Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WJ7LBVZU44nfjrlHSREL8aEtato.roa
File: WJ7LBVZU44nfjrlHSREL8aEtato.roa (raw, json)
Hash identifier: /kzYzJ3562QQKhAiMoTeNzVIap4ROAQ5VXzYG6+0qqw=
Subject key identifier: 58:9E:CB:05:56:54:E3:89:DF:8E:B9:47:49:11:0B:F1:A1:2D:6A:DA
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747CBDA093D380340BD4A8F8D291BF3
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WJ7LBVZU44nfjrlHSREL8aEtato.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 2a0b:7080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cb:da:09:3d:38:03:40:bd:4a:8f:8d:29:1b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=589ecb055654e389df8eb94749110bf1a12d6ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:ab:2f:47:76:d7:28:73:5c:90:49:90:f5:
72:6a:3e:80:5b:c6:97:67:f4:fb:9c:82:8f:32:08:
58:cd:fa:80:7e:63:94:eb:51:8d:75:4b:31:db:a2:
1d:3b:3e:3e:b9:53:96:46:1e:10:28:f4:09:94:64:
08:5a:99:36:bc:f0:95:5a:8e:01:12:71:e1:6e:ef:
cd:b5:7d:07:34:bd:98:d5:1f:e8:bc:30:ab:6f:42:
a8:dc:10:95:fe:64:d2:24:84:11:93:24:cd:a2:52:
f7:54:8a:90:20:17:4a:41:d5:43:57:5b:8c:02:28:
50:2b:ef:79:2c:c2:8f:5b:27:ef:54:67:f3:59:a2:
99:c5:7f:c1:1d:84:be:6c:a0:6a:af:70:76:d8:a9:
f1:23:4d:67:0a:4d:2f:eb:9e:4b:71:7b:49:bc:02:
e2:7b:8c:5f:4d:cb:3c:98:35:fb:8f:fc:3c:14:7a:
43:57:3e:59:cc:d9:bb:a2:f1:74:0d:9b:20:a6:ed:
61:6b:eb:b4:41:e8:d5:be:fb:fb:35:b1:86:4e:f4:
98:87:cc:ef:37:23:81:ca:38:73:cf:ea:b3:95:3e:
5a:6d:0e:15:54:4c:c9:ec:e3:07:bb:c5:85:d9:be:
f7:eb:71:72:00:3b:b2:99:dc:05:c5:23:be:bd:86:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9E:CB:05:56:54:E3:89:DF:8E:B9:47:49:11:0B:F1:A1:2D:6A:DA
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WJ7LBVZU44nfjrlHSREL8aEtato.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7080::/29
Signature Algorithm: sha256WithRSAEncryption
0a:b3:d7:42:00:e6:69:a4:3d:8c:8f:1b:79:24:64:e0:da:1e:
55:af:d5:43:56:f7:f1:1e:e3:d6:f5:b4:dd:32:41:77:fa:36:
d1:0f:7f:a1:52:53:de:73:ad:33:b3:f2:e2:da:75:4f:59:dc:
26:a9:e2:46:76:14:27:e7:89:d7:58:cb:f7:cc:97:81:f8:fd:
99:32:5b:5c:95:3c:01:da:cf:c6:3c:2f:9a:64:fe:d4:35:e1:
58:bc:c3:11:8a:ec:77:78:3d:9e:ae:16:1e:ab:de:93:84:c6:
81:c1:31:27:fe:91:a4:bb:24:59:61:b2:d6:5b:80:c8:b4:48:
4b:74:70:5e:0c:7e:aa:16:5c:96:4e:bb:b1:31:c6:83:b3:d3:
e4:df:73:b6:d6:02:4e:04:b2:91:95:5f:c1:80:6d:9e:d1:35:
be:4b:f1:32:6d:c5:d9:b9:21:42:ad:75:dd:a8:e4:df:aa:b0:
75:6d:cc:99:a3:d9:8a:a1:81:21:db:0b:d1:08:f4:f3:c8:38:
0a:c9:61:65:01:10:26:ed:89:a8:94:a7:c8:bf:7e:43:f9:f9:
b4:87:66:cb:81:2e:55:07:6e:2b:7c:3b:a8:19:c2:89:24:ef:
3c:52:01:3b:d5:66:f6:bf:eb:9b:45:1b:11:37:d9:a1:4f:4a:
a8:e1:a2:94
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnR8vaCT04A0C9So+NKRvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODllY2IwNTU2NTRlMzg5ZGY4ZWI5NDc0OTExMGJmMWExMmQ2YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJKrL0d21yhzXJBJkPVyaj6AW8aX
Z/T7nIKPMghYzfqAfmOU61GNdUsx26IdOz4+uVOWRh4QKPQJlGQIWpk2vPCVWo4B
EnHhbu/NtX0HNL2Y1R/ovDCrb0Ko3BCV/mTSJIQRkyTNolL3VIqQIBdKQdVDV1uM
AihQK+95LMKPWyfvVGfzWaKZxX/BHYS+bKBqr3B22KnxI01nCk0v655LcXtJvALi
e4xfTcs8mDX7j/w8FHpDVz5ZzNm7ovF0DZsgpu1ha+u0QejVvvv7NbGGTvSYh8zv
NyOByjhzz+qzlT5abQ4VVEzJ7OMHu8WF2b7363FyADuymdwFxSO+vYaXxQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFieywVWVOOJ3465R0kRC/GhLWraMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvV0o3TEJWWlU0NG5manJsSFNSRUw4YUV0YXRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgtwgDAN
BgkqhkiG9w0BAQsFAAOCAQEACrPXQgDmaaQ9jI8beSRk4NoeVa/VQ1b38R7j1vW0
3TJBd/o20Q9/oVJT3nOtM7Py4tp1T1ncJqniRnYUJ+eJ11jL98yXgfj9mTJbXJU8
AdrPxjwvmmT+1DXhWLzDEYrsd3g9nq4WHqvek4TGgcExJ/6RpLskWWGy1luAyLRI
S3RwXgx+qhZclk67sTHGg7PT5N9zttYCTgSykZVfwYBtntE1vkvxMm3F2bkhQq11
3ajk36qwdW3MmaPZiqGBIdsL0Qj088g4CslhZQEQJu2JqJSnyL9+Q/n5tIdmy4Eu
VQduK3w7qBnCiSTvPFIBO9Vm9r/rm0UbETfZoU9KqOGilA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 17:16:22 2025 by rpki-client