Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/w4g1vHUZdmDun_C5A2fWSftA0Yo.roa
File: w4g1vHUZdmDun_C5A2fWSftA0Yo.roa (raw, json)
Hash identifier: 1vpw56HbzQPOpFEloJ/GNdYWNx5B07jTrdPFIXUslTQ=
Subject key identifier: C3:88:35:BC:75:19:76:60:EE:9F:F0:B9:03:67:D6:49:FB:40:D1:8A
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222034E88142B96FB8FA21236F24BD04
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/w4g1vHUZdmDun_C5A2fWSftA0Yo.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207898
IP address blocks: 2a0e:8f02:f03e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:34:e8:81:42:b9:6f:b8:fa:21:23:6f:24:bd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c38835bc75197660ee9ff0b90367d649fb40d18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:9e:44:a0:74:d1:51:03:68:0f:16:10:c6:
c1:b0:73:30:b9:1c:17:cf:c9:d3:75:b4:a3:03:f4:
96:f9:cb:7a:20:28:64:1f:88:d8:06:71:7d:48:31:
90:0d:fb:9e:57:2c:b2:6e:48:1e:e8:f4:15:5e:8f:
fe:f3:48:be:d0:17:12:98:75:4d:a7:b2:37:37:c3:
80:4e:2a:bd:87:6d:2b:9b:29:3b:90:72:f7:05:b8:
0b:13:1c:f0:26:19:dd:19:a4:17:b3:dd:a1:19:8c:
2d:e3:68:f4:51:56:af:15:8f:0e:df:c6:d4:1f:df:
de:06:b7:bd:38:a0:80:b2:dc:c1:9d:11:7e:95:b7:
f2:91:44:18:18:e9:41:3a:35:7d:52:c2:7d:18:51:
17:8e:f4:e6:9c:16:15:aa:ab:14:5f:e2:80:76:ee:
ca:a8:b4:6e:40:e5:d5:f2:b5:f7:61:eb:5e:9d:c0:
95:9f:37:ab:18:07:66:24:28:25:d1:5f:95:f5:de:
39:fc:5a:06:e3:4c:29:ea:9f:13:f2:68:40:20:cc:
b1:6b:5a:28:09:06:24:f5:a3:4d:cf:a6:78:38:32:
4d:ed:23:61:67:db:2e:48:2b:f4:83:89:af:f7:a6:
5d:f9:a7:e7:f2:31:94:80:c7:bf:da:c3:a5:65:83:
f0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:88:35:BC:75:19:76:60:EE:9F:F0:B9:03:67:D6:49:FB:40:D1:8A
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/w4g1vHUZdmDun_C5A2fWSftA0Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f03e::/48
Signature Algorithm: sha256WithRSAEncryption
1f:86:2e:46:0e:21:6a:69:81:ca:11:a8:47:33:10:0b:ce:89:
98:92:fe:57:73:20:8a:95:6d:90:8c:a4:06:cb:8f:5f:b4:14:
d4:80:14:b3:c1:d7:95:8b:c6:c7:c7:0d:7b:17:cb:da:10:fb:
b6:7d:d8:91:9f:05:39:d2:b4:2c:bd:95:ab:21:81:df:85:17:
30:11:c8:f8:a7:eb:e1:70:6c:70:84:b8:ca:8c:5c:80:ad:21:
dc:cd:71:2c:b6:d7:ac:d8:6b:e3:ef:81:d9:44:e9:59:46:6e:
08:06:96:81:ee:b6:a5:f0:02:12:67:d5:70:8d:c2:07:82:12:
9b:08:ac:af:51:34:cf:b7:b1:b1:2a:1c:43:0c:d1:97:b3:f2:
24:7d:1e:d1:ea:0d:57:6b:9e:29:1a:43:21:6b:c8:2a:ed:30:
48:1a:45:57:1a:80:bd:00:a2:1c:dc:64:39:c2:02:1d:e2:2e:
fc:c9:e9:6f:9b:db:a2:24:00:9b:7e:c5:1c:8f:94:98:a6:48:
68:17:cb:79:10:ea:30:02:cf:e6:df:31:a7:e6:c7:2a:27:79:
49:9a:7f:6e:3c:a3:5a:e0:8e:a8:d2:d9:b1:79:c0:f1:b5:c5:
39:65:b6:1b:ae:4e:74:c3:2d:47:34:16:73:5b:b1:54:21:22:
4e:b4:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:22 2025 by rpki-client