Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WyhPLBOrd2doKuUx05hHXECIss8.roa
File: WyhPLBOrd2doKuUx05hHXECIss8.roa (raw, json)
Hash identifier: iyAxAOnvzUCoAm7uczXPdmmfRNlMZi51c7gzEpT/lLw=
Subject key identifier: 5B:28:4F:2C:13:AB:77:67:68:2A:E5:31:D3:98:47:5C:40:88:B2:CF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019657FB051E8F7000A307B9990CAEE6D6B1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WyhPLBOrd2doKuUx05hHXECIss8.roa
Signing time: Mon 21 Apr 2025 10:53:10 +0000
ROA not before: Mon 21 Apr 2025 10:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215211
IP address blocks: 2a14:6e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:fb:05:1e:8f:70:00:a3:07:b9:99:0c:ae:e6:d6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 10:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b284f2c13ab7767682ae531d398475c4088b2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:25:81:af:35:1d:d6:11:9f:d4:75:52:ce:
21:f3:fb:a9:c1:71:2d:ad:0e:a9:d9:1c:e8:ee:7b:
1c:10:1a:3b:04:3a:eb:fd:f5:49:09:3c:1d:4b:44:
2e:56:ea:5b:c0:d1:2b:32:41:a1:a2:37:43:21:ae:
8e:d1:53:c6:44:eb:12:70:13:1e:3d:4a:7d:bf:58:
65:92:56:3b:e6:fb:9c:a1:a6:9a:26:68:86:ea:1c:
6f:4f:b5:e0:98:1c:be:ff:86:5e:82:8a:84:b7:d4:
e9:a0:df:a2:e3:b0:ad:13:00:d8:ad:80:3b:98:69:
37:00:71:36:54:f5:6b:82:b1:83:e2:c5:07:90:c5:
37:cf:17:36:86:54:c0:dd:f0:33:c0:24:be:04:69:
ba:c7:47:7a:75:14:d2:e7:78:fb:83:22:07:8b:95:
96:70:2e:e1:fb:65:e5:bf:9b:cf:e4:fa:ab:39:43:
be:02:e3:e6:8d:17:ad:46:0e:13:93:96:05:c4:f7:
b7:09:27:79:8d:aa:20:d2:51:5c:40:6b:ef:d4:c8:
0b:70:a6:ad:6c:0c:9c:ba:b8:69:fe:59:e9:f4:1b:
f5:d3:e3:87:8b:83:7b:4e:d9:61:42:05:8e:b2:ca:
cd:48:d7:b5:7a:7d:f6:fa:dc:c3:cd:e1:7b:f4:e2:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:28:4F:2C:13:AB:77:67:68:2A:E5:31:D3:98:47:5C:40:88:B2:CF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WyhPLBOrd2doKuUx05hHXECIss8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
12:72:da:5b:4f:be:d9:9c:82:1c:fd:c3:a0:7c:66:ad:5f:d2:
39:cd:40:0a:13:3d:6d:c0:77:54:00:69:bf:3c:5f:c7:bf:e6:
02:b2:5b:d6:32:b9:52:50:23:25:68:34:2d:2e:e8:ac:1f:60:
ee:4d:3c:0a:9a:4d:8a:f2:8b:a1:b9:7e:2f:0d:6b:19:5c:b0:
8a:f9:39:50:bf:b9:16:9d:03:92:26:ee:f0:41:de:52:f7:48:
5b:27:24:1f:dd:c2:2c:08:77:62:27:48:1d:74:a6:e8:e2:e7:
a6:f3:dd:47:a1:ea:ce:99:55:73:d5:bc:d6:c4:68:1b:4f:8f:
7f:6d:12:6c:09:1c:56:fc:e8:f8:0a:49:11:ed:76:6d:8b:0b:
d8:89:4c:e2:b2:81:20:c7:24:45:8c:e7:ee:be:24:cb:ac:7a:
7f:1d:36:55:42:a5:bf:a3:76:0c:3a:de:18:ce:95:ce:e8:f5:
fb:7d:91:f7:e5:bf:41:c8:eb:fa:ba:eb:6e:6a:78:4c:c0:db:
37:38:24:3d:da:a8:df:4b:95:cb:51:3e:1c:17:f8:46:45:a4:
3b:c3:f0:3d:6b:dd:56:97:c7:2f:db:09:2b:1c:89:d9:61:ea:
a9:7e:89:a6:75:b4:b8:4d:d7:4c:d5:ee:c7:ff:7b:07:c1:f5:
4d:48:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:08:36 2025 by rpki-client