Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/wqytb1PA_Vs89tauNyxpWqTXHcs.roa
File: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (raw, json)
Hash identifier: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=
Subject key identifier: C2:AC:AD:6F:53:C0:FD:5B:3C:F6:D6:AE:37:2C:69:5A:A4:D7:1D:CB
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 019424B26228B2B3CE8E518C161294FC33B1
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/wqytb1PA_Vs89tauNyxpWqTXHcs.roa
Signing time: Thu 02 Jan 2025 01:47:37 +0000
ROA not before: Thu 02 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 37153
IP address blocks: 2a11:840:32::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:62:28:b2:b3:ce:8e:51:8c:16:12:94:fc:33:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2acad6f53c0fd5b3cf6d6ae372c695aa4d71dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:fa:70:e1:42:f5:9f:3c:3a:b1:58:3d:31:
87:d3:fc:72:ba:c7:e6:10:9b:38:fd:28:c9:1b:df:
0b:bc:61:0c:b6:14:f2:84:1e:90:be:e9:2e:89:f9:
10:78:15:ce:b5:aa:c9:a9:52:cf:37:4a:ba:e0:a8:
e5:7f:b4:d7:29:27:0c:87:6a:02:22:5a:cb:4d:c8:
9b:a8:9b:84:d6:f4:98:51:09:55:f6:66:ee:43:2e:
95:09:ed:88:15:fa:37:07:50:d5:bb:f2:a8:bc:8b:
63:a6:3c:cb:57:3c:5c:3c:b1:73:a6:7f:65:d8:0e:
11:51:e5:c8:85:91:4b:bc:1f:5c:ce:f9:ab:4c:3e:
cd:b5:f3:55:fa:49:86:03:53:35:e9:47:32:51:19:
c0:ae:7b:0b:ad:c9:da:24:0f:22:a3:82:ba:a5:19:
f3:11:37:ab:63:fa:4e:ac:03:6c:9f:44:82:a1:44:
94:94:b5:f1:61:e9:96:78:31:95:d4:76:20:91:57:
49:cb:02:fd:cc:7c:aa:a6:34:48:00:f7:82:04:9d:
c4:e1:6f:1a:01:fb:8b:2a:45:0b:6d:99:cd:88:cb:
0f:d3:0d:96:ee:44:fb:91:c4:6b:a7:39:f4:30:01:
e3:a4:d8:f5:8b:8a:25:78:09:83:b4:59:e0:ce:c9:
b9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AC:AD:6F:53:C0:FD:5B:3C:F6:D6:AE:37:2C:69:5A:A4:D7:1D:CB
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/wqytb1PA_Vs89tauNyxpWqTXHcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:32::/48
Signature Algorithm: sha256WithRSAEncryption
02:8c:f0:2a:ac:7d:e1:ec:d1:ba:e4:6d:f8:d5:bb:df:fd:f4:
a4:9b:bd:e9:a3:f9:e5:38:16:64:6c:f5:2f:82:44:c4:f5:dc:
bd:de:1e:2d:b9:f3:29:6e:4e:e1:7a:d2:81:f5:ae:90:f8:35:
d1:78:1c:5f:65:0f:44:0b:e9:7b:35:dd:3c:81:c4:01:81:73:
9b:50:00:58:7f:f6:5c:65:b6:82:94:2c:9b:c3:28:aa:93:dc:
8a:1b:9e:20:c7:7c:52:df:ed:eb:1b:46:66:35:9c:e9:b2:f8:
14:9b:bb:f0:c9:7a:ea:ef:e0:90:cc:cb:9b:48:93:80:41:a5:
29:a7:bc:89:67:3d:b3:74:b7:d4:56:ed:25:7c:8b:2b:a3:75:
f7:7c:47:d4:6e:84:42:cc:90:a9:4e:e5:2e:b5:f1:fb:93:76:
df:5a:55:a2:7e:74:b7:db:a6:ca:53:fe:b4:41:c2:6f:98:3d:
b7:e7:99:12:30:67:80:a1:11:15:d0:a9:86:cb:9c:6c:0b:79:
4c:8f:48:80:b7:c4:2a:da:73:21:5e:54:eb:67:10:b9:93:a6:
c9:8c:53:c1:4f:02:09:ae:d0:70:c1:d6:1f:33:80:43:3a:08:
40:da:3a:0f:96:77:00:8e:dc:dd:20:2d:ba:dc:75:90:ff:85:
d7:34:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:28:33 2025 by rpki-client