Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/WBEZkdOtzqubY4jYGPTdt89fcs0.roa
File: WBEZkdOtzqubY4jYGPTdt89fcs0.roa (raw, json)
Hash identifier: YzzD8M9BLKgLshmZ4kyXFcT1vvqCniPNKBqVVUae9sY=
Subject key identifier: 58:11:19:91:D3:AD:CE:AB:9B:63:88:D8:18:F4:DD:B7:CF:5F:72:CD
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 0194FE99D81F9E9B906685036DD9B73E06DB
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/WBEZkdOtzqubY4jYGPTdt89fcs0.roa
Signing time: Thu 13 Feb 2025 09:18:02 +0000
ROA not before: Thu 13 Feb 2025 09:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204866
IP address blocks: 2a07:a80:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:99:d8:1f:9e:9b:90:66:85:03:6d:d9:b7:3e:06:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Feb 13 09:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58111991d3adceab9b6388d818f4ddb7cf5f72cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:47:52:7e:62:1e:c9:b8:42:03:f5:29:a7:
95:f5:8f:05:1d:2b:1b:54:94:c8:98:ec:64:b7:8a:
cb:87:3f:1b:97:f5:ac:23:48:e2:ad:55:ba:f1:30:
dc:43:a2:7b:e0:3b:a1:f3:d8:70:c8:b0:de:33:71:
83:65:ec:39:b5:c4:dc:4c:11:01:a2:63:79:ef:6c:
63:3c:96:3f:2f:e0:8e:bd:a5:63:fe:d0:f5:fb:6d:
05:26:ad:f3:f1:5f:f9:14:c5:74:44:f6:b9:5a:77:
0b:90:00:28:a2:6f:2d:8f:2f:66:a2:73:4e:81:1a:
e8:8b:bf:ad:59:b2:45:13:2c:97:79:c9:07:5f:25:
17:91:0b:5b:ff:5f:bd:47:c7:22:61:66:7f:41:a9:
a3:b0:ac:ed:a4:fc:80:32:a2:a0:a1:9a:c2:7c:63:
1e:0e:75:fc:2f:97:c5:39:d9:86:4b:2a:b5:56:d2:
d3:43:36:f7:df:d0:b2:6d:46:47:e2:cc:8c:fe:cd:
cc:d6:d8:c5:e3:57:d2:a7:80:88:65:37:0f:f2:20:
eb:52:8f:ac:10:87:2c:fb:95:d9:9e:58:9d:93:b0:
76:70:c0:ce:72:cb:35:6e:34:86:ef:b4:d4:e1:00:
f4:70:49:e8:a7:72:0c:a8:f5:f6:5d:5b:49:10:e7:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:19:91:D3:AD:CE:AB:9B:63:88:D8:18:F4:DD:B7:CF:5F:72:CD
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/WBEZkdOtzqubY4jYGPTdt89fcs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:a80:4::/48
Signature Algorithm: sha256WithRSAEncryption
73:2e:06:7a:39:dd:9a:56:cf:95:ba:a1:1f:29:68:34:f7:2d:
57:ed:c4:49:f3:5c:5e:64:49:32:d1:1c:92:8a:7a:fb:ac:4f:
dc:21:b3:33:21:5a:43:de:10:c4:ac:ff:c9:5d:1e:e8:53:fd:
27:78:0f:3b:e4:72:fa:1f:4e:ab:88:30:2b:72:f0:c5:7a:70:
7b:9a:e1:09:21:da:9f:71:1a:19:ec:59:9f:f6:4a:a7:cb:8d:
f8:46:57:08:ee:2f:f0:98:ea:e5:ff:2d:60:b9:f0:32:e9:7b:
99:c6:cc:a4:7a:29:41:e5:b0:2f:f7:1e:57:f1:d9:81:27:70:
7f:81:6f:f8:6c:3d:31:92:b8:bc:7d:52:65:8e:9a:57:cb:c2:
c1:bf:14:cb:39:69:e5:f4:f4:07:79:55:35:0d:31:ac:b8:49:
17:98:28:d5:40:70:6d:28:83:3a:74:67:40:10:ee:f5:a0:49:
17:91:7f:83:23:a0:e1:2d:61:eb:05:b7:34:20:e5:c6:92:56:
5e:f0:d8:49:77:e8:18:5f:63:a5:9d:bd:8d:3b:a0:b6:a8:a7:
09:28:05:c7:ba:a7:b1:df:0d:9b:5e:1a:b4:3b:b2:d6:09:78:
11:b1:06:b0:9e:f3:55:28:91:70:86:aa:24:56:80:33:7a:f6:
b6:81:1b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:51:50 2025 by rpki-client