Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ADGW21X--XpG2WBIYj5kIM1Z0-g.roa
File: ADGW21X--XpG2WBIYj5kIM1Z0-g.roa (raw, json)
Hash identifier: 9A8sa2id1+8ByNAMewXe7FMcF817DiqS5V9Qri3bdTE=
Subject key identifier: 00:31:96:DB:55:FE:F9:7A:46:D9:60:48:62:3E:64:20:CD:59:D3:E8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01961B29E5A463DB529E88DB450236BB8B21
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ADGW21X--XpG2WBIYj5kIM1Z0-g.roa
Signing time: Wed 09 Apr 2025 15:27:32 +0000
ROA not before: Wed 09 Apr 2025 15:27:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205503
IP address blocks: 2a02:660:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:29:e5:a4:63:db:52:9e:88:db:45:02:36:bb:8b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 9 15:27:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=003196db55fef97a46d96048623e6420cd59d3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:06:1d:e0:2a:86:13:7a:c2:09:23:99:52:
60:cc:39:26:2d:d1:5d:7b:2d:f9:6b:fe:3f:1b:3a:
74:b2:aa:be:bc:6e:6b:d4:95:c0:7e:9b:41:61:8a:
80:56:df:4e:b1:52:cf:17:c2:5e:03:c0:12:9d:c0:
d2:ce:e0:b5:a1:19:60:75:c5:22:23:e1:18:5c:58:
79:7b:32:bb:82:df:97:ba:e0:a6:39:6c:27:d0:0f:
4a:22:f3:0f:ed:66:20:98:5d:40:65:0b:48:e9:02:
f7:1b:46:68:f4:1a:63:5a:e5:76:9e:10:a0:56:42:
f3:e0:82:1d:37:fe:6e:db:dc:36:9d:90:dd:53:ec:
99:18:87:7d:a0:04:82:83:e4:49:71:b5:05:04:73:
34:f6:2d:fa:8c:24:51:fd:7b:40:f2:7b:45:4e:af:
a2:71:ef:c6:87:e9:81:c3:f9:7f:b2:56:0e:00:60:
86:28:d4:7b:98:96:a8:22:53:b8:a5:f2:ca:30:72:
36:9d:3e:a4:b3:28:31:9e:d1:a0:f6:59:90:56:30:
9f:e1:42:80:75:2c:c8:8e:eb:19:09:14:8d:6a:54:
c5:21:41:07:b0:45:5c:12:59:57:ae:d3:79:e9:74:
80:1b:b5:45:11:c9:79:3a:00:f1:53:fe:9d:8c:9c:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:31:96:DB:55:FE:F9:7A:46:D9:60:48:62:3E:64:20:CD:59:D3:E8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ADGW21X--XpG2WBIYj5kIM1Z0-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:660:a::/48
Signature Algorithm: sha256WithRSAEncryption
7f:20:8c:8b:d7:78:2d:c8:23:28:62:e2:84:1e:8e:11:82:5d:
ee:6a:0e:8d:ee:2b:85:09:dd:81:5c:85:03:a1:8f:94:a5:9b:
12:4a:25:db:6e:fd:25:54:dd:e0:92:a1:f0:f2:db:f6:39:1e:
fe:d2:42:85:21:07:0c:6e:dd:c4:92:1e:af:f0:ce:b6:36:e9:
a4:f8:61:f8:9c:5b:c6:7b:a5:30:cc:97:88:34:15:9c:63:5e:
38:86:08:46:6d:e9:fd:32:7b:68:82:f2:f5:3f:a3:e1:cf:e3:
9c:12:42:85:54:8c:9d:f9:84:7e:27:54:ea:e6:c6:08:f0:9c:
6b:be:e8:22:89:6c:8b:f4:cf:d5:99:b9:2d:2a:af:8b:7c:d9:
63:19:8e:9b:d1:24:4c:61:a1:4a:7d:40:20:aa:26:ee:22:df:
17:54:7b:f4:db:5d:1c:2a:7e:81:e1:b5:16:b5:dd:66:fa:f1:
b1:7f:87:f5:fd:af:6c:31:9a:98:13:72:9f:09:6c:16:b9:2a:
54:ee:57:ec:a4:9c:48:71:8b:3e:23:16:1c:38:7f:b0:3f:de:
df:90:70:d8:8d:8a:11:4a:66:78:6e:5a:c8:62:3c:5c:8e:19:
a4:18:e6:3d:67:9e:26:46:76:a2:fb:ca:ef:07:7f:64:0f:04:
06:36:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:54 2025 by rpki-client