Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ciHagOHLSoKpc1FusaVxL3_Ptq8.roa
File: ciHagOHLSoKpc1FusaVxL3_Ptq8.roa (raw, json)
Hash identifier: qVZyRrrycJITJq8e+Oqg9n1s/m1DGfbQ92cmAOV1Z5A=
Subject key identifier: 72:21:DA:80:E1:CB:4A:82:A9:73:51:6E:B1:A5:71:2F:7F:CF:B6:AF
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 0197A78500A5CF4540FDF995EAC6273D1AC9
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ciHagOHLSoKpc1FusaVxL3_Ptq8.roa
Signing time: Wed 25 Jun 2025 14:36:40 +0000
ROA not before: Wed 25 Jun 2025 14:36:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48108
IP address blocks: 2a14:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:85:00:a5:cf:45:40:fd:f9:95:ea:c6:27:3d:1a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Jun 25 14:36:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7221da80e1cb4a82a973516eb1a5712f7fcfb6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:42:f9:60:36:02:3a:55:d3:1c:a5:af:9c:
05:4e:0c:39:48:c7:7f:56:2e:cc:c9:e4:8e:dd:c3:
28:75:1b:92:0d:c6:62:1e:ba:52:90:74:81:9f:6b:
25:4f:3f:1e:20:cb:fe:ce:30:7b:c8:c6:0c:c3:35:
18:9e:0e:20:59:14:b9:ed:b0:ac:d1:8d:9d:7d:da:
a2:0b:8c:ed:5e:f5:a9:27:58:d7:92:9c:b0:1e:bf:
2f:cf:2e:d9:86:d1:50:be:91:ec:34:45:cd:81:fa:
eb:95:86:47:9d:12:fc:f3:4d:0a:e2:c5:ca:7d:78:
49:6f:e0:88:79:83:44:ac:1f:9c:4f:0a:19:b8:41:
be:f5:8f:25:32:52:c6:3e:8a:63:68:4e:da:b9:ee:
cb:00:31:c1:7f:45:6c:32:5c:c3:a0:62:c9:fe:4b:
4c:73:62:d9:53:82:45:3c:7c:f6:6e:97:a6:f6:39:
21:f1:27:35:b7:c2:06:a1:2d:6c:4d:1a:d0:15:b0:
2f:17:26:46:78:87:10:34:3d:d7:57:f6:32:19:5f:
64:2c:71:f5:2d:87:a0:34:2f:8a:7c:51:ed:d9:3e:
84:c3:c6:bf:d0:ee:a6:4c:49:bf:da:ab:a5:43:77:
7d:dd:ca:04:8d:53:e7:a1:23:12:3d:a7:fa:c5:c4:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:21:DA:80:E1:CB:4A:82:A9:73:51:6E:B1:A5:71:2F:7F:CF:B6:AF
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ciHagOHLSoKpc1FusaVxL3_Ptq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a080::/48
Signature Algorithm: sha256WithRSAEncryption
13:f0:72:07:f2:ee:0b:ca:f9:cb:80:80:a4:41:79:6e:78:76:
d1:75:1b:24:fc:f3:f1:73:a7:a7:b3:26:b7:a8:e3:96:bb:3e:
d2:d7:d4:c2:44:aa:f9:ae:b4:18:9d:cd:2e:8e:b1:dd:8d:1a:
64:d8:d1:63:b6:96:3c:6a:57:54:2c:b6:f2:2f:1a:0e:9a:11:
27:b2:9c:22:56:6d:05:ac:6e:79:dd:c8:ca:41:94:61:f2:9c:
19:07:65:5d:85:57:90:53:db:9f:84:e8:7c:c4:88:8e:c9:b1:
75:47:e5:86:04:88:b8:d5:60:b8:9e:8b:5b:19:ae:49:8c:1e:
a7:66:af:74:e3:98:75:ad:53:7e:0e:10:37:06:f6:25:81:a5:
2d:bf:c2:ae:c9:92:ed:82:bd:15:65:97:68:ea:e2:62:a6:6e:
3b:2c:34:5d:c4:76:6d:03:c5:89:00:6e:60:60:ff:71:b3:8d:
26:d1:ec:29:2b:9e:ea:f9:9c:d2:fe:7f:ae:d7:5d:9c:28:a5:
0a:d7:31:89:88:c1:d6:b1:47:89:aa:80:f5:aa:b2:74:52:11:
71:96:9d:9b:fb:51:45:09:70:7b:c5:ad:60:47:c1:ec:36:de:
57:5b:68:d0:3b:3b:e6:82:90:b3:b1:75:59:a1:f7:2f:7f:77:
80:c6:99:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:12:52 2025 by rpki-client