Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/w47kV22DUX2rmSAV17IslbqJZkE.roa
File: w47kV22DUX2rmSAV17IslbqJZkE.roa (raw, json)
Hash identifier: jwhv3mxFNCUIHi+oaeb9HMdIuv95C0du8+Aflx3W8ng=
Subject key identifier: C3:8E:E4:57:6D:83:51:7D:AB:99:20:15:D7:B2:2C:95:BA:89:66:41
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 019421B2279448E47A2E8BEAB78E046B3A2C
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/w47kV22DUX2rmSAV17IslbqJZkE.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 2a09:da00::/32 maxlen: 32
2a0d:e841::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:27:94:48:e4:7a:2e:8b:ea:b7:8e:04:6b:3a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c38ee4576d83517dab992015d7b22c95ba896641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:0a:eb:14:ae:64:7a:20:13:af:7f:e2:a6:
1a:4f:33:b2:4a:8d:d8:ce:3a:03:6c:74:36:46:30:
67:f2:2b:79:39:30:3e:b6:7a:29:47:c9:8d:af:1e:
45:31:cb:76:58:34:2b:f9:e6:0f:5b:20:9e:10:0d:
0a:f7:c0:6e:6e:ef:70:5b:e9:24:c8:3a:62:6f:1e:
73:67:4f:34:a8:28:cc:60:d9:05:09:5f:24:34:b1:
0a:ae:bc:4f:41:ed:38:4a:52:9b:b0:16:dd:96:3a:
9e:0d:5f:14:61:97:c4:b2:93:0d:fb:59:16:7a:6e:
8d:f5:70:06:33:c9:41:f0:04:b9:d5:f8:46:41:da:
4f:05:df:b7:b3:de:02:8f:be:c1:8f:e1:b0:7a:5a:
09:a9:56:50:cf:2d:1a:ef:ad:aa:69:f5:4b:ae:2c:
2e:3e:a9:34:a3:e0:dc:9a:4a:ad:ac:41:64:7b:cb:
5d:c7:ec:85:09:61:98:19:fb:24:d5:09:4a:68:8e:
0e:ae:c6:9c:81:04:1d:52:22:cc:d1:d2:90:11:42:
cd:6a:24:e4:3a:4b:2f:64:67:3b:b6:1a:78:2b:ec:
4c:22:5a:ee:66:27:d4:a3:77:1a:e9:e5:c6:94:d7:
42:76:1c:d7:dc:68:46:0e:a4:6a:6b:36:a8:3d:f7:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:E4:57:6D:83:51:7D:AB:99:20:15:D7:B2:2C:95:BA:89:66:41
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/w47kV22DUX2rmSAV17IslbqJZkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:da00::/32
2a0d:e841::/32
Signature Algorithm: sha256WithRSAEncryption
7f:8d:4b:8c:74:26:5a:69:b9:7c:8c:0f:6c:3a:7f:a5:9d:6c:
d8:66:d6:d3:e2:f2:7e:d4:e7:41:20:34:59:6f:38:2d:13:df:
83:65:67:57:a0:cc:47:74:8d:3c:8d:35:5e:57:73:c1:09:52:
31:ce:c8:25:9d:d9:fa:93:c1:be:43:a3:ed:0b:67:64:16:b5:
fd:91:08:de:3c:3c:73:d2:a5:bb:ed:aa:0c:19:22:2e:bb:e3:
da:c7:c2:73:a6:ad:82:84:f3:56:c9:b3:a4:f4:99:9b:19:a4:
e4:34:ab:5e:80:e4:02:fc:da:01:50:dd:f5:99:a9:e8:62:fa:
a8:00:f5:81:ab:37:6b:70:fb:1b:93:c1:0e:54:9b:ca:64:34:
54:31:75:3c:a6:58:0e:01:91:f4:8c:dd:f2:1f:36:c4:06:21:
65:b4:d8:57:d1:f9:89:bb:44:f7:3b:f8:82:fa:fe:38:3b:b7:
0e:1d:6f:a1:3f:50:c2:e9:af:bf:95:34:6c:09:81:15:a4:db:
78:cc:8a:1a:61:89:5c:76:97:0b:57:46:c6:24:59:7b:34:52:
39:96:7c:9d:92:5a:38:47:d3:ae:3b:ce:8d:dd:7f:af:70:e3:
8b:a0:e8:0f:77:79:18:d1:8c:14:75:07:e3:7e:17:70:4e:f1:
29:55:8a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:49 2025 by rpki-client