Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/wkjfrbnsCzTaC-aAcjv50o1HMDE.roa
File: wkjfrbnsCzTaC-aAcjv50o1HMDE.roa (raw, json)
Hash identifier: dQtuR5zZvWV7UZVnWgEUEkCk6dSEncyOV819xoZiAcE=
Subject key identifier: C2:48:DF:AD:B9:EC:0B:34:DA:0B:E6:80:72:3B:F9:D2:8D:47:30:31
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 0196F32953668708B48AA4134DECDE93DFE8
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/wkjfrbnsCzTaC-aAcjv50o1HMDE.roa
Signing time: Wed 21 May 2025 14:04:53 +0000
ROA not before: Wed 21 May 2025 14:04:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211465
IP address blocks: 194.42.126.0/23 maxlen: 23
2001:678:1078::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:29:53:66:87:08:b4:8a:a4:13:4d:ec:de:93:df:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: May 21 14:04:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c248dfadb9ec0b34da0be680723bf9d28d473031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:7b:a3:1d:25:80:ac:61:c8:c7:92:6d:8e:
6e:a2:ac:7e:b1:61:cd:29:03:e9:b9:92:22:48:ad:
e9:89:4a:2d:15:ef:41:d8:19:ac:c3:f1:db:78:e7:
f1:2a:69:46:98:1e:f4:57:1c:bd:7c:16:ef:6d:c6:
d8:d3:05:9d:e8:8c:8f:ac:21:a3:c5:1b:94:82:e7:
eb:b8:37:87:91:36:ee:db:2d:31:e3:85:cd:dc:7a:
0a:1c:a8:47:a7:68:fc:a9:40:d5:55:ab:c6:90:5e:
65:9c:4f:99:ac:38:e6:62:8b:af:d8:c0:08:fa:bc:
e1:59:b6:17:d2:38:e3:7f:86:aa:40:6e:dc:90:c2:
f8:1b:2f:94:ea:69:49:02:4a:1e:fe:ae:d0:da:85:
c1:62:4b:c8:fe:29:6c:f1:98:0f:c0:51:50:8d:21:
3c:0f:4a:53:46:c7:b9:4b:bb:80:66:41:3f:52:e9:
5a:03:49:52:48:2f:88:98:e7:73:6c:4d:d8:f4:99:
0d:91:9c:0e:0a:b1:6b:5f:77:ce:9a:93:4e:32:02:
cb:1e:a8:a2:3a:92:86:cb:57:d4:80:04:30:47:a4:
b0:5e:1e:83:15:c9:02:ca:a9:78:f8:85:2c:f2:16:
3e:9a:0b:58:46:9a:42:fe:b5:3e:d6:10:8c:6b:53:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:48:DF:AD:B9:EC:0B:34:DA:0B:E6:80:72:3B:F9:D2:8D:47:30:31
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/wkjfrbnsCzTaC-aAcjv50o1HMDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.126.0/23
IPv6:
2001:678:1078::/48
Signature Algorithm: sha256WithRSAEncryption
3e:cc:38:74:71:b7:b3:a8:95:f2:ce:87:2f:8f:ae:a1:b8:e6:
fb:30:8f:6c:22:26:ed:c2:8a:85:91:ae:0e:42:d7:22:18:c8:
24:0b:d4:54:e8:fc:10:e9:d9:d9:c2:bd:6e:b3:b5:7b:d0:99:
9f:20:c5:63:fe:8e:e7:ac:5a:a9:4c:7f:3b:ed:8b:12:73:f4:
c8:2f:48:07:79:d5:43:64:cf:a9:d4:b1:0d:2f:1e:99:81:32:
7e:ff:80:00:2a:0d:80:a7:bf:2c:a5:f7:f6:fb:af:2e:30:11:
04:43:bc:08:72:ad:27:1a:0c:e2:1f:dc:a9:53:86:11:4b:7c:
80:f3:ff:bb:13:4f:7e:9c:04:47:db:4c:ea:f7:98:10:93:04:
9a:10:70:9a:0e:67:f7:f2:0c:3c:22:04:7a:52:01:45:2d:c1:
0b:fd:e7:51:fc:7f:ce:3e:c9:01:8b:6a:96:b9:e3:20:4d:f7:
d6:64:6e:df:74:a5:fe:e4:d9:8c:57:d2:c9:e9:be:ac:17:cc:
a3:35:42:1a:bb:a8:b4:f8:e9:af:56:c3:d2:cb:8f:23:7d:1d:
d3:1f:e6:de:55:99:9b:40:cc:c5:6f:42:17:2c:33:c9:d4:bc:
f2:d3:20:56:a2:1e:1c:7d:3c:9a:b4:18:54:da:f8:99:b3:d2:
34:ce:f9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:25:37 2025 by rpki-client