Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/WaX26jWoRpSyNTjXI-QsFRwDKBI.roa
File: WaX26jWoRpSyNTjXI-QsFRwDKBI.roa (raw, json)
Hash identifier: yipaE9380n427VkfyNH9hBV6UP8h3/XAXxFHIhgfpDk=
Subject key identifier: 59:A5:F6:EA:35:A8:46:94:B2:35:38:D7:23:E4:2C:15:1C:03:28:12
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0196C9701E912F7847C3B6DD1B073697EB57
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/WaX26jWoRpSyNTjXI-QsFRwDKBI.roa
Signing time: Tue 13 May 2025 11:38:10 +0000
ROA not before: Tue 13 May 2025 11:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 217.147.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:70:1e:91:2f:78:47:c3:b6:dd:1b:07:36:97:eb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: May 13 11:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59a5f6ea35a84694b23538d723e42c151c032812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:2a:1b:b0:b2:ea:01:f2:6f:89:76:bd:63:
4c:09:44:2c:71:13:c7:fa:bd:07:75:94:16:bf:1b:
49:f7:d0:c3:6e:4e:1b:81:3a:55:ce:6a:74:eb:3d:
97:0e:a0:4d:ab:cd:cd:c1:13:ba:17:aa:d3:26:7e:
71:b6:a0:ef:ed:a0:9d:a8:30:fd:e1:ba:06:d9:1c:
d3:26:56:5a:95:a4:39:0f:e4:a6:3b:8d:7d:96:da:
2a:a9:85:e4:e1:fb:34:47:97:aa:5f:43:8d:ae:e0:
30:63:13:08:7b:fb:14:9f:04:b5:6a:d8:5c:70:be:
69:72:50:a6:0c:03:3c:3e:d5:4b:6f:5e:ad:e1:ba:
47:42:b9:eb:11:4e:f6:dd:ee:e3:3d:3a:43:8d:8b:
08:4b:d9:41:91:24:ef:50:4a:11:8f:5b:9f:42:75:
a4:9b:08:3a:74:78:ee:17:86:83:c4:16:cd:d0:5b:
da:3d:3c:3f:c6:9e:ed:4f:e0:18:3d:07:41:3f:77:
e6:f8:83:c6:76:3e:6b:90:c9:0c:8f:4f:d2:96:ce:
4d:fa:0f:96:16:2c:94:65:79:34:e0:64:36:b4:f4:
15:db:09:f7:1f:32:5e:f6:9b:2a:69:9c:c9:df:4b:
1c:32:b0:34:46:e6:5d:65:9d:65:31:1d:ae:f5:cf:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A5:F6:EA:35:A8:46:94:B2:35:38:D7:23:E4:2C:15:1C:03:28:12
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/WaX26jWoRpSyNTjXI-QsFRwDKBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:95:19:a7:7b:d8:d5:36:55:ee:19:1c:83:dc:58:e8:67:8f:
60:5a:59:de:b9:89:50:8d:bb:af:29:03:fa:50:fb:7e:c4:8d:
ca:66:b6:20:3d:cc:a9:0f:90:59:47:bb:b1:46:68:e7:28:03:
ba:d5:83:eb:46:c3:b7:60:98:36:f3:e6:08:23:46:69:f3:49:
3c:51:6a:53:53:0c:5d:c5:82:6c:ff:d0:5b:7b:09:6f:5e:2b:
8f:a0:8c:a0:eb:4b:2a:4e:21:4a:fd:80:4a:86:95:a0:1d:4b:
5e:a3:fb:f3:76:bf:8a:95:12:0c:6f:e0:e1:58:76:fe:55:c2:
ee:b4:95:77:34:c9:df:e6:8d:e2:3a:88:72:f3:f8:d7:4f:be:
ad:36:56:ce:0c:99:19:5d:3b:0d:14:b0:28:8c:74:a6:d1:1a:
16:5a:8a:4c:e2:11:93:ca:d8:80:c3:71:42:85:50:34:a4:2b:
fa:3a:c9:dd:ed:88:58:d3:30:8e:31:76:ed:9a:46:b2:4a:94:
4f:6a:cd:e5:08:5d:11:23:98:b0:3a:90:38:15:c5:9e:8b:4d:
2b:1f:f5:33:ab:d2:73:d4:7c:ec:d6:fe:a7:20:45:17:ec:1a:
db:29:a0:8c:b8:f3:a6:30:27:47:e8:3c:64:74:e1:db:f6:95:
4b:7e:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:19 2025 by rpki-client