Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4t8_cneJ9rnFgLOGWw0gtnaI7So.roa
File: 4t8_cneJ9rnFgLOGWw0gtnaI7So.roa (raw, json)
Hash identifier: 6eCl4GZ9D1+9iQTH6SrkPrqSngUpL6aQ6uVSHCRKX+I=
Subject key identifier: E2:DF:3F:72:77:89:F6:B9:C5:80:B3:86:5B:0D:20:B6:76:88:ED:2A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195BF3535225B384F8E89AE304022A24B35
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4t8_cneJ9rnFgLOGWw0gtnaI7So.roa
Signing time: Sat 22 Mar 2025 18:54:49 +0000
ROA not before: Sat 22 Mar 2025 18:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149428
IP address blocks: 2a14:1107::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bf:35:35:22:5b:38:4f:8e:89:ae:30:40:22:a2:4b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 22 18:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2df3f727789f6b9c580b3865b0d20b67688ed2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6f:49:84:14:2c:00:8a:1f:21:bc:7a:b3:11:
b5:96:77:4b:e9:7a:5e:f0:41:49:00:70:4c:12:f7:
6c:20:77:ba:cc:10:26:8f:9f:a9:8d:47:e2:d0:b3:
8e:16:62:64:ad:88:85:92:b5:36:1e:9f:28:73:1f:
12:5c:e6:1e:d7:57:14:8b:9c:7b:57:3f:4a:00:b0:
c2:d4:1e:c2:9c:da:b4:2c:2d:54:52:2a:6e:5a:2b:
31:3f:35:13:b2:25:18:e0:9d:a0:10:49:9e:08:1a:
f7:f6:00:9a:a9:ad:15:04:6b:a7:3f:85:66:e5:a8:
ed:03:7d:41:3c:b9:1e:34:d0:2a:1b:94:ac:b7:43:
eb:43:7a:84:a2:bd:23:19:48:2c:bc:2b:e5:82:e0:
f8:ab:36:f3:26:9b:b3:50:9c:72:54:64:a1:13:9a:
e8:f2:13:f5:ef:2e:7f:1b:2c:51:53:c8:19:29:fe:
cd:f7:0f:30:13:a6:fb:76:7b:c6:5b:c3:8f:55:b5:
96:91:1f:6f:e8:5e:ed:de:48:1b:0a:e2:14:1d:4d:
33:99:f1:d3:24:ef:62:76:a9:07:af:b7:21:c0:9e:
48:bd:98:b5:1e:83:c3:a7:a8:39:51:94:8a:e1:9e:
39:7b:1a:12:56:ee:fe:7f:3a:45:86:da:5c:4b:2a:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DF:3F:72:77:89:F6:B9:C5:80:B3:86:5B:0D:20:B6:76:88:ED:2A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4t8_cneJ9rnFgLOGWw0gtnaI7So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1107::/33
Signature Algorithm: sha256WithRSAEncryption
64:5d:b6:a3:f5:f7:28:39:4e:98:e2:30:02:e2:93:49:6b:8e:
b6:99:10:a5:ab:6e:64:3f:64:ad:31:16:06:74:52:89:df:76:
3a:1c:d7:96:50:e4:66:0e:a2:79:d4:7a:04:c6:23:e2:a6:13:
2f:34:ec:d4:c2:b0:96:3a:49:ee:61:b2:31:3c:3f:2b:ec:47:
7f:4e:92:b1:63:b0:0c:c9:ca:30:71:09:b0:72:51:1d:f7:fe:
0f:de:cb:3b:54:19:e6:3b:39:a9:55:c8:40:ce:40:cc:1a:9d:
19:af:70:cf:ec:ad:f0:f6:88:5b:9e:f5:b7:9c:ee:78:73:ab:
15:4f:6f:e5:fe:dc:52:49:38:ad:94:06:56:f1:8f:9e:bc:bc:
08:b4:ef:4c:4f:c2:c9:96:72:36:39:c5:8e:80:f8:53:dc:d4:
b2:64:84:5e:47:8e:d2:0a:32:e9:41:a3:f1:c5:d7:9c:31:06:
c4:8c:34:2f:55:a6:55:d6:08:32:c1:28:cd:63:b8:b0:60:69:
c7:3c:bf:b0:99:88:40:a5:2f:dc:b9:7d:9a:82:63:29:2a:ee:
77:16:70:a1:41:d1:90:06:2f:88:5c:7a:12:be:2e:bf:5c:2c:
b4:90:e6:dd:9c:82:d3:b3:38:33:78:35:b6:28:ed:e0:d3:21:
b5:92:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:40:54 2025 by rpki-client