Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aqBrJLKeSEwW7GczT0kk3TP0jZU.roa
File: aqBrJLKeSEwW7GczT0kk3TP0jZU.roa (raw, json)
Hash identifier: iiyvzrUKImvB/0ICj7ChXr/9vcQMVFq93Xq2cluuzPg=
Subject key identifier: 6A:A0:6B:24:B2:9E:48:4C:16:EC:67:33:4F:49:24:DD:33:F4:8D:95
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0197F465C48ECF371E96BB23ACBE83BCEEF6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aqBrJLKeSEwW7GczT0kk3TP0jZU.roa
Signing time: Thu 10 Jul 2025 12:53:19 +0000
ROA not before: Thu 10 Jul 2025 12:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214577
IP address blocks: 128.0.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:65:c4:8e:cf:37:1e:96:bb:23:ac:be:83:bc:ee:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 10 12:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aa06b24b29e484c16ec67334f4924dd33f48d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:4d:92:c6:65:f1:71:e5:69:73:b7:b5:31:
08:e9:4c:0f:03:5e:9c:cf:a4:b4:33:58:86:02:4d:
13:35:af:49:d9:d5:46:1b:41:f1:aa:c2:ae:e8:d0:
b4:42:ba:d2:65:84:0e:36:53:52:e6:63:0a:1b:92:
9a:06:fe:83:18:ee:d3:4c:63:76:92:78:ac:77:f3:
c0:85:44:21:00:eb:cc:58:35:2e:fb:e5:ea:cc:d0:
44:13:2c:8a:c7:dd:4c:ff:91:3a:cb:d5:91:2a:c2:
73:2e:ee:3a:0c:cd:17:ae:df:a3:54:1c:e2:a5:ad:
a2:8d:c8:1c:59:bf:18:b3:8c:d8:b6:52:86:c4:95:
1e:cb:28:72:c3:f3:69:bc:54:65:ab:cd:fa:7f:9f:
40:02:b9:df:08:20:4e:15:33:37:81:eb:aa:0a:e6:
3c:11:45:f0:f4:ca:1c:50:85:69:de:6e:f0:ba:0f:
57:0e:5a:bb:9c:d3:0c:f4:88:d7:5f:e0:7c:21:7d:
02:85:49:b7:69:65:ae:bf:2d:a9:8c:f5:36:38:65:
3d:7d:0e:3c:44:d4:89:e1:68:cd:f8:e3:f3:72:90:
18:e3:c3:da:a8:cd:1f:f8:2a:7b:0f:fa:ce:9e:5a:
42:82:6e:82:b9:50:b9:02:3c:ce:2a:ba:bb:49:6c:
56:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A0:6B:24:B2:9E:48:4C:16:EC:67:33:4F:49:24:DD:33:F4:8D:95
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aqBrJLKeSEwW7GczT0kk3TP0jZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.1.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c8:3d:fd:05:d6:2a:cb:95:fb:10:7f:b7:c0:cc:d9:69:5d:
57:9f:c0:58:1d:48:1f:80:a6:43:aa:47:13:49:40:4a:e1:f7:
aa:6d:79:c9:8d:ef:e2:65:78:0b:b2:b1:94:a3:93:2b:ac:81:
df:aa:d4:81:12:74:a4:2e:38:ce:3c:ae:3f:93:07:10:3d:b5:
ba:e4:c9:a6:43:17:67:67:8d:19:67:21:d9:9b:78:0f:f2:8f:
4a:88:1e:ce:e6:c8:36:72:f4:ff:23:7d:25:31:05:b4:d3:43:
0c:b9:3e:08:cb:cf:78:92:b3:29:ef:1c:63:ab:ce:b1:8f:e9:
05:d5:d7:f2:97:52:97:42:5c:31:c8:67:6f:ec:88:e3:18:52:
71:3f:7d:f8:e5:6b:b2:02:20:e1:39:71:32:3f:e3:6b:9e:24:
60:9f:dc:ad:cb:11:ef:3f:84:8e:43:c6:77:9a:8a:ab:d5:8c:
57:37:3c:20:ab:d3:4a:2f:98:d7:1b:03:19:87:4e:02:96:57:
dc:75:17:d3:d4:c6:03:ec:d8:b4:56:38:5d:72:f9:91:99:9b:
df:6d:24:a9:52:0c:2f:4e:a4:61:52:9b:67:e6:e5:ea:ed:c0:
67:e9:4d:8d:9a:95:29:cc:e0:32:24:a5:8e:37:8e:96:b7:1d:
c3:dc:b5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:13:04 2025 by rpki-client