Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WnhH8Pz-cteNxDYKqVUqElSqza4.roa
File: WnhH8Pz-cteNxDYKqVUqElSqza4.roa (raw, json)
Hash identifier: N8is4xe5m9vHwZDuXdiVui36ICOufNY1IxCjbOpwO9o=
Subject key identifier: 5A:78:47:F0:FC:FE:72:D7:8D:C4:36:0A:A9:55:2A:12:54:AA:CD:AE
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222047C5FE4B6C69FDBD851E874622FD
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WnhH8Pz-cteNxDYKqVUqElSqza4.roa
Signing time: Wed 01 Jan 2025 13:48:48 +0000
ROA not before: Wed 01 Jan 2025 13:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212746
IP address blocks: 2a0e:8f02:2040::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:47:c5:fe:4b:6c:69:fd:bd:85:1e:87:46:22:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a7847f0fcfe72d78dc4360aa9552a1254aacdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:50:97:99:eb:1e:6e:a9:33:83:ab:da:a7:
cf:e0:b7:af:aa:33:2d:b4:86:77:2f:d4:b9:02:c2:
f5:36:80:6f:a9:f7:d5:16:95:95:1c:61:30:8a:23:
56:f4:d4:91:4b:59:a7:fc:17:de:a9:03:b0:52:ce:
26:53:3b:78:74:c8:ee:f6:de:cd:88:24:e7:5a:87:
43:8b:04:8b:68:68:3d:73:c5:a9:80:0a:38:ad:c3:
68:0d:4d:4f:8b:dc:e4:1d:d4:74:46:d4:3e:6e:61:
0a:ef:c0:6f:23:66:b4:61:17:dc:cd:7c:07:d2:2b:
a7:5c:87:9d:e6:ba:eb:d7:59:7e:87:b1:07:ae:ef:
f7:ae:9a:2e:1e:94:60:90:81:ef:42:23:2e:a2:24:
94:b2:9c:d3:0a:f6:12:1a:55:ef:ec:7b:ea:dc:d3:
62:6b:5c:81:ef:55:40:60:d7:5b:02:65:d2:94:f2:
1c:ea:cf:14:ea:2c:cb:23:8e:9a:bb:8c:46:a1:20:
0c:c0:47:15:75:fc:ae:63:6e:2b:8d:29:7a:92:67:
2b:34:21:85:b1:45:4f:23:6a:cb:85:bd:f1:c5:07:
52:66:e4:dc:3e:b0:7a:54:1e:83:4e:ef:b6:2a:34:
2b:04:38:be:69:47:84:e7:1e:c3:bb:87:c2:0a:1a:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:78:47:F0:FC:FE:72:D7:8D:C4:36:0A:A9:55:2A:12:54:AA:CD:AE
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WnhH8Pz-cteNxDYKqVUqElSqza4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2040::/44
Signature Algorithm: sha256WithRSAEncryption
92:94:53:60:46:9f:04:73:05:de:fa:38:81:fb:c0:25:17:f0:
f1:78:e5:c3:ec:37:87:cb:36:f0:83:4e:39:b9:9f:48:b8:21:
d2:24:f2:f3:51:1f:b5:ca:a2:d1:a4:35:ae:8d:87:d9:3d:4d:
84:d0:96:99:d4:3a:a8:4d:2c:59:9e:5b:c2:75:a9:69:cb:73:
ed:32:ee:f6:73:13:87:b6:ea:26:49:31:9f:25:3d:ee:89:84:
a9:6d:6d:2c:35:b3:82:a2:2b:a1:5b:18:55:9b:0e:4b:b0:f9:
24:ec:bf:c6:44:17:c1:5d:df:23:ff:b6:5b:84:36:3c:c1:b9:
ca:73:4c:c2:89:1b:d9:f9:d5:73:0e:0b:95:e8:db:c5:18:4f:
b1:f4:32:21:e8:06:ee:c9:ae:04:58:9a:42:b9:61:e8:55:80:
e2:25:8d:63:68:bc:a2:32:b8:47:9a:23:6e:de:50:55:77:c3:
e6:bb:07:7d:1a:6e:56:6e:25:c5:5e:1b:d7:6e:df:d2:7b:b8:
f5:13:9c:9e:c6:96:de:32:3b:09:2d:af:6f:21:44:31:ee:31:
35:33:a4:e8:d3:62:bb:d9:12:a4:89:a4:64:66:1a:d0:4e:28:
d7:4d:17:18:39:bb:3e:1b:da:d4:3f:2c:99:79:c2:55:20:76:
95:58:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:47 2025 by rpki-client