Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/W17y4AqWeVoamMjv6FsUcy7DUXw.roa
File: W17y4AqWeVoamMjv6FsUcy7DUXw.roa (raw, json)
Hash identifier: CdVGoNQNVuuqlV6RqgjD70UOQ7aqq9JxQApj0kVywjE=
Subject key identifier: 5B:5E:F2:E0:0A:96:79:5A:1A:98:C8:EF:E8:5B:14:73:2E:C3:51:7C
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0195CE9DCE89387D074AF65144125D106284
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/W17y4AqWeVoamMjv6FsUcy7DUXw.roa
Signing time: Tue 25 Mar 2025 18:43:23 +0000
ROA not before: Tue 25 Mar 2025 18:43:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:6a40::/29 maxlen: 29
2a0d:6b40::/29 maxlen: 29
2a0d:6ec0::/29 maxlen: 29
2a0d:7140::/29 maxlen: 29
2a0d:8cc0::/29 maxlen: 29
2a0d:9740::/29 maxlen: 29
2a0d:97c0::/29 maxlen: 29
2a0d:a3c0::/29 maxlen: 29
2a0d:ad40::/29 maxlen: 29
2a0d:b2c0::/29 maxlen: 29
2a0d:b540::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0d:c1c0::/29 maxlen: 29
2a0d:cc40::/29 maxlen: 29
2a0d:ce40::/29 maxlen: 29
2a0d:d3c0::/29 maxlen: 29
2a0d:e1c0::/29 maxlen: 29
2a0d:e240::/29 maxlen: 29
2a0d:e340::/29 maxlen: 29
2a0d:f140::/29 maxlen: 29
2a0d:f5c0::/29 maxlen: 29
2a0d:fbc0::/29 maxlen: 29
2a0e:8c0::/29 maxlen: 29
2a0e:19c0::/29 maxlen: 29
2a0e:adc0::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:2200::/29 maxlen: 29
2a0f:9a40::/29 maxlen: 29
2a0f:cb80::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:ec0::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:25c0::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4480::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:6040::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:8bc0::/29 maxlen: 29
2a11:9040::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9900::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:a240::/29 maxlen: 29
2a11:a2c0::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b4c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c2c0::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e2c0::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:640::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:e80::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2800::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:57c0::/29 maxlen: 29
2a12:6480::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8780::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:a500::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:bc00::/29 maxlen: 29
2a12:bc80::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:ce00::/29 maxlen: 29
2a12:cf80::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:d380::/29 maxlen: 29
2a12:d800::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:9d:ce:89:38:7d:07:4a:f6:51:44:12:5d:10:62:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 25 18:43:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b5ef2e00a96795a1a98c8efe85b14732ec3517c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:26:57:c3:6e:2c:3a:06:f7:3c:57:b5:e9:
2e:f7:2a:21:ad:c8:6f:d5:a6:0b:57:cf:45:58:80:
1a:49:8d:31:35:d4:f0:76:43:67:7f:fc:af:5c:b6:
5a:82:e0:3f:ae:78:86:27:17:90:91:29:c5:4a:b6:
55:89:89:c2:d0:5d:11:40:bf:32:f1:72:54:b0:e4:
12:c0:aa:a9:b3:f4:d2:37:e4:ff:6c:3f:4a:c4:4f:
95:17:9d:c0:d0:7f:40:9f:96:38:e2:0d:78:0b:51:
6b:e1:50:e3:e8:88:b0:81:26:54:cf:7a:17:7c:ff:
f4:d7:d1:a2:8b:1b:4c:7c:ed:b6:5f:28:fa:07:28:
eb:0f:98:f6:c0:8f:61:44:a5:80:14:45:53:a1:4d:
52:4f:8b:bd:7f:33:2e:d7:c3:81:53:67:a2:7c:24:
f3:0b:e4:61:9d:d2:03:13:93:da:ce:a4:db:63:fd:
34:03:60:dc:38:bd:7d:4a:51:14:83:d0:58:ae:d6:
52:e7:a6:f2:9f:05:96:d2:d2:b5:97:28:88:5e:ec:
38:46:f8:98:37:75:bc:db:53:6c:eb:16:64:3f:12:
4b:6a:2f:aa:31:9e:26:e5:ec:52:3e:75:a6:8f:04:
43:61:74:33:1e:69:37:4c:2d:04:f1:b8:a4:74:21:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5E:F2:E0:0A:96:79:5A:1A:98:C8:EF:E8:5B:14:73:2E:C3:51:7C
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/W17y4AqWeVoamMjv6FsUcy7DUXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6a40::/29
2a0d:6b40::/29
2a0d:6ec0::/29
2a0d:7140::/29
2a0d:8cc0::/29
2a0d:9740::/29
2a0d:97c0::/29
2a0d:a3c0::/29
2a0d:ad40::/29
2a0d:b2c0::/29
2a0d:b540::/29
2a0d:b840::/29
2a0d:c1c0::/29
2a0d:cc40::/29
2a0d:ce40::/29
2a0d:d3c0::/29
2a0d:e1c0::/29
2a0d:e240::/29
2a0d:e340::/29
2a0d:f140::/29
2a0d:f5c0::/29
2a0d:fbc0::/29
2a0e:8c0::/29
2a0e:19c0::/29
2a0e:adc0::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:2200::/29
2a0f:9a40::/29
2a0f:cb80::/29
2a0f:e180::/29
2a11:ec0::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:25c0::/29
2a11:2d00::/29
2a11:4480::/29
2a11:4f00::/29
2a11:6040::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8980::/29
2a11:8bc0::/29
2a11:9040::/29
2a11:9580::/29
2a11:9640::/29
2a11:9900::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:a240::/29
2a11:a2c0::/29
2a11:b0c0::/29
2a11:b4c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c2c0::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e2c0::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a12:580::/29
2a12:640::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:e80::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2800::/29
2a12:2b80::/29
2a12:57c0::/29
2a12:6480::/29
2a12:8380::/29
2a12:8480::/29
2a12:8780::/29
2a12:9200::/29
2a12:a500::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:bc00::/29
2a12:bc80::/29
2a12:c980::/29
2a12:ce00::/29
2a12:cf80::/29
2a12:d200::/29
2a12:d380::/29
2a12:d800::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
6a:88:45:63:8a:a1:24:f2:0d:83:39:fc:30:8e:e6:11:22:d8:
8e:0d:aa:68:5a:70:ce:a8:76:11:ff:6a:bb:2f:4c:d0:a8:da:
7d:32:20:ff:9c:5d:c5:be:ca:04:38:37:5a:ce:95:68:7a:df:
7f:10:4f:ed:37:1c:a3:1c:4e:b2:65:28:d4:47:a3:02:db:1b:
16:52:61:24:12:df:51:df:6b:a2:db:1d:26:27:a0:a1:52:10:
7f:6f:0e:0a:c9:75:b4:35:e6:45:87:81:6f:f8:3c:bc:e5:c4:
17:19:30:e4:81:06:05:62:22:6d:0c:5f:6d:63:5e:b7:73:b1:
bf:8a:01:ae:4f:7d:fa:52:25:10:a0:b3:69:c7:1c:9d:07:78:
a7:3c:a5:d3:02:58:08:24:e8:45:15:18:15:b8:e0:e4:45:d9:
22:64:22:ba:ab:c9:45:fe:07:40:b9:fd:20:43:d5:4b:07:e4:
f6:5d:a5:88:cb:d4:73:58:6b:57:51:f4:ed:86:a3:fa:43:5b:
f2:51:c7:a9:f8:30:3a:cc:4f:76:8f:d2:71:a2:ce:44:b9:e0:
13:9e:01:50:81:3a:43:c1:e0:8e:f0:99:e3:d4:5a:9f:c2:24:
66:94:c7:de:3c:6d:b9:3d:05:11:e8:92:bc:db:df:b0:ab:fc:
bb:32:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:29 2025 by rpki-client