Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/WGYEguUavpCm1up5aoWx17M7VF8.roa
File: WGYEguUavpCm1up5aoWx17M7VF8.roa (raw, json)
Hash identifier: 7LrFDAvn49AXPONunh9HIMSmPEiDJLlOh62u/CVqUuI=
Subject key identifier: 58:66:04:82:E5:1A:BE:90:A6:D6:EA:79:6A:85:B1:D7:B3:3B:54:5F
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019725A4EDDDDC8C75830B4B2265725E43C2
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/WGYEguUavpCm1up5aoWx17M7VF8.roa
Signing time: Sat 31 May 2025 09:20:55 +0000
ROA not before: Sat 31 May 2025 09:20:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211575
IP address blocks: 2a14:67c1:b500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:25:a4:ed:dd:dc:8c:75:83:0b:4b:22:65:72:5e:43:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: May 31 09:20:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58660482e51abe90a6d6ea796a85b1d7b33b545f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:18:e0:7f:21:ad:1d:ca:47:14:b9:f2:33:
48:b9:1e:62:57:59:a0:c0:e8:89:ea:64:c8:ad:c6:
15:67:5f:7c:bc:2f:77:a9:9e:4d:ec:71:31:ee:09:
ce:e2:e4:09:21:af:15:32:63:3a:36:72:34:4a:a2:
03:5e:8f:09:e7:71:44:1a:3e:e3:ab:d9:c1:f6:c8:
e8:9e:1e:e1:83:ec:a3:c2:d5:59:ed:57:14:d7:6b:
fe:14:d9:f9:99:ca:48:f2:c9:94:91:ec:bb:c4:1c:
3c:13:13:aa:1c:09:d9:7f:3e:05:fa:92:c7:7c:a4:
2b:c1:34:6a:c3:12:05:ac:55:4d:9c:d0:42:61:ec:
cb:30:01:9b:74:ac:4c:dc:0f:c5:9c:31:5b:8c:38:
97:b1:44:5d:38:da:16:9e:f0:61:0b:a6:ae:5b:0f:
b8:46:db:67:67:c8:c9:c6:6f:15:c0:f3:d8:bc:14:
e6:e3:b2:7b:cc:3a:e4:e6:a8:3c:f4:55:27:2d:bc:
7e:36:a5:32:c6:60:b5:04:12:17:a6:7c:ae:b6:d8:
85:82:6a:94:68:81:58:07:03:06:52:7e:80:3f:fc:
7c:c3:95:fa:c5:bf:e0:63:99:3d:81:aa:d0:26:10:
48:8b:79:df:b4:e1:f2:ec:19:1e:a7:8a:a8:78:e9:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:66:04:82:E5:1A:BE:90:A6:D6:EA:79:6A:85:B1:D7:B3:3B:54:5F
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/WGYEguUavpCm1up5aoWx17M7VF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:b500::/40
Signature Algorithm: sha256WithRSAEncryption
27:32:ad:ca:aa:78:5d:75:c4:3f:b6:e0:f2:cb:b6:e4:16:73:
66:9f:99:f7:05:12:59:86:d2:5a:ad:ac:c4:09:80:ad:c3:d7:
7e:08:50:5b:6e:dc:c0:3a:ad:6b:04:7e:5a:1c:e7:00:4f:73:
f2:4d:3f:32:61:f1:63:88:5b:0a:e1:24:b3:72:79:61:4c:6e:
01:98:73:41:08:4f:ba:51:a1:50:40:1c:89:a5:d8:a7:51:9e:
99:6f:0e:88:8a:26:c3:8a:ea:05:eb:d6:43:a4:27:ed:ca:91:
f9:2c:6d:55:9c:6d:1b:39:94:37:9b:ff:b1:91:eb:af:74:ca:
18:f2:68:9b:50:67:a6:f0:a0:a0:d9:06:20:4f:0a:93:df:a6:
73:55:dd:89:b4:0b:a8:67:58:16:56:95:b9:4b:a0:6e:b7:06:
b9:6d:24:cc:df:11:ca:d7:0d:44:b6:a0:c7:83:ec:6e:30:61:
85:e3:93:cd:c8:6a:14:f2:10:63:78:f5:6b:cd:f8:bb:f2:43:
5a:38:3d:76:0a:51:3e:13:5e:36:52:84:50:6d:e6:72:2a:3f:
82:84:0e:95:cc:a6:7d:c3:d5:b8:a7:a5:f1:28:ea:c1:d7:1e:
92:68:5a:f2:5f:a3:a8:02:8f:85:0a:69:42:b5:d2:59:75:0c:
98:99:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:31:19 2025 by rpki-client