Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WYsGEQYq-064ncik3p6ueM-7xVg.roa
File: WYsGEQYq-064ncik3p6ueM-7xVg.roa (raw, json)
Hash identifier: zVzrmUA+nDyzCbHUJnNFHw5HV+KZpljQJupjwkywgGY=
Subject key identifier: 59:8B:06:11:06:2A:FB:4E:B8:9D:C8:A4:DE:9E:AE:78:CF:BB:C5:58
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0194236A0150C79403C0886F5CDEFFCA8EFC
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WYsGEQYq-064ncik3p6ueM-7xVg.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216419
IP address blocks: 2a0d:6f80:23f1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:01:50:c7:94:03:c0:88:6f:5c:de:ff:ca:8e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=598b0611062afb4eb89dc8a4de9eae78cfbbc558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:03:bc:c5:d1:c9:c3:2f:31:61:ff:03:71:
69:16:9d:85:dc:c9:7d:9b:f4:69:f8:6b:a1:96:78:
75:3c:35:62:a4:10:e8:9f:d0:2a:4d:ae:f8:81:7b:
d8:f4:1d:74:d2:03:14:03:82:77:90:fc:cd:51:c2:
9c:80:16:01:32:ef:a8:31:76:28:c0:ed:b8:77:03:
fa:52:40:d6:46:6f:25:9e:ac:10:6f:52:6f:0e:ff:
05:19:0d:ef:39:fc:92:62:ed:e0:a8:23:96:1e:52:
28:cd:5c:db:16:b0:1c:91:a2:c6:c3:6d:87:a8:c2:
73:c1:01:ab:76:b1:e6:2c:23:5f:e5:ac:1b:20:e2:
d0:aa:93:3e:6a:de:7f:48:64:7d:c5:ac:37:43:18:
ce:82:6d:a2:ac:1f:56:5d:31:7b:d8:2f:74:59:42:
9f:8b:0a:14:a7:b7:a4:7a:c0:59:21:da:47:18:c3:
ec:3d:72:72:0b:ce:e9:27:bd:52:5b:b2:5a:2f:33:
39:37:f5:64:79:cd:b7:1b:4c:67:f7:d7:e9:b2:af:
0e:44:b3:59:1f:21:4b:56:fa:6c:c1:04:fa:b5:0d:
ca:15:ae:3e:8e:9b:ab:23:5e:a2:71:aa:c3:6d:cf:
3b:6d:64:d6:17:44:f2:55:28:ca:09:fb:3a:c9:b4:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:06:11:06:2A:FB:4E:B8:9D:C8:A4:DE:9E:AE:78:CF:BB:C5:58
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WYsGEQYq-064ncik3p6ueM-7xVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:23f1::/48
Signature Algorithm: sha256WithRSAEncryption
1a:47:41:43:a7:ac:b6:56:48:8d:9d:f1:f6:cb:89:1c:9f:78:
e8:99:63:bc:69:28:ce:c3:23:4d:45:87:13:d7:0d:ca:8f:9a:
37:b2:29:ca:0a:00:d6:fa:da:62:d6:e2:57:39:6b:e0:4d:fc:
8f:0d:d4:1b:6f:ec:af:7e:65:ed:b4:ee:6c:3f:92:92:32:61:
0c:34:af:b9:a8:b2:2c:71:9e:ae:47:fe:94:12:65:62:6c:72:
60:b9:b4:fa:4f:68:3a:51:69:99:31:ac:9f:47:f1:98:ca:9e:
7c:80:72:82:7d:8a:06:36:34:4a:27:aa:b5:2e:6b:fe:84:9e:
f5:43:9f:c8:48:66:a5:f2:6f:78:48:36:17:87:60:03:4b:d1:
3d:c6:aa:c4:8e:18:14:a2:18:94:89:9b:2e:43:09:93:d2:41:
4c:69:1c:05:db:e7:fd:f4:29:23:b5:12:ba:f9:05:9e:4b:c6:
2d:f6:f5:b9:52:cb:fe:8c:f8:df:01:63:e1:17:ac:a2:e7:74:
e6:01:32:6d:db:cc:7d:e1:f9:fd:99:0f:53:30:0a:98:b2:b3:
93:e9:66:ea:3c:b0:36:ec:73:5f:b9:7a:e7:aa:d3:f0:30:23:
f6:d5:02:36:df:f1:d0:ec:a1:82:0e:af:41:e4:c4:92:49:c9:
8e:23:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:35:31 2025 by rpki-client