Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WPx_Ld6Uu6c2YczaUKdIFvsJIFw.roa
File: WPx_Ld6Uu6c2YczaUKdIFvsJIFw.roa (raw, json)
Hash identifier: A/q+sTBKXWNFcsx3lhw6/4NLLbHCAsJXGxzExyK1AKk=
Subject key identifier: 58:FC:7F:2D:DE:94:BB:A7:36:61:CC:DA:50:A7:48:16:FB:09:20:5C
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01977DBD79316D3EE15BEEDAFD1BC92345B8
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WPx_Ld6Uu6c2YczaUKdIFvsJIFw.roa
Signing time: Tue 17 Jun 2025 11:54:18 +0000
ROA not before: Tue 17 Jun 2025 11:54:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209868
IP address blocks: 2a13:c442::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:bd:79:31:6d:3e:e1:5b:ee:da:fd:1b:c9:23:45:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 17 11:54:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58fc7f2dde94bba73661ccda50a74816fb09205c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:c9:fe:83:68:cb:09:c5:05:d5:82:31:0c:
fb:6f:40:24:1d:b9:08:66:4e:9f:86:bd:db:17:9b:
39:26:66:28:5c:2d:a8:89:74:20:8b:a1:7a:c9:a4:
2e:37:ec:6f:ad:73:32:02:de:0c:33:bb:1b:fc:74:
38:ef:ac:4f:bf:5a:51:31:08:4c:fb:cd:cc:f3:38:
52:cd:50:89:ff:2e:b1:98:98:47:b7:18:f4:9e:ce:
c7:27:9a:d2:dc:a9:de:62:12:8b:63:b9:09:c3:bd:
7b:7e:10:30:39:c8:ee:57:a2:cb:2e:30:3f:79:16:
97:4a:59:fe:e0:5e:30:19:56:77:fa:75:36:b5:4a:
9c:5b:74:32:b9:da:90:6c:f0:41:22:7d:5e:9b:2d:
c3:fd:0f:bb:09:0c:12:ad:21:3c:ce:5e:79:83:2e:
8e:48:66:12:43:08:a7:b4:e5:40:1c:e2:99:e2:b2:
e2:86:68:c4:39:4a:4f:4a:c7:2e:48:2a:ea:30:08:
d2:82:94:8d:be:6e:3e:94:31:4c:f5:db:ae:6d:6a:
b6:c9:97:ec:fd:91:80:7a:da:4f:73:1a:de:73:11:
ea:91:d7:d0:f5:cc:a8:d4:7c:66:b3:0a:89:0c:e9:
49:be:ca:f8:db:ef:fa:b4:c6:9c:ad:d7:b7:05:ad:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FC:7F:2D:DE:94:BB:A7:36:61:CC:DA:50:A7:48:16:FB:09:20:5C
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/WPx_Ld6Uu6c2YczaUKdIFvsJIFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c442::/32
Signature Algorithm: sha256WithRSAEncryption
07:fd:89:5e:02:9d:ff:d4:56:d9:66:d4:ed:49:4a:45:9a:cc:
f2:78:34:03:a7:9d:53:f1:cb:a7:3e:bc:29:3f:7a:13:68:27:
fb:5d:de:7a:5b:64:c4:24:d7:11:f0:08:e0:b8:0a:35:ce:42:
9e:db:a9:61:91:64:61:c4:92:97:92:c4:7a:0e:27:cc:67:a5:
fd:6a:ed:67:5f:75:99:f2:ca:5b:56:d9:44:94:a1:1f:c9:45:
f6:56:43:0b:93:a3:31:de:c4:52:97:21:ef:c8:34:4d:03:53:
c2:cf:88:e5:66:1e:c9:19:7c:19:e7:23:56:38:5b:0d:98:cf:
e3:69:8c:81:bf:e3:a5:24:a9:e1:dc:d5:91:e0:54:e9:48:63:
99:4e:1b:87:3e:65:4f:31:ef:39:a2:1e:29:31:33:e3:1c:31:
23:a8:c2:6b:b8:24:9c:52:4c:a2:7d:e3:21:5a:f1:92:c7:c3:
94:f0:7f:63:21:95:9b:ff:91:00:b2:3c:35:28:6b:a7:95:2d:
97:07:91:8d:48:de:dd:0f:37:e7:ac:11:fd:2c:7c:c5:9e:10:
e0:f7:fe:4d:2c:39:4f:a2:7e:7d:55:7b:79:d6:36:da:ca:27:
17:cc:fe:55:43:9f:3d:2a:45:26:39:01:84:6b:62:35:b4:f1:
56:38:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:48:38 2025 by rpki-client