Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/mR_wkM-dl3q5Zqavc8_wUxLBsck.roa
File: mR_wkM-dl3q5Zqavc8_wUxLBsck.roa (raw, json)
Hash identifier: mjWZ9wcnOPQZpY6H28O3iednkx7NStQEjrpDKJuynX0=
Subject key identifier: 99:1F:F0:90:CF:9D:97:7A:B9:66:A6:AF:73:CF:F0:53:12:C1:B1:C9
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0195DC44C791E06F8931985BAE17E84A6FE1
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/mR_wkM-dl3q5Zqavc8_wUxLBsck.roa
Signing time: Fri 28 Mar 2025 10:20:49 +0000
ROA not before: Fri 28 Mar 2025 10:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211017
IP address blocks: 2a13:a5c7:2900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:44:c7:91:e0:6f:89:31:98:5b:ae:17:e8:4a:6f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Mar 28 10:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=991ff090cf9d977ab966a6af73cff05312c1b1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:31:be:d5:1b:c4:76:19:28:71:6e:5c:aa:
82:68:bc:80:48:ed:30:e5:d6:d9:72:71:08:de:cb:
76:9b:92:67:bd:e6:d1:82:30:f8:16:f0:9b:05:92:
98:6c:17:bf:39:a1:fa:cc:e1:e5:28:b3:0b:cb:f2:
35:13:9d:67:b6:f5:46:de:ca:46:20:dd:78:8c:46:
f3:f2:5f:b3:92:f1:dc:8c:ac:c3:37:02:f8:84:67:
c1:51:51:17:55:b2:40:fa:f8:12:74:41:08:0d:60:
d2:e3:28:35:02:27:98:b6:5c:a5:72:0e:01:ca:f0:
19:fa:f7:0e:59:e4:76:a8:1d:34:3b:09:db:55:7b:
ac:39:a9:d0:38:fd:42:3a:78:a7:a4:ad:bb:2b:d7:
fb:05:0a:6a:cf:10:ad:52:d1:87:26:2e:d0:3b:c6:
f7:a2:89:6c:45:a1:fa:6a:d9:60:c8:cb:d1:ba:44:
71:5e:f8:b9:f0:b8:6f:93:7b:ff:f8:d3:f1:1c:40:
87:bd:d9:f5:78:ac:97:6f:74:a4:29:6e:5a:4c:7d:
77:6e:63:4e:fd:ab:bb:58:1e:6b:ee:78:ae:b0:dc:
ee:da:8d:fd:58:35:0d:7f:9b:32:e1:72:de:7a:9c:
c0:d8:e3:23:4d:f9:10:46:06:13:89:28:71:18:fb:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1F:F0:90:CF:9D:97:7A:B9:66:A6:AF:73:CF:F0:53:12:C1:B1:C9
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/mR_wkM-dl3q5Zqavc8_wUxLBsck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:2900::/40
Signature Algorithm: sha256WithRSAEncryption
20:bb:61:62:48:97:ba:e5:68:eb:37:dc:92:f7:56:a3:29:48:
89:b1:bd:c5:d4:b4:5f:03:08:16:da:6d:3f:c3:bd:66:24:47:
9a:ea:24:78:73:69:0d:43:ba:54:6d:db:39:c5:f6:4b:c0:8b:
b6:0e:7d:45:0f:25:7a:0a:fa:6e:a0:83:d0:3e:94:66:38:f0:
23:65:8d:2b:12:94:92:aa:eb:f8:dd:d1:25:72:2b:1f:9e:69:
44:b7:9a:42:39:2a:ec:23:5e:f2:82:ef:c0:52:0c:13:91:89:
6a:1b:a5:06:d8:5e:ce:dd:f2:42:88:da:75:bd:b0:16:ab:9e:
be:95:c2:3e:3b:bc:b7:6d:b2:80:cc:55:57:b5:56:f3:2f:f8:
80:ee:79:1b:31:8f:29:d2:74:3a:49:69:6e:59:18:c1:0b:db:
22:63:d1:4a:76:b5:5a:3c:e0:28:51:c6:63:ef:ab:72:fe:35:
eb:21:cf:ee:41:f9:f9:cf:f7:35:7b:62:a5:69:7e:1e:93:83:
fd:41:4b:26:83:f5:ce:85:de:1b:41:af:f1:d3:2b:13:85:22:
d9:73:d0:1e:63:ea:e0:f1:d0:77:dc:6c:6d:2f:d3:9a:2f:90:
96:19:f3:bc:ff:ee:69:ed:ae:43:13:d4:84:e5:2d:18:1b:95:
13:97:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:14 2025 by rpki-client