Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/j3Oyq8JqDxuALVsoYZ8HUUlXRsg.roa
File: j3Oyq8JqDxuALVsoYZ8HUUlXRsg.roa (raw, json)
Hash identifier: sQk1B/xzqfsEvcOrYOl9cKYJ2dzcQHRmxEIBCkf00NY=
Subject key identifier: 8F:73:B2:AB:C2:6A:0F:1B:80:2D:5B:28:61:9F:07:51:49:57:46:C8
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 01973288A2BB835DF67C4BE63DDFA6F8A298
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/j3Oyq8JqDxuALVsoYZ8HUUlXRsg.roa
Signing time: Mon 02 Jun 2025 21:25:04 +0000
ROA not before: Mon 02 Jun 2025 21:25:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207510
IP address blocks: 2a14:d100:f000::/48 maxlen: 48
2a14:d100:f001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:32:88:a2:bb:83:5d:f6:7c:4b:e6:3d:df:a6:f8:a2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Jun 2 21:25:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f73b2abc26a0f1b802d5b28619f0751495746c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:73:3c:85:4a:70:09:01:e6:03:b7:ce:64:
61:ca:f0:1f:0c:bc:b6:6e:8d:99:4f:05:1a:e4:a1:
a3:19:f8:ef:7f:76:18:49:4a:4c:c2:37:81:97:ef:
60:e0:3a:eb:95:ad:03:1f:ef:ad:2f:ae:3c:ef:da:
7d:47:3e:53:8a:28:7f:96:21:4c:69:b3:9c:d9:bc:
06:42:ce:23:fb:53:5a:9a:31:68:43:09:41:65:f8:
f6:8a:50:f0:17:f8:80:f4:8c:2d:e5:5c:17:9e:e0:
01:75:d2:d6:c9:13:58:dd:e0:8b:bc:63:75:bf:06:
cf:f8:10:23:84:05:fa:fe:a8:3a:a3:15:4f:8a:35:
a5:e3:72:96:e7:13:33:c9:fb:14:db:49:de:19:06:
24:b8:89:3c:ea:13:3f:a6:bc:6b:85:a8:e5:2a:37:
f4:01:68:de:98:b0:4d:33:d8:d1:69:ca:4f:47:a1:
13:fd:2a:81:38:c2:4d:56:d2:8f:30:3b:e1:d8:f9:
f9:2a:40:02:74:e9:3c:69:a6:bc:9f:a7:4d:82:64:
eb:14:8f:03:58:24:09:e9:10:1a:b4:d9:de:f1:71:
e0:00:20:cc:95:c5:b8:60:7d:1b:45:35:8a:e9:62:
ff:f2:c9:48:6a:92:af:44:04:90:19:e0:78:ab:70:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:B2:AB:C2:6A:0F:1B:80:2D:5B:28:61:9F:07:51:49:57:46:C8
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/j3Oyq8JqDxuALVsoYZ8HUUlXRsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:d100:f000::/47
Signature Algorithm: sha256WithRSAEncryption
00:be:45:61:c6:11:fc:92:a6:eb:8c:e1:dd:7d:32:82:71:a7:
33:86:ad:2c:54:85:9b:20:ed:28:54:bf:46:1c:97:23:e0:9d:
cf:e5:24:d7:11:4f:02:37:57:49:d4:e4:9d:43:7f:81:81:a8:
1f:11:4e:c1:9d:a3:2c:a8:ee:1e:b1:0e:30:f3:a9:fe:80:07:
bb:50:f5:9c:1b:a9:19:7e:e5:7e:49:a9:55:1e:09:31:85:e9:
96:47:8f:74:c0:56:53:42:50:6d:2f:5d:ca:07:ff:11:b4:ee:
ac:f4:17:d6:3c:30:07:6b:4f:00:c9:54:d4:0e:0b:34:f1:4a:
9b:84:7f:88:87:f5:ce:64:e0:7e:36:46:c1:97:c2:1e:75:77:
5a:96:f1:23:87:28:76:2b:88:d6:4e:e8:c7:cf:64:5f:84:08:
65:2a:ad:4c:99:c2:4b:da:7b:c9:fb:e8:6d:74:75:bb:9d:09:
a3:77:c0:ed:14:bf:17:00:a0:32:22:a2:0e:bc:58:b5:d7:cf:
bc:8e:0c:c8:45:bb:c8:01:df:9d:2b:4a:5a:1f:0b:a5:3a:b1:
b4:02:80:79:62:23:1f:86:02:85:f8:0b:ea:7a:cb:a7:d5:3b:
c9:f0:df:6e:15:d7:6e:49:e9:ef:6b:9b:bc:f1:a4:8a:d8:43:
c8:44:9b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:00 2025 by rpki-client