Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/wTQDqjXgoUhzhSugRLMIDWXZVNA.roa
File: wTQDqjXgoUhzhSugRLMIDWXZVNA.roa (raw, json)
Hash identifier: sP07Xq5SBcl1K6LagQUnTqXSUPfJF0A6TBK/LGuxJ5M=
Subject key identifier: C1:34:03:AA:35:E0:A1:48:73:85:2B:A0:44:B3:08:0D:65:D9:54:D0
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 019425FCCCD0D9CA7E9F1FE9AC098426EBD8
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/wTQDqjXgoUhzhSugRLMIDWXZVNA.roa
Signing time: Thu 02 Jan 2025 07:48:31 +0000
ROA not before: Thu 02 Jan 2025 07:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44735
IP address blocks: 2a13:2440:b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:cc:d0:d9:ca:7e:9f:1f:e9:ac:09:84:26:eb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: Jan 2 07:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c13403aa35e0a14873852ba044b3080d65d954d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:a3:c7:c4:74:10:db:7f:1f:31:fc:24:e1:
8d:0b:d6:61:05:36:6d:e8:02:31:9d:67:2d:e5:d7:
89:f9:13:13:6c:b7:0d:54:32:d6:61:ed:bd:5c:ce:
5a:99:6f:71:6a:50:14:3f:8e:ee:9f:b1:18:d4:b7:
15:4f:1a:3b:88:e0:65:96:ab:e6:43:68:f6:d8:bd:
ba:ef:b0:c4:97:fd:d8:19:06:d1:63:17:83:51:77:
02:72:93:dc:35:c4:cc:9d:71:b6:13:54:53:0d:fa:
91:df:c8:29:62:60:0d:7d:d6:ba:24:e0:e7:cf:70:
84:6e:4e:f5:75:bb:ea:f7:25:31:18:f0:6d:01:c6:
65:5e:fe:d4:82:8c:d2:aa:9d:b1:ac:ad:2a:50:dd:
82:9f:8b:b3:c9:d2:26:8b:70:a7:8e:3f:d5:fd:62:
45:0c:59:5d:44:21:41:d6:21:23:76:e5:e2:1f:b5:
6e:6d:8b:20:32:af:17:ff:06:b7:d4:2e:fe:e7:f2:
9a:ac:ee:e5:5e:fe:21:af:bf:40:9f:fd:68:d1:2c:
10:fe:b4:02:69:fe:c0:64:a6:48:04:1d:ec:92:3e:
a4:45:cf:e8:1a:a0:81:5e:83:fa:d7:fd:f2:97:67:
dd:2f:1c:df:58:1e:72:bd:6a:8f:1e:59:6b:eb:8c:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:34:03:AA:35:E0:A1:48:73:85:2B:A0:44:B3:08:0D:65:D9:54:D0
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/wTQDqjXgoUhzhSugRLMIDWXZVNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2440:b0::/48
Signature Algorithm: sha256WithRSAEncryption
10:12:17:31:97:b1:39:80:ec:20:9f:6e:95:2d:90:0d:1b:38:
95:64:75:ed:22:f3:21:b1:90:d7:b9:f1:e8:d0:8a:1b:cd:8c:
17:47:20:7e:e3:a3:88:7e:af:d3:8c:02:3b:f1:7f:8b:31:df:
d3:46:cd:a6:c9:08:86:3b:09:96:2b:12:69:49:2d:82:c1:dd:
ca:2f:e7:a6:c7:29:8f:34:3c:04:03:e7:cf:19:97:b9:e2:7c:
0a:24:6d:c1:5c:2c:22:3e:a8:a7:d5:1d:d0:23:7a:bb:c3:8e:
b2:3e:29:a2:4b:11:bf:48:3d:3e:1d:cd:9e:96:f5:bc:26:2e:
8e:1a:20:95:c4:dd:4f:cf:50:2f:bd:59:d3:b8:56:69:36:13:
99:42:c3:b3:3f:85:c8:63:7d:49:8e:44:5c:2c:90:f4:56:d5:
ba:5d:b4:e5:51:15:fb:ab:1d:a9:5b:07:1f:98:66:4d:a5:c1:
92:5f:be:c8:76:98:a4:96:6a:3d:e1:01:e7:9f:12:21:c5:b2:
6c:dd:7a:83:0c:9b:3e:fa:b0:32:29:77:4f:cd:f0:18:1a:62:
11:ef:2c:80:cb:bf:32:73:cf:f3:80:90:be:30:6e:d6:d3:68:
e4:b3:23:46:c6:37:cb:07:0c:65:6f:ff:93:86:98:db:07:31:
e6:f3:1d:82
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQl/MzQ2cp+nx/prAmEJuvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWM4YzdmMzM0MDUzYzhhOTBhMzQwODAwOWVmM2QzYjdh
ODJlM2QwHhcNMjUwMTAyMDc0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTM0MDNhYTM1ZTBhMTQ4NzM4NTJiYTA0NGIzMDgwZDY1ZDk1NGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhejx8R0ENt/HzH8JOGNC9ZhBTZt
6AIxnWct5deJ+RMTbLcNVDLWYe29XM5amW9xalAUP47un7EY1LcVTxo7iOBllqvm
Q2j22L2677DEl/3YGQbRYxeDUXcCcpPcNcTMnXG2E1RTDfqR38gpYmANfda6JODn
z3CEbk71dbvq9yUxGPBtAcZlXv7UgozSqp2xrK0qUN2Cn4uzydImi3Cnjj/V/WJF
DFldRCFB1iEjduXiH7VubYsgMq8X/wa31C7+5/KarO7lXv4hr79An/1o0SwQ/rQC
af7AZKZIBB3skj6kRc/oGqCBXoP61/3yl2fdLxzfWB5yvWqPHllr64xlFQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFME0A6o14KFIc4UroESzCA1l2VTQMB8GA1UdIwQY
MBaAFAicjH8zQFPIqQo0CACe89O3qC49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p5TWZ6TkFVOGlwQ2pRSUFKN3owN2VvTGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNGUwM2UtMjdiMi00OTRiLThjMGYt
NmY3MDA5YmVlOTE1LzEvd1RRRHFqWGdvVWh6aFN1Z1JMTUlEV1haVk5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNGUwM2UtMjdiMi00OTRiLThjMGYtNmY3MDA5YmVlOTE1
LzEvQ0p5TWZ6TkFVOGlwQ2pRSUFKN3owN2VvTGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMkQACw
MA0GCSqGSIb3DQEBCwUAA4IBAQAQEhcxl7E5gOwgn26VLZANGziVZHXtIvMhsZDX
ufHo0IobzYwXRyB+46OIfq/TjAI78X+LMd/TRs2myQiGOwmWKxJpSS2Cwd3KL+em
xymPNDwEA+fPGZe54nwKJG3BXCwiPqin1R3QI3q7w46yPimiSxG/SD0+Hc2elvW8
Ji6OGiCVxN1Pz1AvvVnTuFZpNhOZQsOzP4XIY31JjkRcLJD0VtW6XbTlURX7qx2p
WwcfmGZNpcGSX77Idpiklmo94QHnnxIhxbJs3XqDDJs++rAyKXdPzfAYGmIR7yyA
y78yc8/zgJC+MG7W02jksyNGxjfLBwxlb/+ThpjbBzHm8x2C
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:41:28 2025 by rpki-client