Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Skw3wkk2ivOpqFMwk2PxstyYFrk.roa
File: Skw3wkk2ivOpqFMwk2PxstyYFrk.roa (raw, json)
Hash identifier: t5wfX+3MCB2Sq/W7fR9Avif0LfNQ7rVR8sq2Ezqof1M=
Subject key identifier: 4A:4C:37:C2:49:36:8A:F3:A9:A8:53:30:93:63:F1:B2:DC:98:16:B9
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222035379BB0BE1B5A3C23C1E6098680
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Skw3wkk2ivOpqFMwk2PxstyYFrk.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208223
IP address blocks: 2a0e:8f02:f03d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:35:37:9b:b0:be:1b:5a:3c:23:c1:e6:09:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a4c37c249368af3a9a853309363f1b2dc9816b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:e6:f3:c2:75:08:cf:88:6d:64:a5:0b:85:
61:1d:26:6a:ac:56:06:5d:a5:c0:8b:b9:3a:f2:f7:
3c:74:9f:b4:0a:f0:a7:44:e5:3f:66:21:bc:e3:22:
fe:e8:e0:e2:9e:9b:13:2f:42:6e:ad:e5:ba:5b:0d:
03:33:88:3b:76:0c:9d:63:34:83:f0:f3:4b:10:b3:
e2:6a:82:1b:61:90:d1:47:ac:78:41:9f:a5:b7:c1:
a6:dd:3a:9c:9a:dc:b1:00:7e:ae:a4:cc:4f:6b:94:
37:86:bc:bf:2b:83:8a:23:28:68:70:1d:92:ae:78:
54:35:34:31:86:66:52:ca:bb:31:5e:ae:b4:31:8c:
fa:09:de:c3:11:7c:12:1b:e0:85:4b:97:8e:43:a9:
ea:71:13:8b:54:a0:c6:4a:9c:58:6b:4b:d5:08:1b:
72:57:85:ef:55:6b:27:f7:8c:d5:b2:43:6d:43:bf:
49:cd:fa:5f:b7:a2:68:2e:c3:ed:92:29:f4:af:65:
e4:8f:b7:ee:f0:be:45:80:5d:0a:2c:9a:ab:d7:29:
60:85:af:a1:63:c2:92:24:ba:d6:2d:36:e0:99:47:
57:c2:ac:5b:2b:62:52:ef:d0:7f:47:25:43:37:1d:
9e:e7:09:73:33:f5:e9:bf:c1:ae:96:08:1d:6d:f3:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4C:37:C2:49:36:8A:F3:A9:A8:53:30:93:63:F1:B2:DC:98:16:B9
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Skw3wkk2ivOpqFMwk2PxstyYFrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f03d::/48
Signature Algorithm: sha256WithRSAEncryption
61:fd:05:ac:fd:9d:69:e4:3f:a6:50:14:fe:7c:4f:e3:3f:39:
51:17:bd:4a:fc:95:9b:d9:ec:92:a7:c5:e3:a8:23:8f:d3:c3:
86:18:ac:bb:89:e7:b6:49:0c:af:ac:0d:0f:8f:38:45:87:e7:
b3:57:df:da:81:17:e5:ea:28:80:b0:53:22:e9:34:5f:2d:e6:
a9:a9:23:6c:1e:e1:1f:22:83:a7:fb:81:55:ef:ee:ef:9a:34:
7f:28:f8:32:5d:42:a0:f6:fb:4d:0a:c4:47:a4:a2:a1:5a:39:
73:bd:d9:b0:9d:90:4d:76:e3:a4:30:84:c4:fa:58:05:d0:31:
c1:c9:2a:bd:05:29:5c:5b:9c:8b:45:84:4b:60:ed:54:34:97:
ea:7d:20:76:ca:f5:4c:80:ed:4b:3f:ef:96:7c:46:46:05:b1:
e0:63:58:b7:f2:d4:48:e3:b0:23:0e:b1:d8:a7:f2:21:c8:b2:
e3:b1:58:47:76:86:3f:c5:91:87:53:ee:3c:9b:c7:65:19:a1:
94:ec:16:7d:90:62:82:86:13:d5:f4:bc:73:29:07:12:7c:56:
df:28:21:c4:b8:43:27:a3:c0:39:7e:96:17:fa:56:20:c7:5c:
8b:24:ac:de:35:49:7a:99:be:ad:7c:f0:a6:f2:7b:ba:dd:27:
3c:b5:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:42 2025 by rpki-client