Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/wJSVIQ5jg_-lv48HD0WKwu2CbdM.roa
File: wJSVIQ5jg_-lv48HD0WKwu2CbdM.roa (raw, json)
Hash identifier: oRLIIxFVnadydVwsfyy8jjdbfqtuyuSbLDJWjt8TqWI=
Subject key identifier: C0:94:95:21:0E:63:83:FF:A5:BF:8F:07:0F:45:8A:C2:ED:82:6D:D3
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FFA00198E6DEEC6A77ED3CA4AC5221B
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/wJSVIQ5jg_-lv48HD0WKwu2CbdM.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43317
IP address blocks: 2a0a:4784::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:00:19:8e:6d:ee:c6:a7:7e:d3:ca:4a:c5:22:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c09495210e6383ffa5bf8f070f458ac2ed826dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:1c:a2:8b:34:49:20:bf:da:8d:0d:de:b2:
1e:d2:68:82:f4:1b:5d:17:8a:2b:ac:d2:e4:02:47:
91:a8:5a:79:15:23:3d:69:d7:77:74:16:61:8b:08:
93:53:f8:d2:83:90:a2:d6:7b:97:58:dd:22:be:2c:
f1:a2:cd:93:f0:be:e2:3f:ce:0f:2a:fc:85:62:9e:
58:9e:9c:7a:52:0b:7c:45:61:48:11:64:15:8b:f7:
9e:10:ab:d1:ad:73:c0:98:63:5c:35:9c:3f:57:32:
68:a2:42:d9:9f:94:9d:38:4d:b5:67:5d:94:a5:d9:
4e:43:a1:d2:b6:30:d0:db:5a:07:44:a2:b5:ef:50:
5f:39:5c:5d:b5:70:42:9a:b6:a0:2a:b4:3e:67:a5:
97:90:ce:d8:06:23:e7:ee:fb:82:bb:14:ee:7a:ac:
09:9a:b5:ca:f9:4c:50:e8:82:89:11:bc:64:dc:d1:
f0:84:85:af:17:5d:9f:3e:3e:f4:e0:09:5b:cc:84:
fa:91:1d:4b:c6:87:da:c9:39:61:3e:94:01:f6:31:
6b:ca:a2:4d:8e:07:db:e8:db:e7:12:5f:3f:48:fb:
c8:38:89:12:25:0f:39:56:af:4e:49:35:03:d8:19:
e2:99:6e:cb:4e:bc:1d:2c:5b:57:52:1d:8e:aa:13:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:95:21:0E:63:83:FF:A5:BF:8F:07:0F:45:8A:C2:ED:82:6D:D3
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/wJSVIQ5jg_-lv48HD0WKwu2CbdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4784::/32
Signature Algorithm: sha256WithRSAEncryption
11:7b:86:c0:e7:cc:35:18:4c:35:7b:73:a1:6f:2e:a8:ef:9c:
7c:2f:17:fb:8c:02:d1:1f:18:09:86:c7:6f:d0:b9:8c:10:ac:
d9:ed:90:de:fa:f2:56:99:0a:61:56:8f:a9:ed:e5:f4:a5:6e:
b9:3e:0e:8d:84:75:b8:c1:e0:9d:d6:59:94:54:06:44:9e:ce:
6e:2b:ac:79:42:b9:2c:7c:5d:25:fb:f8:d5:ba:3d:dc:04:42:
0b:53:e0:4c:bd:15:42:d4:22:44:f7:e3:57:1f:8d:87:e8:5f:
c4:11:e4:b1:99:b2:0e:fa:53:ac:84:57:7a:81:7d:b0:78:0d:
8f:49:1c:68:b5:54:2b:52:40:61:b7:ee:1c:1f:bc:cb:e8:d6:
73:f4:bd:f9:5b:64:24:41:11:4a:69:61:de:5f:98:a9:ef:e5:
34:a6:65:24:0d:7c:83:f9:4d:a9:e7:31:8b:b1:6d:5c:26:cd:
43:c2:e0:7e:d4:8d:5c:86:dc:b6:e9:62:d1:1f:cf:8c:a8:1e:
a5:86:5e:c8:43:26:a6:bf:60:7a:e1:96:c9:ef:3e:ee:77:c8:
a6:41:ee:e1:10:84:8d:33:9e:f9:84:d2:0b:36:63:51:60:47:
c8:77:8e:df:b9:41:ce:60:79:55:6c:c7:7a:b1:99:fe:46:d5:
2f:9a:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:43:46 2025 by rpki-client