Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7QVu6H9izZQhx3OspOgZ2luRXzE.roa
File: 7QVu6H9izZQhx3OspOgZ2luRXzE.roa (raw, json)
Hash identifier: ALsNIhrx7fisxP17GigDQvfxsQVpbyfRhPi94n5tM2I=
Subject key identifier: ED:05:6E:E8:7F:62:CD:94:21:C7:73:AC:A4:E8:19:DA:5B:91:5F:31
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01971126F558AA4FC28088957C29B344A032
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7QVu6H9izZQhx3OspOgZ2luRXzE.roa
Signing time: Tue 27 May 2025 09:50:55 +0000
ROA not before: Tue 27 May 2025 09:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209944
IP address blocks: 2a06:5fc1::/32 maxlen: 32
2a13:bb41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:26:f5:58:aa:4f:c2:80:88:95:7c:29:b3:44:a0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 27 09:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed056ee87f62cd9421c773aca4e819da5b915f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:18:05:a0:3e:72:5f:3f:b5:20:33:03:3c:
76:30:63:db:06:ea:1c:5b:09:1a:7e:53:19:cc:56:
3c:84:61:4e:32:35:55:8f:25:51:01:8e:4c:9f:c9:
19:c5:78:5b:bd:4f:f7:5d:04:2c:60:e8:48:1d:11:
86:2d:d8:c5:75:7b:95:1e:86:bb:df:e9:dd:88:e9:
4d:42:fd:46:ff:6c:70:f4:83:94:5e:a4:9e:78:7b:
87:70:23:14:7e:80:3f:4b:f2:d1:3d:e1:bf:9f:e2:
4f:03:0f:98:03:54:7b:bc:78:ed:fd:5c:c0:ff:dd:
a3:ab:0c:83:b2:0f:03:d6:dd:d1:c6:1c:59:64:38:
4b:8f:d8:0a:9d:9c:d9:97:c3:03:10:f1:01:78:68:
a7:3d:25:9b:6a:03:a6:64:73:aa:6a:e4:9e:1a:b8:
b6:1b:e4:04:44:38:2c:c2:28:56:e9:b1:8e:bc:9a:
c0:14:5c:9d:64:29:d5:2b:2c:88:00:7c:e9:9b:80:
4b:0f:79:85:3d:de:87:30:ad:7d:e3:bb:fb:27:be:
d1:cd:e2:61:d9:5c:53:4a:03:7b:31:9c:40:b5:36:
2e:85:41:9c:e2:02:79:71:1e:42:89:6a:fa:63:6e:
03:37:a2:d6:b2:ab:b6:73:4f:4c:10:b8:99:39:57:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:6E:E8:7F:62:CD:94:21:C7:73:AC:A4:E8:19:DA:5B:91:5F:31
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7QVu6H9izZQhx3OspOgZ2luRXzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc1::/32
2a13:bb41::/32
Signature Algorithm: sha256WithRSAEncryption
af:9a:0b:c4:3c:5e:c0:66:1c:b5:42:9f:73:da:90:bf:18:d1:
8c:e2:bf:92:a5:72:20:93:1c:73:da:5b:b6:a2:e0:bb:8f:f8:
09:6e:a5:c7:57:94:25:31:af:ed:8b:c9:77:04:0c:65:eb:4e:
f5:0f:bf:00:17:aa:0b:9b:97:4d:12:12:42:ab:3b:5c:06:bf:
f2:6c:d9:7f:3c:e9:b3:81:10:1f:6d:3b:11:c8:8a:5e:fb:c2:
e3:dc:de:6e:2f:c9:0f:e5:5b:b7:9b:87:67:2a:dd:dc:a8:15:
82:c5:7d:de:15:9e:63:af:61:20:f0:23:12:df:35:89:34:d7:
55:11:08:43:26:8b:25:41:c0:67:5c:58:96:9f:d6:63:73:b4:
df:46:00:0a:39:96:6e:f3:d5:b7:85:7b:c7:fb:5a:eb:d7:fa:
24:a4:18:59:59:d7:e8:04:eb:da:3d:a6:05:69:42:87:54:40:
6f:15:63:5a:84:e2:0c:4a:3a:55:e7:72:ec:54:30:37:9f:d4:
f7:8c:66:da:45:c0:f8:b4:f9:01:ae:5f:55:50:c3:a5:01:40:
2c:8d:44:41:ee:a5:9c:90:87:cf:05:9d:c3:45:85:8f:f0:70:
ca:8e:a4:ed:7e:e2:20:8d:21:49:2d:01:d1:70:6c:72:f2:90:
66:56:9a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:20:55 2025 by rpki-client