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c3:1000::/36
Signature Algorithm: sha256WithRSAEncryption
33:93:a1:a6:b5:8d:ac:7a:cb:c3:08:e3:e3:6d:ca:d2:28:9c:
fc:13:81:e8:5d:f2:9b:f6:88:d2:26:db:36:6a:72:c5:a5:99:
60:88:b5:e1:bf:43:03:e3:de:d1:50:3c:29:2c:37:59:89:ed:
69:b5:af:0d:9a:33:22:43:28:ae:cd:2b:55:df:04:a5:b3:f4:
76:9b:76:7c:57:fa:d3:e1:dd:94:e3:ea:68:a8:d0:26:29:b6:
89:8e:e5:83:7a:03:cb:28:ef:ec:bc:59:04:fa:90:b9:83:0f:
f7:85:ef:91:9d:2d:d6:8c:39:21:12:43:1d:9c:7f:bc:19:8c:
b0:5d:48:0a:66:f8:ec:90:02:f0:0e:b2:27:87:24:86:b6:e7:
28:a2:f6:ca:b9:88:1d:73:1d:5c:75:30:16:0f:6c:ec:fc:76:
9c:57:0e:57:0d:34:36:df:b7:b6:0c:75:29:44:53:2d:57:d3:
b3:67:6e:c3:c0:a8:45:c1:fc:c4:70:a9:08:ec:29:14:01:c0:
a0:86:86:9d:00:9a:e3:e3:bd:8c:d0:3e:28:01:6f:13:e5:9c:
6b:7c:f1:eb:84:49:1a:74:25:8c:0e:3a:fd:41:47:ff:ba:0b:
ca:f1:d0:63:2d:a7:ab:bd:8f:9f:89:04:2f:5f:b6:97:05:5c:
0b:4c:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:38:20 2025 by rpki-client