Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/w4bzF_pEkFfk1EQehXaYBsdoQWU.roa
File: w4bzF_pEkFfk1EQehXaYBsdoQWU.roa (raw, json)
Hash identifier: g2eg7VX8+vdllWKcJ3J5f8zWyK5/FczyQ85wORGqCxw=
Subject key identifier: C3:86:F3:17:FA:44:90:57:E4:D4:44:1E:85:76:98:06:C7:68:41:65
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B24FD2C7EDAF96CB04BCF9E4C9FFF8
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/w4bzF_pEkFfk1EQehXaYBsdoQWU.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3058
IP address blocks: 2a00:db8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4f:d2:c7:ed:af:96:cb:04:bc:f9:e4:c9:ff:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c386f317fa449057e4d4441e85769806c7684165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:18:08:b6:cf:91:2d:f5:a5:4a:af:8f:aa:
49:e5:1c:df:55:1b:48:03:2a:cf:d0:b3:4f:6a:b2:
52:df:17:63:97:ec:eb:0f:2e:fc:00:5d:c4:e6:d2:
a8:06:aa:db:5d:5e:52:1d:56:c2:14:ae:9c:01:cd:
d8:cd:13:3c:9b:8e:d4:41:2d:a2:82:58:c9:66:94:
60:31:5d:a6:63:c4:cf:8e:71:17:2b:19:ef:2e:1c:
98:3b:24:1c:e4:49:09:58:8a:92:5e:93:a0:25:e3:
4f:93:4f:7e:bd:e9:ee:e1:eb:1d:6b:f9:15:08:e0:
fe:86:5e:a1:76:65:f2:ef:ce:61:ca:43:79:84:4f:
29:c0:4e:c3:f2:fd:bf:d1:62:67:af:26:70:64:21:
c6:6e:68:f9:31:b3:2e:ed:23:bd:de:d1:1f:74:84:
ab:a6:5a:7b:b7:19:c1:7d:b4:85:a0:e7:7c:a3:2b:
e2:66:e7:cb:ba:d5:72:30:2a:66:c2:55:ea:e3:0c:
83:bd:16:9e:29:96:48:db:d3:61:5c:eb:93:89:52:
ef:25:a0:51:fc:45:23:86:c3:ed:c3:54:7c:72:10:
a4:53:de:22:8c:19:dd:d0:b0:3c:f4:2d:21:c3:78:
29:d7:7b:3b:c5:b6:dd:51:e0:86:03:e5:b7:be:29:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:86:F3:17:FA:44:90:57:E4:D4:44:1E:85:76:98:06:C7:68:41:65
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/w4bzF_pEkFfk1EQehXaYBsdoQWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:db8::/32
Signature Algorithm: sha256WithRSAEncryption
22:da:80:fa:f0:a2:ad:a8:4c:2f:02:06:62:3e:03:30:4d:88:
69:33:ae:ce:1f:f0:d2:95:09:55:a7:79:08:ef:97:29:b2:a1:
0b:f5:8d:79:69:c6:c8:fe:0e:52:c2:4e:b2:d7:7e:8a:65:97:
e0:8a:1f:59:7d:04:26:6a:3a:9e:25:bf:c2:9c:c0:68:1b:59:
94:c7:0f:73:0a:c9:7a:c0:f0:4a:b8:8b:23:1d:f4:6f:b5:16:
5d:17:00:da:62:85:1c:0a:18:60:8d:11:72:1c:74:d4:ce:63:
dd:ec:e6:a4:8e:03:73:9c:0e:1b:1e:f5:06:e0:5a:a8:d8:e8:
8a:db:32:40:94:8f:4f:94:01:3a:0f:78:78:9c:47:4c:2a:22:
e2:78:cc:ff:45:e7:2d:34:cd:33:3d:e3:7e:40:b3:79:9b:12:
89:f1:7d:95:cf:af:78:44:91:56:7d:00:aa:29:28:64:aa:5b:
74:99:69:f3:ae:17:a2:ea:d3:10:57:41:2d:ef:a7:7f:33:2d:
88:1f:63:1e:46:51:72:08:a5:d6:9e:af:f5:61:52:7b:01:36:
ae:97:ed:fa:07:8c:dc:82:f1:c7:da:cf:bf:61:83:25:36:3a:
c4:a8:c0:b6:97:12:8b:6e:9d:cb:60:da:1e:1a:3a:7e:77:f7:
48:b5:6e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:53:22 2025 by rpki-client