Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/wNh0jMOPHCGGtlAG3PiNBZzjcno.roa
File: wNh0jMOPHCGGtlAG3PiNBZzjcno.roa (raw, json)
Hash identifier: NaE5nCG+kp0N7iEIRzHU/rkLw5QEKaxFzRCaxMZ3BjY=
Subject key identifier: C0:D8:74:8C:C3:8F:1C:21:86:B6:50:06:DC:F8:8D:05:9C:E3:72:7A
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 0194258EFFD2F605AC252C344A5D153BB7D6
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/wNh0jMOPHCGGtlAG3PiNBZzjcno.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210960
IP address blocks: 2a0e:b704::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ff:d2:f6:05:ac:25:2c:34:4a:5d:15:3b:b7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0d8748cc38f1c2186b65006dcf88d059ce3727a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:be:f0:b2:1a:88:62:33:77:db:3f:f3:86:
23:f4:de:49:52:df:a7:d1:44:f5:b9:ed:ec:64:cb:
b9:f7:42:60:51:fa:41:18:e8:2d:b9:27:3f:95:92:
10:cc:0a:80:cb:bb:e6:5b:6e:5f:89:7a:18:88:6f:
b2:0a:e2:d9:10:88:e6:77:eb:7b:78:55:8f:49:fb:
b6:40:e2:88:87:77:96:6a:38:1d:73:56:84:a7:b2:
a3:a6:72:96:2f:d6:7b:21:f0:42:5e:a2:d0:8a:0b:
7e:a1:be:22:44:6b:fb:e3:e7:62:a2:d5:d6:d9:ab:
2f:07:75:4a:99:7c:fb:4a:66:00:64:06:ae:95:7a:
df:8b:79:8d:df:d1:9b:bf:4f:3d:8f:0c:a6:a5:36:
28:92:eb:84:b4:c4:51:90:c0:ba:48:e9:ae:ca:e8:
80:4c:75:94:e2:51:47:9f:88:c1:7f:43:be:3f:62:
0f:d0:79:19:3d:4e:ce:2b:05:71:dc:31:be:03:42:
b8:33:0c:64:59:a3:4b:e5:a1:f8:d3:7e:f8:52:0e:
fb:51:7b:82:68:9c:78:e4:16:be:62:89:6d:41:83:
18:14:d6:0f:c7:ba:ca:93:53:a1:af:98:55:7f:08:
11:c4:2e:bb:4c:35:4b:ea:3a:94:2f:58:d3:f6:32:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:74:8C:C3:8F:1C:21:86:B6:50:06:DC:F8:8D:05:9C:E3:72:7A
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/wNh0jMOPHCGGtlAG3PiNBZzjcno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b704::/32
Signature Algorithm: sha256WithRSAEncryption
44:c8:63:29:8e:ae:7b:e7:e7:e8:89:9c:be:40:0c:fe:7c:29:
03:ed:a8:56:2a:42:12:df:5a:05:8d:10:ca:52:91:b2:f8:1e:
c9:16:8a:02:52:24:72:81:f3:fc:67:18:71:59:4a:33:56:43:
2d:5a:dc:b8:2c:86:72:ab:0f:5f:92:b8:3f:d0:2b:bf:e8:81:
f5:49:a9:49:fe:dc:98:e5:a5:82:e0:e1:8a:47:98:1c:1c:b6:
ac:db:8a:09:e1:36:ca:47:1f:e2:05:73:0a:bd:1a:ab:7b:ac:
32:54:bd:ad:c9:35:07:cd:be:64:58:58:c8:e1:80:1e:6e:31:
38:2d:c2:24:ec:2b:e6:25:48:d0:56:e8:79:c3:13:ea:22:f0:
d8:66:a2:81:03:73:a4:39:2b:17:61:50:b4:88:09:f2:bc:b6:
fa:f8:9e:3e:0c:84:b8:30:be:0f:fc:e9:5c:42:a8:82:4c:14:
88:51:99:81:c2:7b:72:e4:41:67:7f:42:d3:d4:85:46:3f:88:
86:c3:6e:72:38:e1:3a:45:95:13:d1:21:7d:62:db:f5:a1:27:
8d:a8:c0:21:0f:e7:e0:aa:98:05:0f:46:f0:25:76:28:be:6e:
08:f6:b0:73:d5:6e:80:83:63:77:ea:f7:aa:50:0d:66:32:f0:
8c:95:9e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:44:20 2025 by rpki-client