Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/wha7fcogtd47YRJWz6jr2K_oy9M.roa
File: wha7fcogtd47YRJWz6jr2K_oy9M.roa (raw, json)
Hash identifier: 7bzvo+VMMMPCXskKWF1nzlRo2MigQF9srzUNxlr/2Hg=
Subject key identifier: C2:16:BB:7D:CA:20:B5:DE:3B:61:12:56:CF:A8:EB:D8:AF:E8:CB:D3
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B5604BDDFCE1049E4F1313CBA6E1D7
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/wha7fcogtd47YRJWz6jr2K_oy9M.roa
Signing time: Thu 02 Jan 2025 15:49:45 +0000
ROA not before: Thu 02 Jan 2025 15:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210864
IP address blocks: 2a10:4646:a0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:60:4b:dd:fc:e1:04:9e:4f:13:13:cb:a6:e1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c216bb7dca20b5de3b611256cfa8ebd8afe8cbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:7f:40:e2:1e:00:0b:c6:4e:b4:11:4c:9a:
e4:1b:d1:11:d7:f6:5b:d8:dd:fd:43:83:6e:84:50:
ff:7f:6b:07:9f:a9:2b:9e:3b:5f:05:67:16:ca:61:
b1:5d:61:52:57:0e:08:72:7c:42:e0:b0:a7:8d:1b:
28:39:13:9e:0d:25:62:a4:ce:95:91:3b:ff:09:6d:
bf:f6:22:92:9a:6a:6c:7f:e7:4c:a6:10:fd:65:d0:
1b:27:bf:26:4e:3c:65:1b:38:5e:e1:a5:17:6b:7c:
ff:81:a2:ff:76:8c:ea:7c:6f:00:a5:1b:12:91:7c:
bc:28:fb:15:5e:0c:4a:8a:22:9f:f5:66:7a:05:38:
69:a3:c5:9b:19:62:2a:41:4c:c8:66:4c:44:87:b4:
00:6c:8c:13:32:15:9a:65:cd:c8:49:77:f1:44:0d:
fc:de:44:25:cb:cf:9e:87:8b:03:75:81:71:63:8a:
3b:3b:8e:95:d3:7b:cc:65:2e:20:1b:58:df:34:da:
eb:93:55:b4:98:03:e3:0d:e9:f7:de:f3:12:9d:7e:
e9:b6:25:bb:27:67:77:e3:2c:7d:f7:38:ed:02:6b:
51:3c:49:0b:63:db:03:a7:d0:dc:0c:1e:04:5f:d2:
80:a3:d8:27:2c:c1:ef:ef:d8:49:1f:9b:4d:38:2a:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:16:BB:7D:CA:20:B5:DE:3B:61:12:56:CF:A8:EB:D8:AF:E8:CB:D3
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/wha7fcogtd47YRJWz6jr2K_oy9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:a0::/44
Signature Algorithm: sha256WithRSAEncryption
2d:ce:cd:d2:fa:59:6e:15:43:77:e6:de:24:55:ac:af:4d:b6:
41:1e:a6:ea:03:d5:f6:64:c2:c1:ae:7f:3b:f6:9c:06:4d:65:
3a:a1:60:44:34:de:13:eb:11:17:62:0b:93:1b:b2:e1:8a:eb:
a6:39:7a:0c:81:6d:08:37:ae:05:72:2e:72:f3:3e:27:eb:50:
d4:87:e9:88:5b:86:4f:15:39:35:af:15:75:72:73:96:6e:2f:
0b:6f:93:8a:2c:f9:35:41:19:9a:7e:89:e0:2f:a1:0d:d8:83:
8d:52:e0:21:9d:1f:4e:74:d7:3e:6f:a9:77:a1:c1:d8:52:44:
c0:2c:3f:a2:03:20:59:5c:b3:9d:60:9d:7b:58:50:05:e8:6b:
f9:d1:16:c4:d7:ae:a0:52:01:67:42:b1:a9:da:75:2a:09:ac:
cc:a5:22:71:ae:0e:b4:00:ad:f3:61:5f:24:66:25:f6:25:6c:
43:29:3d:fb:0e:2c:f1:59:e1:27:e0:d3:8e:92:94:cc:db:7b:
2c:a9:f4:09:ac:72:a8:3c:31:3a:dd:88:8f:a5:68:21:05:a0:
ac:12:1b:0b:7f:4f:0e:bb:61:1c:a1:67:7a:cf:d1:94:03:25:
79:6b:cc:e7:de:96:db:64:27:0f:44:3b:d6:dd:0a:3c:18:47:
19:11:69:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:25 2025 by rpki-client