Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/WLuKYa43v4uLoTtBwSGJKLjUaW8.roa
File: WLuKYa43v4uLoTtBwSGJKLjUaW8.roa (raw, json)
Hash identifier: Fla1bcGk5oIM2PQQTeiavoL8NWNQFQ/epjWD6RXMXlw=
Subject key identifier: 58:BB:8A:61:AE:37:BF:8B:8B:A1:3B:41:C1:21:89:28:B8:D4:69:6F
Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f
Certificate serial: 0195821E9F7ADFA36E7D387F07FA4EF18D44
Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/WLuKYa43v4uLoTtBwSGJKLjUaW8.roa
Signing time: Mon 10 Mar 2025 22:13:19 +0000
ROA not before: Mon 10 Mar 2025 22:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 2a13:e3c0::/32 maxlen: 48
2a13:e3c1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:82:1e:9f:7a:df:a3:6e:7d:38:7f:07:fa:4e:f1:8d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f
Validity
Not Before: Mar 10 22:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58bb8a61ae37bf8b8ba13b41c1218928b8d4696f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:00:2a:49:65:50:8d:76:4e:94:50:8d:13:
98:6b:e4:03:2f:da:e3:75:6b:df:77:79:91:c6:33:
51:2a:45:e3:0b:aa:0f:ee:d1:ce:c5:70:87:a8:06:
57:e7:f3:d8:2b:70:14:d0:49:2c:6f:7a:2e:4a:24:
d1:5f:a8:b0:49:ff:44:d5:85:c2:27:35:5d:e3:56:
37:30:13:e4:dc:8a:05:1d:5d:15:1d:a1:2a:1c:93:
b7:9a:c4:d2:8c:c1:66:31:31:b9:c6:00:39:28:b2:
29:74:64:16:f6:b3:ec:14:79:0c:54:38:20:99:f9:
bd:ec:07:11:ca:51:e3:2c:7b:47:45:61:c6:3e:83:
28:94:af:b9:82:4b:8e:08:e8:18:06:56:9d:51:5e:
f8:5a:bc:9d:ed:62:ee:2e:e8:fc:24:8c:ba:5b:b3:
26:51:ea:da:97:cd:2c:e4:15:2e:69:5d:e9:2c:0c:
25:16:f5:03:c8:9b:6c:43:03:f0:58:45:1b:23:8e:
34:b8:ea:8a:86:e4:08:fe:ef:6c:99:7d:ce:a3:43:
92:c0:f5:c0:5d:58:00:eb:ac:f6:24:48:98:31:0c:
19:9d:78:70:ce:da:d8:c0:68:be:94:29:09:c3:a4:
da:e4:b2:83:6c:a4:68:07:f4:9f:8d:f2:64:a4:30:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:8A:61:AE:37:BF:8B:8B:A1:3B:41:C1:21:89:28:B8:D4:69:6F
X509v3 Authority Key Identifier:
keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/WLuKYa43v4uLoTtBwSGJKLjUaW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e3c0::/31
Signature Algorithm: sha256WithRSAEncryption
cf:4f:56:a9:d5:d8:4b:64:5b:db:4e:b0:b9:4a:c0:46:47:f9:
4d:c7:25:7c:66:0c:db:f9:21:52:f7:8e:d8:77:4b:5a:c4:bc:
7f:4f:3c:5f:f0:6b:e5:ec:d5:c6:95:68:eb:34:b1:09:34:9e:
ba:88:c5:fd:31:60:b0:a4:b3:71:c6:20:b9:4a:e4:da:f8:f0:
f3:26:da:e7:da:2f:17:16:f2:85:ff:93:1e:d0:48:e1:5c:fe:
f9:62:3e:91:1b:d2:3e:f9:18:45:11:a5:52:0e:ec:90:93:dc:
89:fb:77:a7:fd:ed:44:7b:af:fa:36:be:97:f3:07:14:02:4e:
67:3c:64:ec:b2:13:45:70:11:b5:4f:35:a2:6a:9a:5b:e8:62:
6a:de:c3:f3:85:bd:59:e0:cf:4b:0b:45:a2:a2:2c:5b:b8:70:
93:f3:b9:e8:09:55:a3:6c:29:89:cd:93:38:d0:a2:9e:b7:8d:
61:5b:49:8a:2a:5b:30:f8:b3:54:c7:03:b8:9b:e5:f2:ba:43:
bc:93:dd:8d:66:6f:35:a9:c3:09:62:1d:1a:da:61:2c:33:87:
d6:82:89:81:ec:62:d6:c8:ed:71:c9:d3:7d:04:b4:67:a9:4d:
ed:b8:ce:3c:d7:81:19:9d:01:84:b5:93:f3:b6:45:97:2c:31:
bc:7b:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:17:32 2025 by rpki-client