Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/WzL1Cl4sg1z4wQqIuCMHxMPDMuc.roa
File: WzL1Cl4sg1z4wQqIuCMHxMPDMuc.roa (raw, json)
Hash identifier: n4Yw3pq5MyOekrSTwdjLFgxLpUsIwy8D4jmXIUXMJcM=
Subject key identifier: 5B:32:F5:0A:5E:2C:83:5C:F8:C1:0A:88:B8:23:07:C4:C3:C3:32:E7
Certificate issuer: /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial: 0194221FDA1E61AD016940C481B43A9561EB
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/WzL1Cl4sg1z4wQqIuCMHxMPDMuc.roa
Signing time: Wed 01 Jan 2025 13:48:20 +0000
ROA not before: Wed 01 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214160
IP address blocks: 2a14:6:10::/48 maxlen: 48
2a14:6:11::/48 maxlen: 48
2a14:6:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:da:1e:61:ad:01:69:40:c4:81:b4:3a:95:61:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Validity
Not Before: Jan 1 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b32f50a5e2c835cf8c10a88b82307c4c3c332e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:51:07:d6:58:82:15:ee:66:8c:de:74:3a:
31:15:23:18:6b:93:f7:87:48:94:1b:91:80:4a:0f:
60:c5:42:57:fe:16:2b:a9:19:89:c1:10:fa:e5:d1:
a8:b5:ea:4d:48:b9:79:85:26:63:d2:86:8a:91:0a:
98:b7:18:8a:c4:d8:ec:aa:e7:dc:45:96:6a:3c:33:
c8:19:af:cd:3d:a6:f1:a0:8a:7e:ea:ec:04:6a:3e:
ca:61:29:f5:03:7b:63:d1:cc:b1:b2:ce:b8:f0:f0:
1b:d1:22:95:71:51:9f:17:23:c4:a6:4c:33:b3:1c:
74:62:de:a5:fc:0b:a1:08:08:63:f8:b3:9a:9f:30:
60:62:01:d9:50:97:06:cb:ef:45:ed:4f:69:9c:d8:
ce:00:9c:3f:32:cd:2a:30:2d:b7:e4:64:b3:05:47:
04:66:98:5d:df:60:ad:2a:dc:35:eb:99:75:56:11:
41:8b:52:06:1d:aa:77:d0:2e:bd:4c:fd:e4:b2:c8:
67:1d:f6:a2:78:29:57:03:04:b7:28:4c:85:b7:66:
fc:f1:42:a6:72:a3:8b:28:cf:23:bd:61:9d:e7:17:
71:12:74:f3:80:27:90:39:72:4c:34:cb:b0:a2:71:
2d:07:91:26:d6:02:8b:ef:1f:ad:f9:2c:8a:9e:dc:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:32:F5:0A:5E:2C:83:5C:F8:C1:0A:88:B8:23:07:C4:C3:C3:32:E7
X509v3 Authority Key Identifier:
keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/WzL1Cl4sg1z4wQqIuCMHxMPDMuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6:10::-2a14:6:12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b4:15:db:98:7a:e6:fe:94:4a:d7:2b:98:ad:9a:8a:a4:43:0c:
15:91:eb:04:d6:cc:36:26:76:aa:95:74:f7:98:91:4a:52:25:
57:52:c8:d9:22:f4:11:6d:86:2b:10:cc:9e:6c:0e:81:bb:36:
5e:2f:e8:f4:00:3b:d6:da:ae:1b:47:c7:2a:ec:e1:b5:b2:8e:
e1:7e:f6:ed:0b:00:26:1c:fe:7b:5a:83:d0:d4:98:53:12:28:
bb:1d:70:36:6c:ff:cc:0d:ff:0c:da:e3:b9:6a:9e:fe:49:4f:
a3:28:4b:24:e1:69:c9:2b:ea:ec:c3:5f:83:0c:ac:b7:2a:07:
fd:aa:04:79:eb:de:6a:07:c3:ef:6e:f0:33:02:e2:95:e5:74:
9e:10:bd:a7:e1:97:72:1a:37:1b:99:01:0f:51:80:ec:63:10:
4c:64:ba:79:08:79:d6:fa:37:a2:bd:57:a2:3b:a9:b3:6d:cb:
6f:9f:44:6a:47:ea:ec:98:33:bf:78:a8:ca:53:66:2a:f8:d2:
ce:a8:63:28:47:05:bc:d3:0f:77:3d:66:27:05:bb:67:3e:c3:
6c:bb:50:33:f9:fa:34:67:9e:3a:7b:bf:e7:89:85:09:97:cc:
5d:e7:68:01:6e:34:e4:f2:ae:1b:36:11:24:5e:30:15:71:ea:
68:06:af:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:48:14 2025 by rpki-client