Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/goSrnWYaxqHQdudIJu5EAlmBUNQ.roa
File: goSrnWYaxqHQdudIJu5EAlmBUNQ.roa (raw, json)
Hash identifier: MD/4gRf1ekbQEQs7MIWgI1+XY9ArVcwV00cN4KRQ8Lg=
Subject key identifier: 82:84:AB:9D:66:1A:C6:A1:D0:76:E7:48:26:EE:44:02:59:81:50:D4
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222040613401A4FE9FF032B432B2B875
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/goSrnWYaxqHQdudIJu5EAlmBUNQ.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211870
IP address blocks: 2a0e:8f02:2100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:40:61:34:01:a4:fe:9f:f0:32:b4:32:b2:b8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8284ab9d661ac6a1d076e74826ee4402598150d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:d7:ba:2c:ed:2f:fe:20:3e:bb:bf:41:b7:
77:fe:0c:6d:da:b4:f6:d1:f8:6a:d8:f4:b8:45:b9:
a0:14:d5:52:d8:a6:e0:6d:59:9f:12:85:bc:f0:75:
56:d8:8c:52:23:c7:9d:2d:fb:6f:62:58:8e:ed:99:
ee:48:08:2c:72:a5:27:2d:d4:2a:22:b0:74:a1:38:
77:ff:3d:6f:3d:08:aa:f6:e6:6d:e0:76:f7:48:f9:
0b:44:64:0c:f5:bf:74:3f:17:8d:4e:2f:76:c1:b5:
da:a4:1f:4e:e8:17:16:83:d9:7d:70:bd:8c:cd:46:
a2:90:3a:2b:58:61:4c:cb:f3:b9:26:19:56:42:f7:
88:c5:35:e0:a3:90:b5:a0:c8:05:7e:85:2c:03:95:
80:61:04:c3:56:b5:46:0a:e5:33:81:2f:05:59:ee:
75:75:45:bb:c6:e4:0f:f8:02:f0:a7:dd:2a:97:c0:
d6:a6:34:2d:f7:c1:9d:c3:c2:32:1f:31:2f:e9:98:
a9:fe:88:54:91:3d:21:e6:a1:e5:74:5e:53:72:66:
d9:26:6e:8f:6e:63:b5:10:a0:d2:72:23:0f:52:de:
9a:92:e8:c5:c9:f0:c4:f9:dd:fe:45:18:cb:7d:d6:
77:4c:65:9c:a1:c5:c1:72:16:08:74:41:47:82:d7:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:AB:9D:66:1A:C6:A1:D0:76:E7:48:26:EE:44:02:59:81:50:D4
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/goSrnWYaxqHQdudIJu5EAlmBUNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2100::/44
Signature Algorithm: sha256WithRSAEncryption
30:67:22:12:c7:f6:d6:84:10:27:76:85:49:29:37:d1:b6:dc:
58:f0:3f:54:23:13:78:9f:bb:12:6d:2c:7c:fd:2d:22:dd:c5:
0f:4c:d8:df:fb:d8:01:35:38:e2:91:59:37:c6:64:c0:6c:2f:
b5:96:6d:31:ff:4c:48:73:62:f2:52:89:26:35:35:96:16:00:
ab:45:48:d3:0e:7e:c1:4f:d7:a6:2c:56:43:17:6b:66:0b:3f:
b9:43:70:d7:be:f3:c5:5f:0e:26:f7:6e:4e:ce:57:6d:f4:be:
d1:59:86:0b:86:e3:24:1c:35:6f:78:44:35:94:ee:71:1d:ff:
03:58:f3:62:99:a8:3b:c6:18:b3:a1:83:d1:a3:3f:58:12:c0:
15:c6:56:43:ce:34:a0:b5:c4:c3:92:ab:d1:ae:b3:5d:8b:73:
ca:9b:12:67:94:5f:95:e9:60:3b:a6:a2:67:23:d3:06:5f:a7:
8f:c9:10:09:0a:1e:bd:c8:4f:d5:ec:d5:e1:00:4d:bb:2a:d8:
21:cd:7b:ea:ef:03:2e:d6:8f:4e:43:28:7b:99:51:ad:a5:ad:
ce:95:07:35:ec:a2:f6:12:af:dc:81:90:74:2c:55:d4:b2:d2:
7f:91:74:d9:bd:5f:79:16:93:41:4c:7e:92:7f:5e:3f:87:46:
2c:51:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:38 2025 by rpki-client