Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa
File: PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa (raw, json)
Hash identifier: 7Oj98eAXsnZMzEk2r6cNh4fSjsZETDRb2EQ95CICh04=
Subject key identifier: 3D:65:55:0A:EF:5D:0D:F0:68:E5:A2:50:EA:D9:4F:18:69:55:E8:1D
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 0194258F6CE2E59067830848689C90958207
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 2001:67c:2388::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6c:e2:e5:90:67:83:08:48:68:9c:90:95:82:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d65550aef5d0df068e5a250ead94f186955e81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:b3:4f:43:9b:0a:40:b4:55:69:dd:68:7f:
2c:27:08:6e:fb:23:24:27:a4:ee:56:e7:30:1c:8d:
45:56:76:10:5e:2f:7a:c6:88:80:71:1c:60:ba:86:
6e:12:fb:67:7c:f0:c1:92:0f:b2:86:b1:fc:9d:e0:
3b:87:80:af:fe:75:eb:10:f2:6f:3a:16:c3:39:10:
9c:d7:9b:96:b9:6f:ad:20:61:99:7d:08:9c:06:2b:
95:e3:77:f5:69:73:36:63:37:85:21:28:51:87:39:
2e:a1:55:ac:17:87:cd:d2:55:0f:4b:98:e0:91:16:
75:aa:00:1d:77:0c:dc:16:8e:9c:bb:d6:af:4c:4b:
ee:7b:e5:cd:a7:3f:34:c7:af:86:d7:18:89:ab:cd:
9b:55:40:d0:39:cc:74:35:d8:bc:b4:51:ce:79:0a:
ba:d1:4b:63:12:0d:c8:58:06:59:71:02:2b:78:ae:
f3:4d:55:72:27:06:cd:af:e6:8a:01:3e:51:5f:93:
e5:08:7d:cd:df:cf:bd:b4:ab:c5:75:18:12:f5:f7:
12:9c:98:0b:17:ce:d4:ed:f8:42:ba:52:98:7a:14:
9c:83:b2:be:0d:0b:22:28:e8:af:c1:d6:71:3c:64:
50:56:7b:60:73:f8:aa:2c:55:4a:ad:f4:62:80:11:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:65:55:0A:EF:5D:0D:F0:68:E5:A2:50:EA:D9:4F:18:69:55:E8:1D
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2388::/48
Signature Algorithm: sha256WithRSAEncryption
c6:bb:a7:48:b6:ca:d5:89:7c:1a:5c:77:35:94:4d:3d:61:5a:
0f:5b:e4:4c:92:72:03:b6:b2:44:c7:91:61:e1:80:55:1f:b0:
ac:1e:47:e9:18:35:20:4b:67:d9:b3:1d:87:a0:64:45:b6:a7:
4f:c7:2a:f3:c8:3b:6a:bb:d4:05:e6:73:e2:29:39:9a:52:31:
dd:2d:e8:1f:45:14:5c:a7:69:2c:d3:a9:12:fc:a3:13:04:a3:
bd:4e:34:21:53:e9:46:71:30:1a:2a:9b:92:d7:b7:46:da:59:
32:cd:bb:38:9e:4b:f8:9b:6d:df:45:2b:7b:ee:89:14:1a:d2:
c7:92:18:b0:37:82:02:73:5c:83:9f:79:2c:c7:92:28:14:db:
76:3e:3d:cc:c4:bc:63:c3:5b:2e:b9:5d:84:12:72:1c:4b:88:
60:bc:d6:8a:0c:ab:56:1d:56:ab:b4:05:dd:aa:d9:85:79:fc:
ec:ed:c0:19:a7:25:9e:7a:b6:a4:01:5f:c0:aa:56:e9:c1:06:
89:e6:25:1f:92:49:ae:55:d7:3f:66:c1:1d:f2:4c:c6:ae:e8:
01:a7:3e:50:4c:d7:27:a7:94:0f:9b:0a:9f:37:bd:64:67:84:
4f:2b:44:33:39:63:d7:36:5a:e6:71:00:8d:9a:52:e8:23:5e:
cf:1c:72:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:51:01 2025 by rpki-client