Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/myWr4RM0KjaGFLw7rDn2QhBZHjQ.roa
File: myWr4RM0KjaGFLw7rDn2QhBZHjQ.roa (raw, json)
Hash identifier: v3M/68TF83GRhsjwIwly84Tjuf8KBFKnUC06+RwEUuo=
Subject key identifier: 9B:25:AB:E1:13:34:2A:36:86:14:BC:3B:AC:39:F6:42:10:59:1E:34
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 0194F0A1C3A5D17EA536C8E7682FB251D303
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/myWr4RM0KjaGFLw7rDn2QhBZHjQ.roa
Signing time: Mon 10 Feb 2025 16:12:00 +0000
ROA not before: Mon 10 Feb 2025 16:12:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215638
IP address blocks: 2a14:f700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:a1:c3:a5:d1:7e:a5:36:c8:e7:68:2f:b2:51:d3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Feb 10 16:12:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b25abe113342a368614bc3bac39f64210591e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:72:f7:d9:16:15:84:0a:6b:1d:39:a6:3c:
da:f5:a8:ed:95:ab:38:46:3c:fe:b2:ad:1a:66:35:
4d:fb:21:2d:7e:a6:a9:d7:a6:dd:4a:be:e0:f4:97:
f9:da:40:de:e5:c1:ed:f4:b1:5c:e8:70:15:83:85:
69:a3:d7:71:be:7c:15:7e:aa:05:14:93:ac:58:84:
40:14:87:5f:31:1f:3f:c6:96:29:38:37:cc:86:15:
98:cd:3e:69:16:c7:b0:73:3f:1d:83:be:e1:50:4a:
21:02:31:79:cc:08:1f:8e:30:3a:18:68:cc:6d:d2:
fe:52:c1:66:01:c8:3a:a7:30:1e:64:91:b3:04:ff:
45:f0:53:71:ab:ea:ff:88:36:ff:e2:58:82:f5:d6:
3b:24:dd:79:d9:81:50:71:0a:db:d7:ce:ad:ed:f5:
a6:8f:51:c6:69:a5:73:cc:ff:3a:8f:32:2f:bc:16:
ec:99:ea:39:4c:51:0e:1d:9f:20:e2:d2:16:59:3c:
7a:0f:78:87:0e:fb:c0:74:e4:83:75:be:a5:49:a8:
39:ff:e3:ac:c1:79:96:70:8f:b9:52:fc:cc:2e:6d:
3f:55:2a:dd:72:98:7e:6a:82:c7:f6:45:d1:f3:b1:
68:92:fb:84:25:e1:3f:22:08:e5:77:b0:fc:40:7f:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:25:AB:E1:13:34:2A:36:86:14:BC:3B:AC:39:F6:42:10:59:1E:34
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/myWr4RM0KjaGFLw7rDn2QhBZHjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:f700::/29
Signature Algorithm: sha256WithRSAEncryption
25:e3:8c:29:f6:a5:54:34:62:c7:4b:d5:03:58:5c:7c:ab:5c:
db:87:02:34:12:22:d0:8c:5d:12:09:d6:b5:47:5f:93:d8:ff:
7a:5c:65:13:ce:82:7e:1e:52:ac:68:46:7f:58:14:6e:00:06:
17:6b:f3:c0:8d:e9:ad:66:ae:c9:e8:1f:1b:e9:7f:e2:ca:fb:
0a:d5:31:80:10:81:88:24:a8:e0:ec:cd:f5:7e:aa:61:f1:80:
97:31:e8:19:2c:bb:34:c4:57:3f:5a:6e:23:86:bc:64:ec:41:
a0:57:e8:43:95:6b:82:b5:db:32:98:b9:54:b5:8a:e3:ec:e7:
77:63:3a:14:a0:65:fa:f1:e5:c1:44:a3:b8:7d:c5:b2:aa:fb:
74:de:7e:5a:5a:e4:91:ae:fb:1f:9c:1a:83:0b:ee:24:dd:cb:
50:ef:ba:41:0f:0d:06:00:6b:f7:a9:a2:d6:24:34:10:09:de:
ae:93:47:21:e5:ef:ce:ed:90:42:6d:03:86:50:e1:5c:e7:30:
49:45:45:ee:18:36:b9:e2:4a:8f:cc:4f:af:75:f0:ef:b3:d9:
fc:73:3f:a2:12:91:ae:89:fb:5d:35:77:50:8d:7c:3d:d4:ee:
d2:b6:ea:21:fe:c7:37:5d:cc:ba:c0:0f:c3:58:10:df:79:e0:
bf:1f:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:03:48 2025 by rpki-client