Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tkoY0NGcJqWT7Yvk-rScCe6nxKw.roa
File: tkoY0NGcJqWT7Yvk-rScCe6nxKw.roa (raw, json)
Hash identifier: WSdfnJG0M/XUL3I80J5y4vnzWg596qi138Mt6H2UPW0=
Subject key identifier: B6:4A:18:D0:D1:9C:26:A5:93:ED:8B:E4:FA:B4:9C:09:EE:A7:C4:AC
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195BF344AEAC4EE5CCED93FFA373F8CD105
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tkoY0NGcJqWT7Yvk-rScCe6nxKw.roa
Signing time: Sat 22 Mar 2025 18:53:50 +0000
ROA not before: Sat 22 Mar 2025 18:53:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205964
IP address blocks: 2a14:1105::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bf:34:4a:ea:c4:ee:5c:ce:d9:3f:fa:37:3f:8c:d1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 22 18:53:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b64a18d0d19c26a593ed8be4fab49c09eea7c4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:49:98:dc:27:b9:f1:a7:d6:57:32:89:dd:
af:32:e8:1a:dc:0d:18:10:75:da:78:25:9e:7a:e5:
f5:90:f6:a4:c4:b7:56:06:1a:f0:2b:3e:13:11:5b:
40:99:c1:d4:01:aa:7a:82:b2:33:ec:26:64:93:53:
92:35:36:08:1f:e8:73:07:89:17:35:7a:71:49:df:
2d:0b:4d:f7:4d:6a:73:31:2e:26:39:5b:fe:92:63:
d5:43:23:71:69:04:24:ea:48:34:72:f3:50:80:f5:
93:c1:ad:39:bc:c6:19:52:c8:5d:45:7c:e9:48:77:
2d:cf:76:b4:bf:c3:36:af:15:bb:9c:8e:72:44:d2:
98:37:af:78:0e:23:8e:1f:52:48:0f:fd:4f:b4:94:
83:6a:af:97:ef:e6:b9:ee:5a:d4:3b:63:86:25:a4:
15:2e:0b:e2:ef:2d:54:25:51:0e:19:2a:16:f3:2f:
a3:2c:a1:19:71:28:b2:ad:63:2f:c0:c5:cc:bd:2e:
8a:12:76:9c:cb:ca:9a:25:fb:ff:99:e4:2d:0f:a1:
44:7d:85:8f:17:c0:92:11:f4:0d:cd:03:ea:74:9b:
e1:6b:52:0a:7d:f1:f3:46:89:6d:eb:4c:68:78:7e:
36:42:81:01:c5:db:47:a8:8a:5a:7c:04:85:70:50:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4A:18:D0:D1:9C:26:A5:93:ED:8B:E4:FA:B4:9C:09:EE:A7:C4:AC
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tkoY0NGcJqWT7Yvk-rScCe6nxKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1105::/33
Signature Algorithm: sha256WithRSAEncryption
15:55:13:88:a3:35:3b:b9:eb:98:b9:9e:12:46:dd:59:15:5b:
41:b9:b0:b0:c5:62:9f:84:1f:e1:c0:1d:12:2b:41:da:72:f6:
94:b8:50:a4:ac:cc:56:dc:20:bc:9c:b4:0e:ef:84:79:e4:de:
9e:45:6a:71:03:65:c2:98:41:aa:02:65:70:69:7e:5d:f6:ed:
52:6b:79:2c:fc:9c:13:7d:51:08:6c:70:66:dc:8d:ea:67:32:
ca:3f:f5:16:de:3f:eb:d6:4d:11:48:32:66:5d:df:d1:db:e3:
4d:61:2c:ab:4b:be:04:51:77:5a:ca:a8:57:db:05:c7:86:14:
c1:e5:e9:fa:62:c9:4a:01:72:70:4c:a3:5e:af:ff:34:34:f9:
2e:69:62:f5:a1:b0:dd:e0:e8:61:8b:d5:59:99:b8:4f:6a:56:
7f:8a:5f:58:6e:72:aa:bf:1c:20:a4:3d:59:e3:54:b2:2c:7b:
c8:5d:85:79:b8:b8:44:28:92:a2:24:cb:ad:d2:18:fc:55:67:
ed:27:32:d1:84:10:14:c8:17:96:9e:15:a0:59:a8:74:f4:36:
90:75:1c:e7:8d:ec:dd:c4:26:51:87:87:bc:50:a8:0d:06:c1:
a5:cf:c2:4b:0a:b8:cb:7c:b8:22:bc:54:48:11:42:f3:a1:35:
85:98:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:24:38 2025 by rpki-client