Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/l7a_kNrevPjxNodupeNHSdCWEr8.roa
File: l7a_kNrevPjxNodupeNHSdCWEr8.roa (raw, json)
Hash identifier: df9hdqTFrMwkzFMkErR0XGiaeVzL8O1w6wVxDJsaOfc=
Subject key identifier: 97:B6:BF:90:DA:DE:BC:F8:F1:36:87:6E:A5:E3:47:49:D0:96:12:BF
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C37539EE10485B0E809EFBF5BA0B
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/l7a_kNrevPjxNodupeNHSdCWEr8.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202685
IP address blocks: 2a05:b0c6:a00::/39 maxlen: 39
2a05:b0c6:1800::/37 maxlen: 37
2a05:b0c6:3000::/36 maxlen: 36
2a05:b0c6:4000::/36 maxlen: 36
2a05:b0c6:5800::/37 maxlen: 37
2a05:b0c6:a000::/39 maxlen: 39
2a05:b0c6:a200::/39 maxlen: 39
2a05:b0c6:be00::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c3:75:39:ee:10:48:5b:0e:80:9e:fb:f5:ba:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97b6bf90dadebcf8f136876ea5e34749d09612bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:c3:46:d5:dc:2a:10:50:14:b4:fd:ef:f6:
29:b0:28:fe:b7:89:a4:81:6f:8e:b2:28:fc:03:ce:
02:dc:8e:5a:36:73:77:6c:db:91:c6:8f:43:3b:b1:
32:65:5d:43:13:07:e5:e7:f2:1c:0f:a6:5c:ec:f8:
22:f2:8c:e0:c8:7b:53:e3:13:6b:93:ca:2b:3e:19:
44:48:23:0b:bf:e3:33:62:e7:28:97:5f:05:b9:18:
3f:12:37:23:10:13:a8:6f:8f:07:0f:7d:a5:da:67:
7f:a4:3a:55:b6:b0:f9:3b:da:78:cc:31:02:7c:f4:
2c:58:b5:22:a1:c5:4c:89:02:9a:4e:89:98:94:0f:
79:30:9d:bb:42:98:f9:5e:90:90:8c:4e:5e:44:e5:
d4:9e:d2:a9:fa:04:4c:c3:e1:59:45:b7:2e:45:0e:
71:9c:36:ab:4b:74:13:8b:41:78:42:a9:7c:19:22:
5a:60:67:44:c7:e6:21:fc:5f:50:77:e6:82:d4:60:
1d:15:26:c9:05:80:d5:a2:de:80:24:59:b5:9c:75:
b1:d1:fd:6c:e0:24:62:77:7e:3d:10:d6:55:cd:09:
26:9d:df:5d:77:d9:8d:85:0a:6f:c2:4c:32:03:12:
fb:19:cc:d7:37:6e:98:c3:7e:13:45:d1:93:26:02:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:BF:90:DA:DE:BC:F8:F1:36:87:6E:A5:E3:47:49:D0:96:12:BF
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/l7a_kNrevPjxNodupeNHSdCWEr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:a00::/39
2a05:b0c6:1800::/37
2a05:b0c6:3000::-2a05:b0c6:4fff:ffff:ffff:ffff:ffff:ffff
2a05:b0c6:5800::/37
2a05:b0c6:a000::/38
2a05:b0c6:be00::/39
Signature Algorithm: sha256WithRSAEncryption
72:4a:11:b3:b5:bb:38:04:ac:6c:f0:3b:21:29:91:ac:a3:15:
ac:1f:64:60:6e:be:08:41:ef:06:a6:d5:43:3d:ac:c2:19:83:
f8:8e:fa:d2:b5:b5:4c:c6:8c:b0:c1:62:28:e7:9a:f5:31:a7:
a0:08:20:77:87:10:bd:20:ea:30:93:3f:22:14:a9:c4:40:d6:
00:d7:55:e1:8e:24:55:28:5c:4f:8c:77:cf:c6:ee:58:11:71:
0d:3a:d9:b4:94:e8:7e:bd:6d:4f:66:4b:08:a5:20:b0:17:71:
9f:a3:14:f9:83:58:0a:5a:6f:4e:bd:4f:60:2a:a9:21:67:36:
83:08:7e:e3:bf:97:b8:ec:ea:be:dc:87:75:87:8d:a6:02:d9:
57:b6:7b:ed:90:87:63:83:6d:32:73:9a:68:e8:b5:c8:93:b9:
32:20:43:10:c4:44:61:e0:e0:05:90:b0:cf:58:6d:1b:ce:c5:
8b:53:0d:87:69:67:51:48:b2:60:10:80:61:ea:ad:e6:6c:5c:
8f:3c:71:6c:cf:dd:35:76:51:8b:55:57:c1:d4:8c:db:73:23:
5c:6e:65:65:53:63:29:f1:a2:8b:df:44:26:aa:79:fc:20:b5:
1f:8f:fd:5a:f3:1b:1b:2a:5b:f7:b8:2e:28:14:d5:8d:10:6f:
19:0a:ca:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:30 2025 by rpki-client