Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/DwPkZR2Fk3XTPYVDkun2x24bTHQ.roa
File: DwPkZR2Fk3XTPYVDkun2x24bTHQ.roa (raw, json)
Hash identifier: aeDwVoyUuAcFcTkf4BEFb0mmAMaQsJhzjIfzb6y7vIk=
Subject key identifier: 0F:03:E4:65:1D:85:93:75:D3:3D:85:43:92:E9:F6:C7:6E:1B:4C:74
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01958E769189ADA044200BB5BE4619EDBF62
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/DwPkZR2Fk3XTPYVDkun2x24bTHQ.roa
Signing time: Thu 13 Mar 2025 07:44:49 +0000
ROA not before: Thu 13 Mar 2025 07:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 2a14:a080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:76:91:89:ad:a0:44:20:0b:b5:be:46:19:ed:bf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Mar 13 07:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f03e4651d859375d33d854392e9f6c76e1b4c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:7e:d7:9f:31:21:43:48:b6:83:77:d0:87:
bc:db:bd:3c:fc:db:c3:6e:13:5c:a6:20:76:52:fe:
0d:3e:05:74:ee:58:67:fc:a6:e4:f2:bc:6c:c1:0a:
8b:53:74:a6:17:3f:ae:64:6f:7d:10:08:9b:fa:57:
31:dc:2d:b3:a2:e6:24:0a:c8:02:74:45:2c:58:de:
55:ee:a8:74:27:ce:c7:c7:45:a1:c0:bc:26:e1:13:
97:eb:5a:c7:61:8c:14:9f:f6:3b:f6:8a:40:93:db:
29:fe:81:5e:99:4b:85:81:84:e5:30:66:80:5b:de:
03:69:b9:58:b2:c7:81:f7:83:d1:67:41:76:83:b6:
c5:f7:9e:70:a6:03:4d:6e:5a:a7:7b:d5:a8:27:e1:
9d:2e:68:1b:00:5f:19:2d:ea:4f:d4:be:63:7f:6d:
d3:05:fd:d4:17:4b:51:3a:70:b9:09:48:11:a5:ab:
81:65:c2:57:35:01:3f:5f:ee:7c:b7:e9:a1:c5:e4:
64:c6:cb:e8:2c:64:6d:30:cd:a2:93:6c:f8:16:5a:
da:ee:b9:8e:f6:30:a0:bc:1f:c3:f6:97:62:35:80:
f0:d1:21:ef:b6:41:05:5d:48:cc:81:90:02:0d:48:
38:bd:2f:3b:78:2c:eb:0a:bf:5b:37:56:0f:08:8b:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:03:E4:65:1D:85:93:75:D3:3D:85:43:92:E9:F6:C7:6E:1B:4C:74
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/DwPkZR2Fk3XTPYVDkun2x24bTHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a080::/29
Signature Algorithm: sha256WithRSAEncryption
a3:10:97:73:f0:cd:91:85:7a:eb:45:54:e1:bb:83:e6:fd:73:
7c:66:86:f0:fb:22:d0:11:cd:00:30:76:3c:84:12:81:34:50:
60:df:74:4a:ad:c3:e0:fe:a7:b1:cc:77:63:6b:90:75:f2:77:
57:d1:f7:15:a0:9b:2f:82:34:c4:62:52:a9:0f:d5:b8:da:66:
f4:f8:d2:e9:5b:06:45:ad:30:38:1f:e9:0d:37:e6:39:d2:e2:
ab:8b:4a:50:df:f4:fc:36:3a:6b:e8:d9:cc:b3:56:f2:2e:79:
37:8f:c1:64:2f:63:80:e7:21:53:d6:7c:5e:e0:b6:c6:ff:4b:
e4:03:1d:0d:8d:78:97:ab:ca:71:9a:03:2e:b1:52:4d:1b:df:
65:c0:6b:9d:a7:87:7d:c7:9c:a0:c2:50:59:7a:c2:c1:9c:c3:
30:0d:4f:83:94:ef:b5:4b:13:af:86:24:bf:0b:14:34:dc:f4:
42:17:31:ef:6a:af:01:2a:c8:98:b1:94:0f:aa:e9:87:ee:1b:
2a:e7:bb:57:35:c3:15:16:8f:b0:18:7c:b1:dc:ea:06:0f:95:
64:9c:32:41:be:5b:27:17:ac:fa:05:3a:fe:e2:03:6d:dd:93:
63:5a:86:77:09:e2:88:00:19:b7:9c:de:82:05:ca:df:28:b3:
ee:68:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:50:07 2025 by rpki-client