Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/SQdli5SNglGHDotHhFa3ePaF_ws.roa
File: SQdli5SNglGHDotHhFa3ePaF_ws.roa (raw, json)
Hash identifier: 0EyufiMDxA/CMj9L5zfJI0+7IZVo81G4EUH1nYlF9h0=
Subject key identifier: 49:07:65:8B:94:8D:82:51:87:0E:8B:47:84:56:B7:78:F6:85:FF:0B
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01942445A4AB09A9AD2B5F6F800E32EC962F
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/SQdli5SNglGHDotHhFa3ePaF_ws.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202044
IP address blocks: 2a13:1880::/31 maxlen: 31
2a13:1882::/31 maxlen: 31
2a13:1884::/31 maxlen: 31
2a13:1886::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a4:ab:09:a9:ad:2b:5f:6f:80:0e:32:ec:96:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4907658b948d8251870e8b478456b778f685ff0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:f0:a6:89:26:fd:f4:4a:49:8b:32:92:53:
fc:f2:15:45:1e:7c:a5:00:53:c5:d2:19:ca:b0:35:
81:12:be:f6:70:8b:79:21:6b:e6:4b:b9:c1:5f:82:
0b:a6:3e:0e:58:40:e9:f6:12:bf:7f:d6:49:73:6e:
2f:46:43:a4:fa:02:b7:b6:54:dc:d0:6e:fb:37:23:
53:3d:1f:bc:9c:a6:60:0e:06:fe:65:71:81:9a:f7:
8e:c6:8e:0a:57:f3:e0:a2:1a:60:d1:47:58:fc:96:
b9:88:0d:ec:0e:f0:e2:70:e0:68:02:b5:8f:4b:48:
8e:5d:7c:be:c4:85:ed:fa:31:bc:9e:4d:46:c0:fe:
fa:50:c2:f4:1c:b0:75:98:9e:66:49:7f:4b:b5:e4:
a2:64:32:cf:e8:8a:75:42:e4:a5:94:bb:17:a6:19:
11:e8:29:0e:03:fc:f2:a8:26:d4:25:53:ff:21:cb:
a7:04:21:58:cf:97:71:2a:2d:91:ef:2f:2e:fb:43:
9b:d6:a9:d6:96:b0:aa:96:9d:75:9f:53:30:c4:d6:
b1:63:27:30:fa:3e:f5:10:45:62:1b:dd:dc:e6:5a:
e2:63:10:23:5c:b0:51:d5:63:1c:c6:df:34:65:ba:
1c:bb:01:b4:7d:c8:ed:a0:ee:3e:a7:5c:99:c6:95:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:07:65:8B:94:8D:82:51:87:0E:8B:47:84:56:B7:78:F6:85:FF:0B
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/SQdli5SNglGHDotHhFa3ePaF_ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1880::/29
Signature Algorithm: sha256WithRSAEncryption
8c:b9:bb:cd:1f:14:b3:dc:bf:d1:24:2c:f9:22:9d:78:ef:73:
18:a2:47:8a:42:95:92:d2:01:26:e6:90:4f:32:5a:4c:9c:da:
c9:d5:3a:97:cd:d3:b2:2b:74:9e:fb:97:df:b5:3b:2e:e2:52:
7b:32:f2:7e:b4:49:c9:a6:90:be:da:bc:2f:41:b7:33:0a:26:
7b:71:b2:6f:06:c4:52:7f:7b:0f:9e:e9:a8:ba:ae:10:e1:50:
80:28:73:80:d9:01:28:02:5d:ee:77:f3:0a:87:31:e8:08:7e:
88:93:a8:04:c5:17:e4:ea:c6:72:7b:1f:a5:ed:e3:13:73:dc:
74:b8:b7:57:56:51:c2:82:3b:12:af:c2:10:a5:c9:db:7d:78:
f0:ef:62:5a:75:8c:f6:d1:db:66:ba:fc:03:d5:01:18:3c:2b:
7b:92:5c:4e:7d:95:73:7d:0d:64:2e:09:21:23:11:44:a1:d8:
bb:eb:10:0e:5a:02:8c:4c:e0:b6:44:40:c9:3b:79:8a:e1:e2:
ce:66:36:bf:01:4e:36:c2:72:b9:ec:6b:a6:5b:12:8e:83:64:
10:8c:34:9f:0e:20:09:9b:7e:a2:71:44:1a:4b:84:7e:57:76:
31:d0:de:fd:21:d2:d3:f4:b7:da:03:24:b5:8c:c6:6b:a3:f1:
47:2e:68:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:28:28 2025 by rpki-client