Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/w844XuOWS4xgJaWU6wBqPuGGD6o.roa
File: w844XuOWS4xgJaWU6wBqPuGGD6o.roa (raw, json)
Hash identifier: tkcsSjMgVKJnfMPG05Bnsj+h7R5KnTqnGHAZs+sMyGo=
Subject key identifier: C3:CE:38:5E:E3:96:4B:8C:60:25:A5:94:EB:00:6A:3E:E1:86:0F:AA
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019687D69AADCD71F7EC5C76E104D80CA2A8
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/w844XuOWS4xgJaWU6wBqPuGGD6o.roa
Signing time: Wed 30 Apr 2025 17:55:10 +0000
ROA not before: Wed 30 Apr 2025 17:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:da44::/32 maxlen: 32
2a0d:adc1::/32 maxlen: 32
2a11:3d02::/32 maxlen: 32
2a11:d706::/32 maxlen: 32
2a12:1546::/32 maxlen: 32
2a12:41c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:d6:9a:ad:cd:71:f7:ec:5c:76:e1:04:d8:0c:a2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Apr 30 17:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3ce385ee3964b8c6025a594eb006a3ee1860faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:f7:bc:e0:93:c6:49:f7:44:87:d3:92:8f:
b2:b1:5d:08:20:d2:d6:84:cc:05:05:13:83:ac:4f:
6c:40:55:1f:1e:16:24:b9:0b:6c:63:7a:ef:17:4c:
06:e9:21:d8:af:2f:71:8c:10:80:a7:4f:4b:d5:e7:
f6:c2:37:3d:27:23:83:0b:9e:9d:40:3c:6b:0e:e2:
28:61:49:d3:74:e7:8b:ef:ba:25:f9:01:fa:cb:48:
9a:a4:57:14:3a:84:d6:fb:74:36:ec:4e:e9:da:a1:
cc:13:10:8d:b3:71:d3:fa:6d:08:02:36:6a:9c:58:
b1:5b:0d:ef:38:12:4d:55:9c:af:4d:1e:77:f1:8b:
d9:bc:7a:d8:be:41:2c:51:f9:f4:c8:70:63:89:4d:
8c:6a:a1:6a:ab:31:a1:ed:79:93:28:74:f7:dc:0e:
e8:fb:35:ba:ef:e6:32:f3:0e:30:4e:a2:0e:88:4b:
23:e0:a6:e3:ca:8f:19:d6:15:11:5e:98:f8:05:2e:
61:6d:ba:ce:72:ae:ff:94:f1:34:fb:4c:a8:5a:38:
1a:52:e9:dd:ac:ca:af:e6:00:28:21:1e:bf:be:67:
7e:d0:d7:a7:5d:48:31:a6:ad:d3:b7:c1:f2:5b:4f:
f6:49:c7:9a:a7:be:12:52:4d:33:0f:28:6f:21:7f:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CE:38:5E:E3:96:4B:8C:60:25:A5:94:EB:00:6A:3E:E1:86:0F:AA
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/w844XuOWS4xgJaWU6wBqPuGGD6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:da44::/32
2a0d:adc1::/32
2a11:3d02::/32
2a11:d706::/32
2a12:1546::/32
2a12:41c7::/32
Signature Algorithm: sha256WithRSAEncryption
ac:42:9c:58:5e:aa:12:81:a8:9f:0c:42:70:6e:d2:22:b2:6e:
4d:92:d1:6d:82:17:70:39:62:ee:82:55:40:77:7d:8d:00:ff:
f8:00:b2:95:ef:e4:cc:56:b8:04:45:01:6b:76:f5:66:ae:96:
24:bd:94:e1:6f:6d:b7:d7:7d:42:d5:1c:1e:b9:0d:e5:44:1d:
4a:1d:1b:43:47:e4:7b:79:0f:ed:c4:60:32:d2:18:f3:bb:dc:
71:f3:0e:2b:1d:f5:44:2e:31:e8:4a:b5:8b:42:0f:9a:64:a3:
f2:b6:2f:b9:10:9c:ff:c0:90:19:eb:65:af:e3:75:6c:91:45:
8d:17:46:9a:61:1b:5a:66:a4:7f:a7:e2:70:06:5a:52:97:f4:
ea:7b:ca:79:2c:75:d7:9c:9d:4c:c7:26:58:ae:fd:37:d8:00:
b4:a4:ff:6f:a5:80:0c:68:21:8d:8a:50:04:2c:ea:c6:80:f0:
94:74:a8:72:a5:4c:1b:d2:da:65:f7:a4:df:57:47:d3:a8:ec:
3e:fc:b0:99:24:bb:51:75:30:64:90:02:e6:bb:7d:3e:3c:ac:
56:93:d5:70:a1:56:49:df:6e:91:fc:f1:e2:22:e9:63:d4:28:
d4:3e:16:7f:1f:df:ba:ec:22:ca:b4:fd:2a:d5:31:15:08:22:
da:d0:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:35:46 2025 by rpki-client