Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/DWKyWEO0EVyOMnjJFjMEItVfMZ4.roa
File: DWKyWEO0EVyOMnjJFjMEItVfMZ4.roa (raw, json)
Hash identifier: pSZJrBmFotzFkW0MK9vnBFd5k9hTuU5zGox8lQ17bak=
Subject key identifier: 0D:62:B2:58:43:B4:11:5C:8E:32:78:C9:16:33:04:22:D5:5F:31:9E
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01966CC7B8A4736F30DC562734B65FC62A88
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/DWKyWEO0EVyOMnjJFjMEItVfMZ4.roa
Signing time: Fri 25 Apr 2025 11:49:10 +0000
ROA not before: Fri 25 Apr 2025 11:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206938
IP address blocks: 2a07:4a00::/32 maxlen: 32
2a14:4b80::/32 maxlen: 32
2a14:4b81::/32 maxlen: 32
2a14:4b82::/32 maxlen: 32
2a14:4b83::/32 maxlen: 32
2a14:4b84::/32 maxlen: 32
2a14:4b85::/32 maxlen: 32
2a14:4b86::/32 maxlen: 32
2a14:4b87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:c7:b8:a4:73:6f:30:dc:56:27:34:b6:5f:c6:2a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Apr 25 11:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d62b25843b4115c8e3278c916330422d55f319e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:24:83:2b:05:81:45:33:b6:d9:c6:79:a4:
33:a9:92:3a:90:51:09:f5:ec:4f:3d:99:98:d4:7e:
be:51:dd:74:c4:bc:8c:82:60:c3:ae:ed:a1:37:c7:
5b:0b:f9:f4:3b:44:38:77:4e:62:6f:15:5a:1a:bb:
0b:bc:8a:cf:8e:b4:d4:86:87:3d:7f:20:a3:b6:c1:
91:3a:89:fd:e4:12:73:ef:c8:c0:bf:e7:4c:d7:8d:
6b:5c:58:6a:e7:f2:1c:79:dc:4c:51:4a:87:46:32:
3a:59:cc:70:a6:4f:17:fc:78:6b:58:cf:42:1a:d0:
6c:49:a3:f7:29:38:62:a4:af:a0:43:ce:bf:7c:27:
a1:ef:8b:bb:ab:b5:cb:84:9f:5d:39:be:13:cc:e5:
93:c3:e5:14:2e:9c:f1:e7:63:23:fc:58:51:89:df:
8a:4c:18:6b:11:a6:80:d8:6a:87:88:f6:8d:34:e2:
06:18:38:bb:23:1d:1e:88:9b:1e:a7:0b:76:30:15:
ff:47:79:76:42:4b:b4:bb:8a:bf:b5:f9:48:31:8c:
96:48:9f:ad:55:78:0d:fa:1b:b6:a2:4a:4f:2f:0a:
d0:70:df:a0:1b:77:d4:c5:e5:c7:4b:ca:d2:5e:df:
82:0c:2a:74:c8:f4:07:02:8d:4a:d2:f6:d1:93:a9:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:62:B2:58:43:B4:11:5C:8E:32:78:C9:16:33:04:22:D5:5F:31:9E
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/DWKyWEO0EVyOMnjJFjMEItVfMZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:4a00::/32
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
50:ff:b3:fa:42:10:35:71:24:39:9d:41:66:ed:41:32:c2:6e:
2c:7d:c1:cf:88:1b:86:f2:83:e9:2c:d4:9d:0b:c5:cc:f2:cf:
45:90:c5:d1:42:92:66:9b:bf:57:d3:b6:d3:8e:55:28:d2:c9:
96:b2:b8:b9:1e:1d:12:c3:03:32:44:95:b7:8a:d0:3d:c4:b9:
d6:ef:55:3c:78:47:af:93:02:d8:58:e6:ce:57:52:6b:0b:8c:
26:a6:1c:a1:7d:ae:f6:bd:dd:06:25:5c:02:99:a7:f1:4e:8c:
48:05:ec:b3:e7:a9:5d:f9:3e:23:68:14:4b:e1:84:3f:8a:c6:
c4:5c:06:6f:05:7d:f7:7d:87:a3:ba:12:43:41:c6:39:6f:93:
c8:5e:74:5d:7e:fb:e4:5c:6e:49:16:c8:c4:42:e9:f1:80:16:
31:79:a2:27:c8:90:d8:27:4f:36:27:c7:c7:e1:68:20:05:af:
10:2a:5d:50:28:06:db:6a:e0:5f:98:8e:03:2e:1d:52:f0:96:
db:b3:8d:c8:b8:fe:44:c6:05:c6:25:25:39:8c:a0:c9:ad:68:
9c:18:5a:66:af:79:53:6f:e8:d8:b6:92:2f:2b:02:48:9f:78:
3b:d5:86:99:91:04:68:fc:80:3f:75:20:d3:36:fe:e7:46:56:
67:83:cb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:25 2025 by rpki-client