Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9od0jaXsszWxPzJhD5keO8BGx9M.roa
File: 9od0jaXsszWxPzJhD5keO8BGx9M.roa (raw, json)
Hash identifier: E/vqpIo3W9IFE2A99BwNVmwzgG2Uq5Zrpzu/UBTfg0I=
Subject key identifier: F6:87:74:8D:A5:EC:B3:35:B1:3F:32:61:0F:99:1E:3B:C0:46:C7:D3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0196CE08931311108DC0E6B43E0E9252005D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9od0jaXsszWxPzJhD5keO8BGx9M.roa
Signing time: Wed 14 May 2025 09:03:10 +0000
ROA not before: Wed 14 May 2025 09:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60581
IP address blocks: 2a10:3c85::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:08:93:13:11:10:8d:c0:e6:b4:3e:0e:92:52:00:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 14 09:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f687748da5ecb335b13f32610f991e3bc046c7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8b:9c:87:94:dc:ed:27:1c:22:16:71:e7:9e:
58:66:28:70:ec:b7:1f:ab:41:36:92:8c:33:44:48:
f6:a9:b2:91:6f:96:4b:c8:9c:28:94:d0:fb:52:db:
44:9f:e8:56:37:16:61:b3:68:25:d3:7a:1a:1c:42:
52:b6:90:63:f2:cb:ec:24:40:21:ba:30:97:93:94:
c4:0f:4e:8e:77:04:4e:14:44:d1:ce:12:1c:8d:55:
6c:df:92:92:59:11:94:6e:92:0b:0e:04:07:44:3e:
6b:f4:f7:c9:9a:e8:81:ff:a9:a1:e4:fe:c2:ff:f0:
b9:e0:bc:a9:fb:a1:b9:d1:7d:ad:6d:4b:c9:ce:25:
14:a0:df:a8:93:22:83:9c:5f:95:31:ab:5e:47:98:
56:2d:9f:ed:ea:8e:48:c2:56:a6:5c:16:13:3b:50:
2d:03:e3:dc:cc:fa:12:da:2b:04:bd:fc:43:a9:27:
46:c4:d8:27:c5:a2:fb:af:f5:d5:98:b2:47:d9:28:
02:02:2f:7e:88:46:98:1f:06:ef:3f:d5:27:30:a0:
b6:7e:dc:bc:d2:9c:17:19:d3:d1:e8:03:f8:b5:c0:
76:cf:36:21:52:76:82:9e:e3:6b:61:72:fd:c2:3f:
44:69:cf:53:a2:6a:21:97:75:3e:a5:8b:4e:6b:d9:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:87:74:8D:A5:EC:B3:35:B1:3F:32:61:0F:99:1E:3B:C0:46:C7:D3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9od0jaXsszWxPzJhD5keO8BGx9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c85::/32
Signature Algorithm: sha256WithRSAEncryption
af:38:d2:72:83:38:ec:57:bb:c2:21:e6:27:a7:fa:34:60:b9:
09:f4:91:19:8c:da:9a:3d:73:80:35:44:b9:a5:ff:a4:fc:d6:
18:9e:f5:ab:e8:61:0e:41:e4:2e:c5:a5:18:86:96:b5:a1:e4:
c0:c1:d2:56:9f:3c:72:4e:75:d9:dd:6a:0c:f4:1f:8b:e1:2f:
3f:fb:9d:9d:4a:54:b3:ab:b4:53:8a:5f:4a:d5:04:4b:4c:95:
4d:a1:f4:21:05:de:18:3e:91:0f:47:b6:e1:88:54:67:11:6a:
c1:76:4f:2e:9e:17:7b:cf:93:0f:fe:d7:b4:dd:37:68:96:36:
ce:11:01:1f:92:7c:6e:8f:57:bc:31:57:73:b4:6e:ff:ff:b6:
a2:bd:69:f0:00:27:0c:11:1b:f3:7a:b6:32:11:f5:b5:c1:e2:
db:12:90:4d:0d:13:d6:60:8c:1d:a9:8b:c4:fc:38:a1:dc:b7:
94:15:3b:5c:52:19:20:a3:a2:73:71:dd:d6:20:d1:6f:8c:0d:
cf:f4:7a:a8:1b:8c:a1:5f:a7:0d:d3:59:97:55:58:d6:8a:7e:
2b:f7:bb:2a:8e:26:2e:9e:5b:53:15:0f:14:8f:bc:20:c5:fd:
ae:73:db:72:e3:03:e8:94:f4:a8:b8:07:47:a8:1b:1b:d0:b9:
13:33:d3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:06:35 2025 by rpki-client