Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RWSlH40poPuU7lIaA_m-iOincKY.roa
File: RWSlH40poPuU7lIaA_m-iOincKY.roa (raw, json)
Hash identifier: QWeA9zXF4CcSnV8A3Huoe8skZDzL5oSr4haJ/o4Xw9Q=
Subject key identifier: 45:64:A5:1F:8D:29:A0:FB:94:EE:52:1A:03:F9:BE:88:E8:A7:70:A6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427482A187B5EC947F7DF03C5258F0717
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RWSlH40poPuU7lIaA_m-iOincKY.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152920
IP address blocks: 2a0f:ac00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2a:18:7b:5e:c9:47:f7:df:03:c5:25:8f:07:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4564a51f8d29a0fb94ee521a03f9be88e8a770a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:32:11:00:dc:1f:67:42:3d:16:96:04:c3:
b8:cd:b6:58:bb:45:75:84:ec:2b:a8:e2:1d:fb:05:
d2:9f:3e:18:8b:77:ee:31:fb:7c:df:4a:fe:f3:1b:
81:81:a1:48:a0:db:82:34:29:c3:d4:ef:4b:48:da:
3d:18:9e:5b:8e:df:bb:01:ad:87:88:85:f2:2c:77:
42:37:35:ff:54:09:3c:25:d0:6d:e1:80:88:eb:7b:
78:85:1a:b8:04:48:14:7c:53:34:7d:c4:2b:57:88:
91:72:bd:e9:7a:54:fe:75:fe:34:2c:f1:1e:0e:f9:
8e:59:6c:e0:86:e3:07:53:6a:d6:b1:6a:7d:e2:38:
b0:91:a4:90:40:8e:6b:18:ea:22:c4:66:e1:2e:ae:
ed:cb:97:d5:83:56:a2:f5:6c:63:d6:af:86:69:ee:
27:c4:a5:bf:ec:ad:9a:29:7a:75:cc:38:e9:49:3d:
56:7a:0f:a0:1d:46:0a:1f:36:cc:87:1f:c0:e8:61:
68:04:89:9f:94:75:04:39:94:36:49:19:1f:f9:3d:
0d:a6:26:15:e8:eb:b8:f3:e4:ce:c2:94:8a:9b:82:
d7:d9:63:f5:74:67:99:3c:69:25:0b:d7:e6:b6:12:
60:6f:b4:74:e5:b6:01:d5:4e:31:50:a4:fd:ce:80:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:64:A5:1F:8D:29:A0:FB:94:EE:52:1A:03:F9:BE:88:E8:A7:70:A6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RWSlH40poPuU7lIaA_m-iOincKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ac00::/29
Signature Algorithm: sha256WithRSAEncryption
c7:f2:ea:89:cd:53:de:86:86:9e:3e:b5:5d:07:46:b0:1c:c8:
fa:e9:bc:f6:03:09:c4:2e:ce:a2:ec:82:d8:40:d7:51:0c:62:
01:a5:f8:55:87:ff:3f:3f:c0:4c:f6:17:d4:43:68:d6:a6:ab:
a9:4a:7e:c7:be:97:7b:a4:5f:1c:30:23:02:ce:9a:03:ba:61:
1b:9d:56:79:55:f9:06:bc:cf:ab:aa:82:31:38:7e:a4:f6:a3:
6d:63:e6:ad:f2:36:04:62:8e:ff:bc:22:95:66:bb:98:45:dd:
34:23:cc:67:7b:66:28:a3:cd:6c:fa:b7:a1:a6:87:a5:b4:33:
1f:15:e7:dd:0b:40:46:76:bc:92:55:11:89:c3:7f:e6:83:8a:
fc:a0:2e:ec:1b:eb:65:a5:16:da:9d:87:5e:5d:80:ac:6c:4e:
0b:32:5d:70:9b:db:03:9d:ed:94:cd:8a:8a:d5:eb:79:68:ee:
e6:91:2b:3c:61:b5:b4:76:b0:aa:4a:03:22:03:99:cd:1a:2c:
9f:31:77:51:26:ae:c4:89:df:d0:1c:bf:99:37:68:a0:43:51:
0d:40:c3:09:ef:84:67:95:09:60:c7:c4:4b:41:f7:fb:84:48:
cb:95:17:33:e5:cb:05:ae:bc:71:ff:79:ca:a4:b5:a7:56:81:
42:08:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:41 2025 by rpki-client