Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/whgLIqQCCtaIFPGvrV-g35mBN8g.roa
File: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (raw, json)
Hash identifier: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=
Subject key identifier: C2:18:0B:22:A4:02:0A:D6:88:14:F1:AF:AD:5F:A0:DF:99:81:37:C8
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 019420682B121D8DC778B43B9D79C42E1187
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/whgLIqQCCtaIFPGvrV-g35mBN8g.roa
Signing time: Wed 01 Jan 2025 05:48:05 +0000
ROA not before: Wed 01 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35407
IP address blocks: 2001:678:d8::/48 maxlen: 48
2001:678:b80::/48 maxlen: 48
2001:678:b88::/48 maxlen: 48
2001:678:b90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2b:12:1d:8d:c7:78:b4:3b:9d:79:c4:2e:11:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2180b22a4020ad68814f1afad5fa0df998137c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:8a:a5:8c:74:5b:71:49:8c:e0:70:5d:57:
d6:74:3b:bd:75:2d:68:c2:f1:76:92:79:ab:76:62:
fc:34:6a:9f:f6:98:b1:b7:33:aa:c4:bb:96:e7:ad:
42:ed:21:a1:43:c3:97:a8:ee:5a:a3:66:bc:ff:84:
77:c5:84:4a:9c:a8:35:d7:97:9c:f0:ca:9a:e2:63:
f6:7b:f4:af:bc:44:a2:c6:3a:32:45:48:0e:90:5a:
ce:ad:4c:23:0f:89:a1:24:62:d9:ea:36:6d:b5:44:
b9:6e:5d:37:c3:42:c6:85:65:01:d4:79:c3:9c:17:
e6:0f:a2:a1:eb:5f:3d:04:02:f0:ca:19:3a:77:22:
63:8f:1e:09:a3:d4:11:2d:d0:ec:0f:0d:8f:0c:9d:
e3:8e:2a:b7:b8:56:74:42:a0:a4:40:f9:73:66:a6:
87:a8:b7:f5:5e:60:21:c9:d2:43:c3:83:a7:22:43:
d6:47:6a:05:c2:82:b5:ef:b6:c3:a9:d9:02:94:b9:
94:c2:aa:1f:b0:49:1c:36:65:3a:65:3a:e5:72:1c:
91:f3:e7:26:99:58:2b:64:fb:d9:98:17:98:82:b3:
64:79:50:54:aa:9b:6b:7a:93:a1:d1:4b:98:82:78:
4c:44:49:7a:aa:c4:36:07:a7:92:9b:89:d2:56:45:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:18:0B:22:A4:02:0A:D6:88:14:F1:AF:AD:5F:A0:DF:99:81:37:C8
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/whgLIqQCCtaIFPGvrV-g35mBN8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d8::/48
2001:678:b80::/48
2001:678:b88::/48
2001:678:b90::/48
Signature Algorithm: sha256WithRSAEncryption
3a:44:f5:ec:b8:8f:76:79:1f:2e:76:e5:76:6b:5e:3d:e1:62:
fe:0d:e0:f1:1a:f4:b2:21:7f:15:0d:1f:c8:bb:56:af:6a:7e:
ee:01:ff:da:78:4d:c4:bd:b0:37:6b:0e:d0:fb:06:46:47:34:
99:c8:b5:15:36:c7:5f:29:7f:9c:b6:2a:eb:d9:85:e2:fd:53:
be:01:38:c7:64:c8:1e:0c:24:2c:95:74:bd:ea:5e:c1:37:0b:
7c:83:25:f9:a0:0e:a0:4c:4d:c4:79:fa:9e:f4:23:28:58:6e:
42:98:67:5f:ac:8d:4a:97:0a:e0:66:9a:23:2e:ad:b8:d4:06:
34:9c:ce:57:5e:02:d2:3f:a4:55:ba:4e:8d:48:a3:2c:b2:fc:
85:d1:e3:7f:92:27:ca:3c:ed:2e:42:7c:9a:f8:64:42:59:b1:
84:53:4d:b0:44:44:ed:b1:47:61:33:82:1b:4c:bb:fd:ff:79:
44:c4:24:74:cd:c3:24:e0:3c:13:9d:c1:16:3e:39:50:90:9f:
7f:5a:98:cd:4a:24:79:d4:a1:5d:3a:8a:0d:58:0f:fa:3c:04:
9d:39:77:15:61:4c:b3:4f:dc:3c:39:b3:ed:77:69:65:70:80:
30:3c:5c:67:4d:d4:2d:40:9a:61:dd:e8:61:da:f0:99:17:8e:
c6:1f:30:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:53:22 2025 by rpki-client