Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/W4Pp1uZLNY6O8zypTnIooV8OKUw.roa
File: W4Pp1uZLNY6O8zypTnIooV8OKUw.roa (raw, json)
Hash identifier: sz2YvKmGzTepzQeb00hlOadIcmBeFimSpx3Uqur21uI=
Subject key identifier: 5B:83:E9:D6:E6:4B:35:8E:8E:F3:3C:A9:4E:72:28:A1:5F:0E:29:4C
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019422FC37D1224615A6CE74451F324CF77A
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/W4Pp1uZLNY6O8zypTnIooV8OKUw.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 2a03:9381::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:37:d1:22:46:15:a6:ce:74:45:1f:32:4c:f7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b83e9d6e64b358e8ef33ca94e7228a15f0e294c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:55:36:25:c8:2e:99:fd:3a:91:1c:44:95:
00:fc:db:9a:e9:96:cb:52:b7:dd:f9:29:a4:25:f1:
0c:68:6d:14:4d:d7:2f:11:b2:ea:17:63:3e:bc:3b:
91:61:50:5e:a9:75:e0:4d:5b:64:df:c2:76:f3:36:
5c:e1:ae:be:71:76:2e:59:c9:c3:d9:6b:f0:d9:7f:
2d:3c:c2:3d:75:48:03:97:1e:bc:f2:21:ce:47:6d:
fc:63:79:98:01:00:34:4a:9c:54:9b:b3:04:e0:55:
3f:a9:be:e6:53:39:5f:54:2a:8d:e8:05:c2:00:3b:
8f:1f:00:ea:fd:eb:13:26:07:b3:11:16:41:df:08:
53:fb:10:37:d5:97:9a:49:72:11:ae:93:aa:5c:3d:
e4:c1:61:59:b9:9f:8e:90:3c:39:59:cd:97:03:91:
c5:40:40:bc:a9:2e:5b:d5:e9:48:03:2c:81:93:da:
8a:57:16:94:14:86:61:48:ba:c0:aa:32:41:b7:36:
b1:5c:8f:59:8d:b0:41:a4:ad:0b:bb:4d:b5:ff:30:
5d:3b:66:58:b5:5b:a4:de:cd:c2:1f:7d:d9:2c:ae:
e0:5c:57:79:23:fe:f2:ea:5c:34:b7:fb:20:bd:c3:
92:95:f9:85:7f:8c:e8:e7:65:02:00:3b:d0:8a:e8:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:83:E9:D6:E6:4B:35:8E:8E:F3:3C:A9:4E:72:28:A1:5F:0E:29:4C
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/W4Pp1uZLNY6O8zypTnIooV8OKUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9381::/48
Signature Algorithm: sha256WithRSAEncryption
a5:49:e4:29:c4:b1:21:e7:1e:94:60:fe:1c:00:a9:ef:f0:1d:
b3:81:82:9b:60:61:27:7a:ac:ca:f1:46:f0:66:79:24:3c:fc:
d0:99:88:9d:f1:67:95:3b:14:bc:5e:82:3c:d2:5a:00:b9:f3:
ef:2e:d4:27:fe:86:f1:4b:97:f1:ba:57:36:3f:73:f3:17:39:
e9:55:80:bb:8e:e0:b3:6b:2d:af:dd:65:34:56:e6:a5:0f:73:
44:68:68:c1:63:79:18:f0:45:2a:54:4d:35:b6:90:1d:ea:a6:
55:4f:0c:8d:17:92:b6:85:c4:89:23:56:bd:ca:7b:12:32:e9:
2b:c8:a3:df:ee:4d:1c:14:44:35:45:24:58:d5:90:b1:36:c9:
94:34:ed:dd:ff:0b:e6:77:af:30:d2:06:a9:e5:68:98:b7:c9:
a5:20:50:0c:aa:7d:2b:8d:f4:f8:03:3d:e6:56:4d:d2:b2:6f:
ca:44:27:b5:91:ba:c5:48:56:d2:93:8f:74:16:a2:d0:f5:93:
fc:e1:96:1d:6f:af:68:d5:71:97:1e:6a:62:8c:3a:70:1a:72:
bb:1e:9f:e6:3e:f3:a5:1f:a4:4b:53:64:d7:c5:bf:23:83:fb:
4f:c8:1b:12:c1:e5:60:ec:ed:f1:06:97:12:e2:59:e1:4e:de:
cd:75:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:11:52 2025 by rpki-client