Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Xh3wWi1XiCfdHBeq5LJTttI1Ey8.roa
File: Xh3wWi1XiCfdHBeq5LJTttI1Ey8.roa (raw, json)
Hash identifier: HIDsQnU2Zc4Pwq9q1gw5LbnAEM9RY8HVdEsKmbkR2K8=
Subject key identifier: 5E:1D:F0:5A:2D:57:88:27:DD:1C:17:AA:E4:B2:53:B6:D2:35:13:2F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019639FB92A5F7B14BC5BA309FED03592EC6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Xh3wWi1XiCfdHBeq5LJTttI1Ey8.roa
Signing time: Tue 15 Apr 2025 15:05:10 +0000
ROA not before: Tue 15 Apr 2025 15:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 2a06:1185:10::/48 maxlen: 48
2a09:17c1:99::/48 maxlen: 48
2a0a:2d06:11::/48 maxlen: 48
2a0c:7886:123::/48 maxlen: 48
2a0e:15c5:11::/48 maxlen: 48
2a0e:1a83:22::/48 maxlen: 48
2a0e:c785:273::/48 maxlen: 48
2a0e:f603:33::/48 maxlen: 48
2a0f:1206:88::/48 maxlen: 48
2a0f:1584:9::/48 maxlen: 48
2a0f:1e84:3f::/48 maxlen: 48
2a0f:3046:85::/48 maxlen: 48
2a0f:3d86:77::/48 maxlen: 48
2a0f:7d04:1::/48 maxlen: 48
2a0f:bc00:100::/48 maxlen: 48
2a0f:df45:fc78::/48 maxlen: 48
2a0f:e1c1:11::/48 maxlen: 48
2a0f:e202:100::/48 maxlen: 48
2a0f:e6c6:103::/48 maxlen: 48
2a0f:e7c6:44::/48 maxlen: 48
2a0f:e844:33::/48 maxlen: 48
2a0f:ea44:8691::/48 maxlen: 48
2a0f:ee03:56::/48 maxlen: 48
2a10:67c2:d6::/48 maxlen: 48
2a12:ac44:8426::/48 maxlen: 48
2a12:ecc3:1312::/48 maxlen: 48
2a13:c900:fd1a::/48 maxlen: 48
2a13:e107:3d7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:fb:92:a5:f7:b1:4b:c5:ba:30:9f:ed:03:59:2e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 15 15:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e1df05a2d578827dd1c17aae4b253b6d235132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8e:20:67:69:5c:ce:10:c0:f2:ab:30:be:86:
e2:45:15:24:d9:38:88:80:3b:60:91:dd:3e:c5:a5:
83:90:00:07:9e:59:21:29:5d:63:ab:4f:54:1e:d9:
d3:99:b5:37:92:34:e4:6f:73:48:8f:14:a4:3a:b4:
2e:d0:2b:f8:00:a3:19:c1:05:da:41:89:73:9b:69:
3d:b4:2b:13:9b:1b:ad:ba:cd:55:63:d1:6c:aa:f0:
d4:41:f4:5d:e9:6f:87:cf:ae:89:ed:55:07:7a:fc:
fe:2e:ff:93:a8:0e:ce:27:c5:0b:61:a8:a8:e2:15:
2a:9e:1d:84:32:52:a5:bb:38:2f:8b:32:7d:42:e8:
1a:08:0f:95:0b:d1:e2:bd:a2:ea:05:55:58:43:c7:
a2:37:81:b3:41:10:ab:1f:e2:6b:47:ad:db:8e:65:
7b:6e:4b:7e:28:bf:db:10:7f:ac:a7:4c:77:c0:42:
cf:18:fa:ae:83:23:d3:61:89:20:4e:6b:d7:99:fb:
1e:dc:3f:79:d9:21:84:01:1b:88:fe:79:c1:6c:cf:
10:49:94:90:b8:bb:98:03:b1:18:f6:cb:0a:15:01:
0d:20:c6:ca:51:4a:13:42:4a:8e:52:95:10:ad:d1:
74:e0:05:77:b9:f8:f9:ff:db:bd:60:7b:63:3b:4b:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:F0:5A:2D:57:88:27:DD:1C:17:AA:E4:B2:53:B6:D2:35:13:2F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Xh3wWi1XiCfdHBeq5LJTttI1Ey8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1185:10::/48
2a09:17c1:99::/48
2a0a:2d06:11::/48
2a0c:7886:123::/48
2a0e:15c5:11::/48
2a0e:1a83:22::/48
2a0e:c785:273::/48
2a0e:f603:33::/48
2a0f:1206:88::/48
2a0f:1584:9::/48
2a0f:1e84:3f::/48
2a0f:3046:85::/48
2a0f:3d86:77::/48
2a0f:7d04:1::/48
2a0f:bc00:100::/48
2a0f:df45:fc78::/48
2a0f:e1c1:11::/48
2a0f:e202:100::/48
2a0f:e6c6:103::/48
2a0f:e7c6:44::/48
2a0f:e844:33::/48
2a0f:ea44:8691::/48
2a0f:ee03:56::/48
2a10:67c2:d6::/48
2a12:ac44:8426::/48
2a12:ecc3:1312::/48
2a13:c900:fd1a::/48
2a13:e107:3d7::/48
Signature Algorithm: sha256WithRSAEncryption
25:e2:90:c6:05:27:bc:d6:e5:95:68:06:dc:a1:1b:0b:30:98:
6f:96:9e:bd:82:25:c1:0a:40:ad:f8:a0:be:9e:ca:d8:8f:de:
22:d2:1e:36:91:f7:e6:55:3d:1a:a7:44:75:7e:c8:d8:48:fb:
69:ee:73:d7:e9:4b:21:d9:45:96:6c:ef:2d:0d:b8:48:14:53:
5a:24:77:95:2e:8e:c9:41:43:f2:7e:43:0d:84:ff:bb:51:72:
15:f6:bf:ff:05:ea:2e:e8:df:73:40:5a:ce:9a:5c:a7:e5:b3:
19:12:dc:d5:eb:14:1b:ac:08:89:44:cd:55:85:41:1b:f4:02:
16:2f:e9:d2:6b:d6:14:fe:50:78:1a:0e:6a:79:ea:0b:79:72:
70:43:a5:d7:f5:32:33:7f:dd:ba:a6:12:15:4b:b5:ac:69:49:
32:ec:4d:05:09:49:dd:7c:ae:26:67:87:0f:e7:e5:20:04:5e:
8a:33:0c:68:7c:2f:b3:7e:bd:de:e2:e3:26:33:1c:4f:63:3d:
67:bd:0a:3d:a4:c7:27:71:77:2d:26:62:de:17:27:76:de:b8:
61:e9:cc:f2:af:1d:e0:77:9a:91:f9:eb:88:fd:b7:07:25:1c:
be:1c:17:a4:99:89:d7:68:35:65:6f:4f:80:fd:a2:64:44:8c:
ad:c4:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:08 2025 by rpki-client