Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/r_WAi-eWzHC7Psr81UVNU3kzOJw.roa
File: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (raw, json)
Hash identifier: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=
Subject key identifier: AF:F5:80:8B:E7:96:CC:70:BB:3E:CA:FC:D5:45:4D:53:79:33:38:9C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 019424B3F02F1774DC8827F8B8BEC962B39E
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/r_WAi-eWzHC7Psr81UVNU3kzOJw.roa
Signing time: Thu 02 Jan 2025 01:49:19 +0000
ROA not before: Thu 02 Jan 2025 01:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 2a04:1240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f0:2f:17:74:dc:88:27:f8:b8:be:c9:62:b3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aff5808be796cc70bb3ecafcd5454d537933389c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:62:ee:13:bc:5f:54:00:fa:4d:a5:ab:07:
5a:e8:f0:bf:6a:93:f5:40:07:b5:04:8c:67:13:69:
4a:0a:ec:1e:8e:09:af:d1:2f:12:f0:02:a8:69:1e:
c0:06:31:ea:36:e0:c4:c9:54:5f:c2:ba:69:08:ba:
57:5b:f5:c8:16:4e:df:7a:6f:1d:b0:a4:5f:cc:b8:
d4:85:c3:0f:74:74:fb:79:a6:d6:0b:7b:19:2d:04:
5b:65:8f:1a:b0:39:ad:cc:dd:85:ca:79:e7:6d:ad:
75:41:4c:74:1a:a0:6d:9c:df:94:0d:2d:c6:c7:06:
64:62:37:d0:25:68:a3:88:ad:c5:67:c6:76:83:85:
04:5e:98:8f:0a:88:fb:df:1d:21:69:22:63:ec:79:
c9:14:11:d7:5f:3b:64:0c:1f:3c:b2:5b:71:52:9a:
42:d7:2e:7a:6a:cb:f1:0f:f9:a7:38:e2:99:ca:fa:
2d:13:f6:64:8e:8e:5a:08:85:40:86:1c:44:49:21:
e8:06:e8:09:ae:eb:ba:47:57:c1:25:47:97:c3:1a:
33:5d:34:b1:7e:47:8d:d4:5a:42:1a:ba:4e:4f:38:
29:a2:4c:cc:fc:84:c1:bd:f2:74:42:6f:78:52:b5:
6d:ad:9b:9b:0a:37:f1:56:9f:17:5b:e6:fc:c4:0f:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F5:80:8B:E7:96:CC:70:BB:3E:CA:FC:D5:45:4D:53:79:33:38:9C
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/r_WAi-eWzHC7Psr81UVNU3kzOJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:1240::/29
Signature Algorithm: sha256WithRSAEncryption
03:14:e3:9a:33:c4:ae:4d:94:14:9c:27:f6:f5:2e:f0:e2:ac:
89:59:9d:4c:5c:10:ac:0c:63:2b:78:1f:52:7e:db:74:6e:07:
9f:ca:e9:30:cd:b8:90:00:be:68:0a:7c:de:4c:7b:19:dc:ce:
8d:0a:0e:8d:9e:8e:29:e8:f4:d3:1c:c7:21:c8:1f:25:06:18:
e7:5d:1a:37:39:9a:2b:7c:1e:a2:ef:0f:ca:21:c7:c1:59:0b:
bb:4f:2f:6f:c4:71:82:68:f6:e1:c3:d1:4f:a9:6c:28:ca:8e:
c3:57:55:6e:ad:4f:eb:4e:75:80:5f:3b:cf:1e:da:26:aa:f3:
5d:e2:0e:aa:5d:96:47:f6:67:f8:b2:d1:d9:52:24:81:00:02:
0c:51:05:ac:18:2f:1e:10:4e:55:dd:f7:aa:31:69:9a:a1:a9:
e5:7b:99:ec:0d:72:40:d0:56:b5:f7:7f:cc:52:44:f5:63:25:
05:6e:80:cb:93:2e:de:81:bc:0e:33:1c:2a:5f:e3:83:b5:d2:
44:1f:77:72:fc:6b:32:6a:cc:b8:e3:2e:03:76:29:68:ab:ba:
b1:a9:a4:f6:84:24:c8:81:49:46:85:fa:bf:13:52:26:d3:18:
19:e6:f7:1f:bb:00:ce:f3:62:51:de:e4:20:e3:a0:12:32:83:
0d:2d:df:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:36 2025 by rpki-client