Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/wY9O4DcNVZNJ-YAv29oosSTPUxo.roa
File: wY9O4DcNVZNJ-YAv29oosSTPUxo.roa (raw, json)
Hash identifier: 3jxX5PbIa9qkoOuBGM2hMRHwLpEa9Iisjv1IAXHXo44=
Subject key identifier: C1:8F:4E:E0:37:0D:55:93:49:F9:80:2F:DB:DA:28:B1:24:CF:53:1A
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222038F427F1D53E4BC912CD83B01CD8
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/wY9O4DcNVZNJ-YAv29oosSTPUxo.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211414
IP address blocks: 2a0e:8f02:2140::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:38:f4:27:f1:d5:3e:4b:c9:12:cd:83:b0:1c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c18f4ee0370d559349f9802fdbda28b124cf531a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:7e:70:60:0e:b8:a7:73:2d:f6:88:a7:31:
2f:33:8e:fc:33:4e:76:f3:8e:06:ee:5e:a5:e5:fa:
f4:2c:a8:b8:05:7b:85:57:cc:c2:09:77:ed:6b:25:
59:c3:5e:29:5e:3c:8d:0a:92:2f:ab:47:dd:73:7c:
8d:7b:7d:1e:79:6f:e2:9f:19:4f:e6:49:fe:be:85:
6d:2f:7c:2f:20:08:e6:70:2f:52:86:1e:98:d7:bd:
77:41:e6:8e:83:c5:e8:b5:3c:ff:b3:da:7f:cf:94:
65:fe:92:20:ba:76:f5:9c:a2:17:34:1e:7f:55:e3:
97:86:be:f5:4e:9b:4f:a1:b6:3b:1b:16:4f:bc:d5:
c0:1a:14:4f:eb:57:8c:b7:51:88:ab:64:5b:cc:7e:
89:c1:13:d6:03:08:ec:38:8b:31:bc:44:cc:01:60:
9d:4e:d5:9d:14:c2:d1:6c:8a:88:46:af:47:ef:28:
1c:45:07:4d:42:dc:1b:fd:09:3a:85:8c:dd:9c:3b:
20:20:5a:74:98:b6:a7:fe:08:16:28:33:0c:df:f3:
91:6a:68:42:25:13:b6:81:0a:ad:30:fc:ee:65:6d:
4b:e4:b8:72:82:c3:c9:7e:49:e9:20:29:b6:27:bc:
87:ac:15:03:de:57:9b:c4:88:5c:58:29:c3:0f:b1:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8F:4E:E0:37:0D:55:93:49:F9:80:2F:DB:DA:28:B1:24:CF:53:1A
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/wY9O4DcNVZNJ-YAv29oosSTPUxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2140::/44
Signature Algorithm: sha256WithRSAEncryption
37:f0:6b:69:6c:50:12:7c:7e:e5:b8:3a:ed:f9:6a:83:38:da:
72:b8:1a:f7:c8:cb:76:c3:4b:ad:2a:9e:81:12:c3:67:77:77:
66:ba:b7:a2:c0:f2:02:7f:e4:a8:1f:96:f2:46:ae:42:84:2c:
b8:6f:82:76:91:0c:c7:4d:91:2b:75:38:ff:4f:7f:0c:ad:40:
04:eb:52:65:da:de:aa:e6:6e:cd:81:cd:ce:98:67:a0:b5:01:
27:32:2a:21:da:35:28:98:f8:5d:f3:45:bb:b4:64:58:21:8c:
bb:38:c8:d2:27:85:1f:df:3f:14:8a:33:ef:59:10:1a:ef:90:
30:db:a9:f5:45:a8:f2:ee:1a:62:48:94:8a:53:af:e5:b6:4f:
cb:75:aa:50:b9:0d:34:91:55:22:1b:5e:7d:db:0b:80:cf:3d:
be:34:2d:23:8c:e8:1c:84:c1:29:d7:52:fc:14:bb:4c:f1:cc:
47:e1:db:6a:71:ab:47:56:ee:ed:eb:ab:bf:1f:1c:6f:d4:be:
a6:02:07:37:14:d9:a8:18:06:b5:2e:8a:a5:86:10:ff:03:b4:
9e:66:23:c8:ec:f0:47:cf:f0:2d:c4:af:26:12:44:41:0a:31:
40:32:11:76:3c:d8:48:64:ec:cd:5d:da:d8:19:19:52:5e:5e:
54:f5:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:20 2025 by rpki-client