Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1yBzP95i70C_8hlnEGlicKbWtog.roa
File: 1yBzP95i70C_8hlnEGlicKbWtog.roa (raw, json)
Hash identifier: vA5HINd0T1/1vsdLcpaOZT/3QY5JPOlVpp3gV7UYfg0=
Subject key identifier: D7:20:73:3F:DE:62:EF:40:BF:F2:19:67:10:69:62:70:A6:D6:B6:88
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01971126F49E31FD8A82DA751B430D6E9873
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1yBzP95i70C_8hlnEGlicKbWtog.roa
Signing time: Tue 27 May 2025 09:50:55 +0000
ROA not before: Tue 27 May 2025 09:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206005
IP address blocks: 2a06:5fc3::/32 maxlen: 32
2a13:bb43::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:26:f4:9e:31:fd:8a:82:da:75:1b:43:0d:6e:98:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 27 09:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d720733fde62ef40bff2196710696270a6d6b688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:45:9e:e9:fa:06:3d:9a:57:42:90:bd:e5:
61:91:7b:a0:0a:93:eb:00:0a:ee:37:c2:45:ea:f5:
ea:13:0e:e6:42:1f:7d:52:b4:f4:51:a7:47:4f:22:
ff:80:03:7d:15:a6:07:a7:ad:da:36:4a:9c:b8:81:
fe:6c:1f:02:51:e3:42:9d:90:6b:b7:c7:94:10:93:
e6:9a:cd:04:f3:0f:b0:58:6c:d1:92:51:30:b8:df:
47:5a:09:74:6d:69:e9:d3:dc:12:cd:b2:64:b8:72:
a4:b7:00:3d:8f:48:ea:c8:ef:cc:e5:9b:5d:be:26:
6d:0b:b0:35:b5:8a:ec:63:43:3d:04:ed:76:c7:08:
45:07:9b:8a:c7:48:67:01:b3:3a:38:72:f3:75:87:
3f:bf:09:15:64:cc:7c:3a:b5:60:ed:7a:29:3d:18:
e1:7b:7b:d3:12:6f:41:63:d2:78:ef:a1:29:80:6e:
76:f2:d2:95:66:41:67:25:8f:63:27:c8:46:56:66:
75:cb:ff:bc:c2:4f:66:2f:e0:93:59:ea:50:c1:ea:
4f:08:ca:a8:c5:2f:90:c1:b3:e3:34:aa:99:f5:f9:
91:ec:98:32:4f:6b:a5:29:ee:9d:fc:13:41:78:cf:
16:98:a8:ae:e7:52:ab:d1:63:9f:c6:97:bb:80:c8:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:20:73:3F:DE:62:EF:40:BF:F2:19:67:10:69:62:70:A6:D6:B6:88
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1yBzP95i70C_8hlnEGlicKbWtog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc3::/32
2a13:bb43::/32
Signature Algorithm: sha256WithRSAEncryption
64:ba:29:b6:eb:91:55:90:00:22:45:67:55:d9:43:d0:6d:64:
36:1b:f2:9e:97:a6:1d:6a:40:51:5f:91:db:a5:2f:bd:81:14:
8c:13:0f:88:89:e2:c4:cb:a5:d4:42:cb:44:96:8b:da:33:24:
d2:62:1b:e3:53:c1:cf:15:ba:29:3d:ff:07:d8:29:12:56:0e:
20:2f:cb:53:08:b5:b3:5c:a4:c1:8a:90:b1:12:16:6f:05:bb:
01:f5:fa:43:c4:98:fa:e4:5b:c3:e7:7f:c5:52:98:75:70:37:
b2:92:72:85:90:3c:3c:5c:19:bb:bd:0a:96:d8:b9:5a:9a:3f:
23:c3:af:ef:8a:64:50:92:ce:a4:e2:8a:25:a3:3a:f8:09:dc:
4b:2c:e5:fc:60:51:d2:73:c0:f5:05:35:5a:c8:c5:1c:55:29:
ae:9d:31:a4:ef:12:bb:7f:da:96:11:54:33:c0:ff:5f:02:7c:
be:c9:45:7b:01:9d:7c:50:aa:aa:40:2a:7f:68:65:fa:35:a7:
2a:d1:35:48:95:ea:3d:9f:86:17:02:d1:34:9c:f2:b0:04:fc:
89:ca:bf:58:1c:66:ce:b5:ae:9c:8c:19:13:0e:47:4c:78:ef:
23:c9:13:53:8b:db:df:8b:fe:e2:1d:70:b4:1f:b4:34:65:26:
ec:1b:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:28:24 2025 by rpki-client