Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/1-W6dNN7nS41OhiX2-XV_KGHmokY.roa
File: 1-W6dNN7nS41OhiX2-XV_KGHmokY.roa (raw, json)
Hash identifier: Onsuz/Jpw7AenTCzarTD9Si7u90ClXn9NgWm5b3k5iE=
Subject key identifier: F9:6E:9D:34:DE:E7:4B:8D:4E:86:25:F6:F9:75:7F:28:61:E6:A2:46
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA3006449B67C80290C2E0B2D3F57F
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/1-W6dNN7nS41OhiX2-XV_KGHmokY.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a03:4a81::/32 maxlen: 32
2a04:a142::/32 maxlen: 32
2a04:a147::/32 maxlen: 32
2a05:2d07::/32 maxlen: 32
2a06:3e87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:30:06:44:9b:67:c8:02:90:c2:e0:b2:d3:f5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f96e9d34dee74b8d4e8625f6f9757f2861e6a246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:7a:28:ca:5b:4f:7a:1e:67:8a:3a:0f:e9:
dd:b7:3f:91:17:a5:d9:e5:43:8c:d0:7a:45:1e:55:
56:b9:24:e7:22:8d:a8:80:39:ae:26:2b:9d:c8:b1:
6d:c1:2c:62:0b:16:5c:7d:65:39:60:84:31:74:34:
86:34:48:80:3c:22:c1:d4:56:a3:5f:66:0d:c1:2c:
70:87:d3:fe:21:53:66:bd:d8:95:2c:5a:ad:07:12:
55:e9:38:ba:15:f8:93:82:66:ca:2e:bc:34:e4:fb:
9d:c9:c8:03:69:c6:57:4f:a7:5e:5f:3b:ea:90:06:
41:f6:95:f6:76:78:3e:fa:64:25:c6:7a:bb:97:47:
22:a2:e5:2b:b8:14:f1:ba:f6:24:10:7f:af:bd:7e:
d3:7d:e1:58:e3:64:ab:a6:a3:43:d8:98:09:e2:78:
36:39:ba:da:68:2f:82:d4:bc:b7:eb:63:07:b0:d6:
ed:8b:33:d4:37:46:91:22:f1:34:52:93:f2:25:ed:
e3:bf:67:e0:4b:0c:87:f1:3d:b0:8e:b2:de:cf:f0:
d2:ec:73:a4:be:bb:6e:71:d6:73:05:8e:dc:21:01:
74:d7:09:9f:7d:4b:50:7c:97:17:dd:b7:71:3a:81:
5c:3a:8b:41:33:53:2e:50:5a:af:0b:82:c1:1b:70:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6E:9D:34:DE:E7:4B:8D:4E:86:25:F6:F9:75:7F:28:61:E6:A2:46
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/1-W6dNN7nS41OhiX2-XV_KGHmokY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:4a81::/32
2a04:a142::/32
2a04:a147::/32
2a05:2d07::/32
2a06:3e87::/32
Signature Algorithm: sha256WithRSAEncryption
7f:4e:13:56:8e:70:fb:2f:b9:5a:3c:e2:5d:fe:74:2f:63:31:
c1:e8:9b:04:6c:09:1e:33:b6:b7:83:1d:b3:22:94:c2:e8:f6:
5f:c0:d9:16:3f:8b:2b:bf:bf:1e:42:35:54:89:2e:33:00:57:
fc:99:96:22:df:4f:62:f4:83:a7:94:85:25:b4:bc:22:7f:ce:
be:66:fb:d5:a1:b9:a7:7e:bb:cd:fe:bc:45:2d:29:ac:61:d3:
e9:c5:e6:cb:28:16:95:db:3f:24:55:0d:f3:67:bf:5a:31:50:
90:5e:0d:fc:eb:0f:51:a3:f4:34:51:86:60:05:e6:07:1f:71:
3d:09:cb:ab:66:24:5c:5e:3a:eb:ab:86:c6:19:9d:44:1d:8e:
b8:2d:50:f4:c7:1b:1d:5d:a6:c8:3c:08:f5:71:1d:dd:82:48:
0a:a7:60:aa:4a:e3:96:38:ac:15:a9:f2:dd:a5:b8:db:c6:3e:
e5:0f:d4:16:2c:b3:b5:d8:19:8a:64:71:7b:6c:86:0d:7c:91:
08:06:70:62:33:cb:40:4b:27:e7:d5:86:8a:60:88:1e:8f:b5:
ca:3f:25:8e:57:2d:6b:0e:42:22:9f:04:d4:35:07:a9:88:6e:
2e:b6:c1:82:97:97:07:32:da:2c:0f:09:d8:e1:68:9a:64:f1:
59:35:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:38:01 2025 by rpki-client