Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/W2NhW2V8Iexgd4nWoDLptnalys8.roa
File: W2NhW2V8Iexgd4nWoDLptnalys8.roa (raw, json)
Hash identifier: qN2oaoKEpYxm1heQ0tQCx/vfqwegOgZk4tzwgcNVmWg=
Subject key identifier: 5B:63:61:5B:65:7C:21:EC:60:77:89:D6:A0:32:E9:B6:76:A5:CA:CF
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 01941FFA6CF5086EAB2FEB6951B06F7EB792
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/W2NhW2V8Iexgd4nWoDLptnalys8.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34549
IP address blocks: 2a13:5681::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6c:f5:08:6e:ab:2f:eb:69:51:b0:6f:7e:b7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b63615b657c21ec607789d6a032e9b676a5cacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:01:e3:c9:65:c0:a0:77:75:b1:1f:6f:e2:
ca:12:d4:57:51:ca:a6:67:6e:88:87:e5:30:5f:45:
80:41:bd:5c:49:b6:41:19:28:19:c8:f8:b9:3b:c3:
10:51:11:56:1f:08:8c:a3:00:a7:0a:e4:71:15:a1:
65:e0:cc:d2:a0:11:97:3f:54:3f:39:9f:8e:e7:cc:
c8:fe:1c:d3:1f:fa:7c:ed:d4:ce:3e:a4:7c:e6:28:
41:28:f4:b5:60:ec:6e:e8:bb:5a:9a:a6:d3:74:ac:
00:5f:d7:66:e1:0d:3e:58:8f:49:14:92:f5:20:55:
96:ed:c1:8d:83:93:84:c1:49:90:05:41:c4:1b:a3:
83:57:ab:7d:6c:40:36:b2:f6:70:8d:8e:31:50:d3:
f2:18:23:ae:b7:70:b0:35:31:d3:7b:b8:52:e9:c6:
5f:3f:1e:a7:b9:9d:bc:b7:ae:47:91:45:02:03:2a:
67:be:e2:29:20:88:b7:79:5a:bd:ad:ec:42:6a:2f:
6a:51:0d:96:15:5c:7d:51:21:07:0f:da:9a:ff:2f:
6c:f4:38:1b:e8:3f:2f:4f:f8:4c:4a:fc:6b:58:3b:
6c:ec:74:7a:fa:f0:ef:7f:b5:90:5f:a2:f6:30:01:
a1:db:cd:9f:91:8e:eb:f7:b8:72:64:bc:0c:b5:3a:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:63:61:5B:65:7C:21:EC:60:77:89:D6:A0:32:E9:B6:76:A5:CA:CF
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/W2NhW2V8Iexgd4nWoDLptnalys8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5681::/40
Signature Algorithm: sha256WithRSAEncryption
09:69:ea:3c:8f:89:35:6b:64:7e:96:da:86:64:ad:d7:0d:96:
46:cb:ce:9c:1d:a6:f1:f4:3b:26:43:a4:38:28:76:f2:cd:dd:
45:7c:b4:18:e0:b0:31:e1:0d:ce:41:3d:83:e1:5b:63:99:56:
82:0e:b1:ca:4d:00:ac:b2:ac:d3:86:d7:13:cf:eb:31:55:95:
84:99:7e:f8:19:6e:6c:28:32:d2:57:7d:f2:eb:71:4f:99:57:
7c:eb:95:d7:77:61:4b:bb:8f:4b:e7:cf:27:13:89:81:18:11:
e6:f5:2c:4e:e8:a6:46:cd:6c:32:f4:d8:8a:5f:e6:56:da:00:
e9:43:4e:22:83:a0:d9:ec:bb:2a:16:9e:ab:1a:69:8e:16:b8:
9c:98:eb:6d:d7:a7:bd:c0:4e:2d:43:23:aa:95:db:c7:da:c7:
fe:7f:88:2e:08:dd:ab:77:dc:68:60:47:1f:57:38:6f:a3:34:
6f:b6:23:21:98:b2:d0:33:18:af:a9:22:b5:54:62:82:b4:bf:
d8:f9:30:69:8e:c9:4c:4c:96:7c:ea:9c:bf:13:c9:e0:5b:50:
10:5d:f3:d1:f4:69:cb:a2:e5:f8:ae:79:85:71:82:93:07:f0:
b0:1e:4b:63:18:82:fc:74:46:ff:51:44:58:09:88:26:6f:35:
59:1c:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:07:49 2025 by rpki-client