Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/326131343a396530303a6330303a3a2f33382d3338203d3e2030.roa
File: 326131343a396530303a6330303a3a2f33382d3338203d3e2030.roa (raw, json)
Hash identifier: LRPItWUYl4X3RadeQ2KKkUWzKHbDaWzmJvhwRfpqzHU=
Subject key identifier: 37:66:2F:F0:DC:56:BE:D0:71:D7:49:2E:16:1D:1D:AC:CE:5A:F8:72
Certificate issuer: /CN=a640aa61f1d62b9c940459804ae11be99ad43842
Certificate serial: 1E422C18A8A8993820AFA5108B105BC004E65666
Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject info access: rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a6330303a3a2f33382d3338203d3e2030.roa
Signing time: Fri 23 May 2025 23:57:32 +0000
ROA not before: Fri 23 May 2025 23:52:32 +0000
ROA not after: Fri 22 May 2026 23:57:32 +0000
asID: 0
IP address blocks: 2a14:9e00:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl
rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 13:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:42:2c:18:a8:a8:99:38:20:af:a5:10:8b:10:5b:c0:04:e6:56:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842
Validity
Not Before: May 23 23:52:32 2025 GMT
Not After : May 22 23:57:32 2026 GMT
Subject: CN=37662FF0DC56BED071D7492E161D1DACCE5AF872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:43:2f:f0:c2:68:ab:4a:45:9a:f4:66:a6:
f3:57:d6:e9:8f:6c:66:b9:5d:e0:4a:00:78:b0:9c:
17:22:2b:a7:ef:65:06:44:02:7d:d7:b6:04:97:5a:
ac:2d:a1:a8:3d:9c:1a:4f:cb:7d:a1:4b:59:2a:6c:
2e:dd:3e:f0:6f:68:36:c9:5e:a3:82:d9:87:d9:a0:
28:c5:f2:21:bc:f8:ab:b8:e6:4e:27:ab:97:b7:81:
2d:d1:28:d4:d0:16:e3:91:04:8d:a7:52:16:1c:cd:
b5:fa:a5:8d:15:04:77:7c:be:b3:48:f9:da:0e:8d:
a2:ed:5e:04:f2:e1:ac:8a:e4:38:3b:e7:24:10:5e:
c1:5a:0e:a7:00:f7:52:29:a6:92:ce:1e:2e:eb:a6:
9d:e5:18:92:00:c2:f7:e8:38:7a:85:e2:53:ad:36:
90:29:21:7e:b4:5c:06:7a:56:e3:2d:77:af:f4:fd:
11:ad:6d:b2:bc:0b:94:d2:d7:52:54:08:9a:99:9e:
31:87:2b:1e:aa:6a:91:0a:96:3f:73:20:98:72:5c:
92:f0:ce:cb:cc:cc:99:b0:fe:35:44:fc:b8:bf:6b:
ef:ca:18:90:93:d0:5d:56:c3:56:d6:e2:fd:fa:c9:
99:3c:19:92:28:54:eb:77:01:a9:0a:4f:c8:3a:ae:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:2F:F0:DC:56:BE:D0:71:D7:49:2E:16:1D:1D:AC:CE:5A:F8:72
X509v3 Authority Key Identifier:
keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a6330303a3a2f33382d3338203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9e00:c00::/38
Signature Algorithm: sha256WithRSAEncryption
47:c8:bd:90:b7:c7:f9:6e:cb:25:0c:e3:c0:99:8b:37:5f:6a:
e9:08:4f:6c:07:51:f0:04:a2:ff:c3:33:6a:cb:87:08:86:bc:
3d:37:92:6f:cc:51:56:8b:83:ef:c8:72:17:f7:2e:9d:af:55:
a2:b6:91:98:f9:94:70:42:16:bb:4b:75:a2:74:a1:c8:0e:46:
37:43:b8:ea:52:12:4d:1d:49:d1:78:aa:ff:d2:93:fc:0b:06:
b8:e0:7d:1a:d7:2b:1c:12:33:c3:b7:66:85:73:f4:b0:35:99:
fc:ee:27:03:c1:a7:5a:6a:3f:e0:69:db:b6:98:93:f2:02:38:
37:7f:3a:90:23:45:c9:aa:2c:18:6d:9a:ab:c7:44:f2:c3:0c:
44:e3:40:51:71:5f:11:e7:d4:0a:36:2f:c7:c8:6d:c6:c6:75:
37:e5:d3:7a:b3:1b:2f:1a:5c:61:d2:fc:b6:47:e5:08:30:e4:
e1:a9:e7:fd:6a:70:f9:0b:89:e8:ca:6b:e5:c9:d5:cc:7f:1e:
d9:9c:1a:8d:60:bd:a8:43:3a:03:c8:85:6a:03:c3:bc:22:5c:
e5:e1:d3:36:c2:af:eb:5c:ad:59:a6:31:38:6b:ef:10:b9:ee:
f6:5a:ca:a3:7d:c5:61:fa:ec:26:c4:cf:7f:cb:02:f4:60:f1:
63:35:ee:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:08:50 2025 by rpki-client