Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WYQU3w9OTEQ3NseaukyRQ6qVJl4.roa
File: WYQU3w9OTEQ3NseaukyRQ6qVJl4.roa (raw, json)
Hash identifier: SNEKXIEOmKPtUbaCiK636Pv0EO3QOfHW64cqUnBtYnw=
Subject key identifier: 59:84:14:DF:0F:4E:4C:44:37:36:C7:9A:BA:4C:91:43:AA:95:26:5E
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAB4FF0DBDD2D683D391B604734DD0
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WYQU3w9OTEQ3NseaukyRQ6qVJl4.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215189
IP address blocks: 2a0c:b641:c20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b4:ff:0d:bd:d2:d6:83:d3:91:b6:04:73:4d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=598414df0f4e4c443736c79aba4c9143aa95265e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:73:a0:00:41:b3:fe:3d:df:15:5a:c0:50:
ba:74:2b:89:c8:a9:39:88:7a:d0:e3:e3:de:7c:ea:
15:60:e6:e8:5b:10:e8:df:a3:dc:27:0a:6d:7e:d0:
38:c5:69:9e:33:0c:d2:96:9e:22:b9:d1:9c:83:f4:
1e:02:82:83:52:9b:75:a0:ae:d8:a5:26:2d:09:9c:
23:84:d7:02:6c:1b:64:0e:6a:3a:38:a7:0d:25:26:
de:c5:9d:f4:c1:79:29:92:6d:9e:9c:e8:23:8c:4d:
4a:1a:f8:28:5c:96:fb:84:f3:5a:1c:ed:0e:47:1a:
ed:23:d4:b5:e3:bb:c5:80:2f:8e:dc:83:a1:32:c6:
a2:20:49:d5:59:f8:e1:29:47:4f:33:94:aa:e5:c8:
11:68:39:f7:7f:a0:b4:74:a0:85:e2:78:ee:31:9d:
3f:60:1e:68:4b:6f:37:f2:33:be:6b:e4:df:15:97:
9a:70:65:f0:eb:30:e8:e9:0a:de:3c:27:16:ac:e7:
af:36:ee:cb:0b:02:db:95:35:36:87:4c:5f:7c:ca:
6e:74:01:22:f7:a5:b0:fa:b9:ce:10:2b:cf:47:7c:
d8:f0:d6:ae:3d:14:a2:ba:ff:f7:1b:92:c8:36:8c:
b3:5c:bc:65:a3:cb:5b:2a:b6:2a:fe:fd:51:40:6c:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:84:14:DF:0F:4E:4C:44:37:36:C7:9A:BA:4C:91:43:AA:95:26:5E
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WYQU3w9OTEQ3NseaukyRQ6qVJl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:c20::/44
Signature Algorithm: sha256WithRSAEncryption
46:fb:76:45:21:cd:5a:79:f8:58:5e:65:06:21:dd:be:f8:82:
b0:81:8f:bf:40:08:69:c1:86:9b:3c:33:74:1f:67:06:03:1e:
40:2f:77:ed:23:f6:85:1d:e8:6e:2c:b3:02:ae:70:96:39:2d:
4e:61:7e:d8:61:f3:fe:af:f9:95:0d:be:eb:04:f5:8e:f9:11:
be:9c:6e:91:00:e7:ea:bc:27:b0:be:67:bb:41:93:57:7f:ed:
09:ae:f1:72:86:ec:0a:f4:11:14:33:79:3f:73:57:f6:e6:8c:
da:25:a3:a2:00:cb:5d:fe:7d:8a:87:29:01:c3:85:05:af:97:
bc:0c:84:75:43:bd:78:b0:d5:36:b1:5c:f8:53:49:f4:c7:18:
a6:5c:ea:4e:f9:40:bd:46:d0:20:f4:3a:a1:de:6e:1e:6b:4e:
91:88:0b:88:5f:80:db:1e:8b:14:f0:02:49:84:08:8a:a3:c7:
d8:d1:ea:5d:5f:a1:02:bb:c1:3c:24:f6:f1:bb:30:9d:a7:29:
3c:c2:fb:27:8f:89:4a:32:b2:42:bc:18:1a:63:bf:55:60:91:
bb:8f:de:a8:32:c5:bf:42:37:d4:a6:75:8a:cb:cb:4e:3e:71:
04:b7:ab:9e:9f:2d:b0:46:8f:5d:5e:36:09:bd:44:ca:2a:7b:
de:ac:03:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:46:37 2025 by rpki-client