Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/jJAMNmAh3_heXLx-3lZjlbb0rT4.roa
File: jJAMNmAh3_heXLx-3lZjlbb0rT4.roa (raw, json)
Hash identifier: +kN7wYZliIZDgA9ImlLry1J0Pp3xcHDSqBUjZROOAlE=
Subject key identifier: 8C:90:0C:36:60:21:DF:F8:5E:5C:BC:7E:DE:56:63:95:B6:F4:AD:3E
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0196B99FA7F1BA4A202147961A189D00DB92
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/jJAMNmAh3_heXLx-3lZjlbb0rT4.roa
Signing time: Sat 10 May 2025 09:56:10 +0000
ROA not before: Sat 10 May 2025 09:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2a14:67c1:b110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:9f:a7:f1:ba:4a:20:21:47:96:1a:18:9d:00:db:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: May 10 09:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c900c366021dff85e5cbc7ede566395b6f4ad3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:87:47:25:9a:ac:13:4a:c0:aa:d3:80:45:
1d:57:43:9e:5b:fb:34:e3:7c:f7:b5:7d:9c:ff:92:
14:ee:f7:bf:fa:18:3e:e4:ab:29:52:e2:cd:d2:48:
37:a6:d5:dc:c5:bf:27:89:0e:d2:4d:32:73:48:cc:
04:4a:c1:93:0c:65:a9:7a:d5:83:70:4d:8a:4b:d8:
7c:3a:0c:ad:0a:d5:e6:6a:d3:63:2f:d4:a3:fb:73:
8b:75:2a:8b:29:84:53:2e:fb:38:71:8f:fb:5c:32:
c5:d9:4e:11:57:9e:89:b6:43:01:b0:96:ab:0a:c2:
e3:17:54:28:c7:41:3d:46:f0:ac:89:17:82:6c:93:
57:1a:76:86:94:06:c7:f1:99:a1:54:80:9d:30:f3:
2b:c3:01:40:5a:ee:7d:9e:5b:6b:28:8e:9c:48:65:
44:59:67:02:e1:8f:16:30:62:41:09:58:90:a1:57:
78:3c:49:74:21:60:24:f0:2f:75:23:73:09:25:e0:
43:e9:4a:b2:05:7d:10:14:70:7d:c4:4c:ae:1b:a9:
08:03:85:23:6a:dd:26:6d:1e:bd:2f:5c:fd:ce:27:
e7:56:08:78:3e:a8:96:78:86:23:e1:35:4c:4c:35:
1f:74:e7:f5:d1:ac:e6:2b:ab:ad:fd:a5:1a:d6:8d:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:90:0C:36:60:21:DF:F8:5E:5C:BC:7E:DE:56:63:95:B6:F4:AD:3E
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/jJAMNmAh3_heXLx-3lZjlbb0rT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:b110::/48
Signature Algorithm: sha256WithRSAEncryption
cd:54:a9:e8:c0:98:11:d6:7d:78:1a:c7:0d:85:e1:e1:bd:ff:
1b:84:23:62:60:a2:c6:28:ec:f8:31:25:13:9c:fd:48:9a:c8:
f2:76:f6:ed:05:c4:08:02:92:05:de:e4:da:c4:ff:a2:f2:d9:
3b:54:a5:af:ca:19:4c:49:0d:bc:89:1b:60:cd:3f:29:c1:21:
48:4f:e1:4f:40:17:d5:ca:8a:ca:23:b3:af:19:79:b4:73:5d:
16:9a:3e:55:66:a5:a7:1e:e8:67:6e:94:8c:d4:8b:00:ce:69:
f6:ec:25:4c:a3:fc:6e:0d:dc:6d:6c:cb:d4:8c:3a:a8:48:a1:
25:a3:df:0c:af:ee:79:9c:92:6a:1c:19:58:95:e4:df:f6:8b:
b8:1d:b6:54:9a:4d:9c:42:57:62:bf:29:a3:07:42:68:5f:b2:
eb:12:07:ed:d9:c5:9d:0c:96:31:9f:80:4c:24:39:6c:b5:1d:
aa:f3:2b:0a:33:e7:c1:6e:81:92:09:1b:a6:60:80:45:16:da:
33:95:ee:8f:45:49:88:bb:dc:0b:85:05:19:1e:0a:e4:2e:82:
fb:4e:ec:e8:03:08:32:a1:1b:f9:b9:c1:65:57:fd:93:8a:0f:
dc:cc:33:2e:00:69:5a:71:7e:e0:45:74:9a:62:4d:02:b2:0b:
5c:e4:d7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 21:41:17 2025 by rpki-client