Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa
File: WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa (raw, json)
Hash identifier: 5/nNeU++Tk3tTxk1UDX88TCuqrCoToCpYKSrEibPyls=
Subject key identifier: 58:4B:7F:16:F0:40:D0:1E:CB:00:4F:D3:C0:93:6B:E5:86:C6:2D:6A
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521E8371F1D1DCF25D38A25A6363137
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213327
IP address blocks: 2a0a:280:2600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e8:37:1f:1d:1d:cf:25:d3:8a:25:a6:36:31:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=584b7f16f040d01ecb004fd3c0936be586c62d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:69:2e:b5:8d:70:46:63:52:69:36:32:b4:
6f:65:8a:72:75:5c:f7:57:3c:f8:c5:5e:15:60:73:
3c:00:bf:37:a0:ba:c6:93:19:51:de:77:cd:1e:f1:
45:ee:d7:db:98:99:76:f2:5a:56:37:a6:aa:30:75:
0f:58:6e:8a:cd:22:c8:e1:0e:81:3a:35:9c:67:08:
a1:c7:c0:e5:16:57:84:7d:7c:a6:2b:c1:8d:c9:b9:
0c:9d:b3:d9:61:dc:ab:b0:10:81:4d:63:38:65:b4:
f8:18:bf:51:85:bf:04:09:e2:55:4c:b7:e9:93:0e:
59:89:88:b4:fd:21:0e:71:fe:a7:b4:16:86:9f:b0:
55:d7:a0:49:ee:e6:11:ea:4f:15:10:75:c9:19:8d:
52:7e:8c:d7:84:f6:aa:a0:b9:65:36:e6:f9:f1:9c:
eb:38:21:dd:39:73:96:2c:f3:4e:3d:bc:04:1f:35:
93:4c:6d:0b:e0:3e:d8:0b:6d:1b:8d:e0:65:02:a7:
c0:fd:9f:30:c6:a1:fe:7d:01:da:a3:d6:9e:a8:85:
2e:cc:d6:9c:59:d5:02:ed:3e:b3:86:d5:c5:23:17:
02:f5:d6:83:01:f0:06:e5:61:4e:91:d7:27:6f:53:
6d:50:c1:13:15:94:8d:ac:9b:56:38:c5:0e:b8:fc:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4B:7F:16:F0:40:D0:1E:CB:00:4F:D3:C0:93:6B:E5:86:C6:2D:6A
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:2600::/40
Signature Algorithm: sha256WithRSAEncryption
15:34:ab:e6:66:f5:95:11:b4:0b:cd:6e:b6:2a:52:af:c8:3d:
16:00:65:e9:73:f9:a9:bd:d2:a3:a3:63:4d:59:26:e2:f7:e0:
11:af:39:20:2b:3e:9a:9e:d6:b5:8a:04:09:68:35:4b:22:e3:
9e:10:5f:b5:ca:0c:d2:6a:6e:3e:c4:57:80:6f:0a:a3:3d:f2:
d6:1a:32:24:6d:81:b8:59:69:c3:dd:02:d4:47:2a:b9:22:67:
ba:5e:d1:1c:9d:6a:02:ff:bd:35:4d:9e:f9:d7:1a:be:12:7e:
24:5f:c4:88:51:7b:10:64:e0:06:01:90:1b:a5:6f:9a:7c:00:
cf:34:e7:62:04:c5:60:38:b1:74:20:2e:06:ed:f6:45:5e:ab:
c3:bf:5a:d2:1f:07:92:49:d8:b6:a0:62:dd:22:9f:58:36:34:
0f:ec:1d:eb:8e:ca:79:76:31:30:6f:36:5b:68:e7:71:22:fe:
b4:f4:e2:c7:3a:d8:93:e7:5c:f5:00:2c:e5:1d:0f:47:c3:ce:
9c:25:1d:a2:3a:be:a1:4e:ca:06:c9:7a:f6:52:ed:1b:ad:b3:
c9:e3:27:dc:9a:fa:40:d1:f8:d9:9a:cb:bc:f3:fe:08:8e:e8:
7f:30:db:fe:02:49:33:c7:fa:4f:2d:0b:19:a6:1d:7d:a7:6a:
80:6c:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:53:02 2025 by rpki-client