Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/EntV6VzXxjtJAhHc4d_vR-U-89U.roa
File: EntV6VzXxjtJAhHc4d_vR-U-89U.roa (raw, json)
Hash identifier: 1AGpduD0aJJJJWhNq4TNumzYObxhPZ6xOeMP1fog8L4=
Subject key identifier: 12:7B:55:E9:5C:D7:C6:3B:49:02:11:DC:E1:DF:EF:47:E5:3E:F3:D5
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C90CD909749773C69C2EE3014574
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/EntV6VzXxjtJAhHc4d_vR-U-89U.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211358
IP address blocks: 2a05:b0c6:5001::/48 maxlen: 48
2a05:b0c6:5006::/48 maxlen: 48
2a05:b0c6:5008::/48 maxlen: 48
2a05:b0c6:5009::/48 maxlen: 48
2a05:b0c6:500f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c9:0c:d9:09:74:97:73:c6:9c:2e:e3:01:45:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=127b55e95cd7c63b490211dce1dfef47e53ef3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:3c:4c:0d:21:9b:37:46:c1:6e:78:91:33:
5d:69:e4:c0:0c:18:3e:29:59:6c:54:27:b0:14:86:
d4:14:20:1d:dd:98:96:5e:ec:40:bb:51:0d:d1:4c:
d4:bc:9d:61:ba:fb:b6:9a:57:4a:95:53:5d:27:f6:
d9:4c:80:c1:da:69:9e:dd:7c:db:a1:b1:c3:21:59:
5d:40:27:ea:78:b5:0e:ef:c2:04:7f:8c:20:b0:0d:
aa:0b:ae:cc:5d:0e:63:86:dd:7f:2d:d1:7a:9b:2c:
aa:18:a5:f2:8e:1e:5f:3f:29:df:ff:fa:67:d0:7a:
f4:12:89:bf:00:fc:75:08:81:63:2a:0a:c0:48:15:
36:ad:c2:5f:be:63:81:d5:c3:b0:67:2a:cd:41:5b:
6f:ed:9c:33:1a:06:db:69:20:4e:4c:59:24:71:2a:
35:9e:70:3d:96:6e:92:1b:de:cb:76:34:40:64:06:
85:36:00:fd:b1:d8:26:3f:9b:86:75:de:ce:ac:d8:
2f:05:d5:43:44:ca:30:02:f9:05:3a:5a:41:62:6c:
33:57:db:a2:7b:c3:7f:56:81:18:46:37:48:cc:e0:
06:4a:e8:c3:30:87:67:fb:b5:2d:0a:8d:6a:86:f5:
9a:1b:2c:3a:29:dd:7b:7b:fb:ab:f9:53:c5:14:42:
de:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7B:55:E9:5C:D7:C6:3B:49:02:11:DC:E1:DF:EF:47:E5:3E:F3:D5
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/EntV6VzXxjtJAhHc4d_vR-U-89U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:5001::/48
2a05:b0c6:5006::/48
2a05:b0c6:5008::/47
2a05:b0c6:500f::/48
Signature Algorithm: sha256WithRSAEncryption
6a:cc:0f:7f:2c:51:2a:00:a5:54:ba:14:c1:bc:01:6d:53:60:
cc:1f:32:69:b0:6a:ab:3c:1e:78:44:a1:b5:3a:02:91:ac:43:
d8:d5:c7:10:bb:23:a6:5d:df:ec:82:60:0e:4c:1b:b5:61:89:
88:92:89:03:d5:bb:cd:25:15:cf:6c:cc:a4:bf:58:24:fb:b2:
19:1b:6b:c2:3e:d0:5d:3c:ba:42:bb:1e:07:4c:42:67:c9:fa:
43:f8:39:e1:63:f2:75:81:9c:1d:27:cf:58:b1:ad:6f:8f:23:
1f:af:60:06:38:89:3d:44:c2:85:20:de:15:3e:11:ca:75:74:
38:23:e1:43:d1:29:0a:6e:a2:65:c3:20:dd:05:95:f4:4a:6e:
71:06:23:e8:ef:ca:50:34:e4:43:5a:44:a1:83:3c:88:37:86:
1b:90:fd:0a:a1:34:df:34:9c:6e:31:65:ad:f4:61:49:6a:69:
e6:49:d0:e1:a6:02:6a:d0:92:16:b5:58:25:44:23:1d:58:4d:
3b:5a:1d:9e:77:05:f1:62:8a:26:5c:b7:a7:a6:60:59:b5:e8:
a7:35:bb:0d:20:28:56:1c:4b:30:37:3b:10:13:a0:90:7f:ad:
60:48:7f:f7:fa:c5:8a:cc:46:9a:a6:11:dc:3b:14:3f:09:60:
c7:41:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:04:56 2025 by rpki-client