Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BrJFA_Mc24PYzR14ouTOahmJsDY.roa
File: BrJFA_Mc24PYzR14ouTOahmJsDY.roa (raw, json)
Hash identifier: Yh9dE/91fURwrmtwfrWba7SgpqlO0qRfkZhWwjLTTnY=
Subject key identifier: 06:B2:45:03:F3:1C:DB:83:D8:CD:1D:78:A2:E4:CE:6A:19:89:B0:36
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0196CE07A8FE9373D1E8D65A9E1FEA92ABFE
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BrJFA_Mc24PYzR14ouTOahmJsDY.roa
Signing time: Wed 14 May 2025 09:02:10 +0000
ROA not before: Wed 14 May 2025 09:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203624
IP address blocks: 2a10:3c81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:07:a8:fe:93:73:d1:e8:d6:5a:9e:1f:ea:92:ab:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 14 09:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06b24503f31cdb83d8cd1d78a2e4ce6a1989b036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:60:6b:84:36:31:d1:f7:e2:d4:60:3c:5c:
e1:b7:9f:2e:1c:ab:5c:d1:8b:73:31:33:5c:f9:40:
dd:83:95:49:e0:f7:18:09:78:b1:ad:07:a5:ba:fb:
a0:39:d2:77:bd:5e:1c:59:88:de:fa:da:ad:b7:b6:
79:7b:81:5e:4b:eb:d5:6a:6b:0b:4b:8e:5f:78:69:
a3:d6:f1:ec:d4:5c:5b:dd:7b:98:a1:30:18:e7:23:
7a:7a:9d:a9:fa:1f:f1:bb:b4:85:4e:b6:9f:04:4c:
51:f9:9f:6f:fb:95:37:ec:07:ed:54:eb:bc:5e:32:
ea:80:fb:ad:e4:c1:18:80:e5:c7:e0:26:4f:c2:70:
3e:59:f8:00:8f:d7:20:c3:49:0d:cb:7e:f1:b8:95:
7d:d4:06:cd:04:eb:4c:78:d2:f9:82:e5:77:dc:f6:
d8:c0:fe:79:9f:a5:34:0f:5b:74:68:ce:21:25:67:
21:1b:2e:7b:25:28:2c:ff:87:0e:0f:55:13:10:ef:
a9:52:f5:f7:cd:d0:65:6c:89:9f:4b:e6:f2:d6:e1:
64:4e:fc:fe:93:75:d3:4e:86:0f:98:23:44:75:a3:
58:00:45:b7:80:a9:b0:37:03:4f:b6:87:fc:0f:d1:
b5:0a:9c:b6:84:14:27:59:5c:c6:20:9f:d8:b8:24:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B2:45:03:F3:1C:DB:83:D8:CD:1D:78:A2:E4:CE:6A:19:89:B0:36
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BrJFA_Mc24PYzR14ouTOahmJsDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c81::/32
Signature Algorithm: sha256WithRSAEncryption
6f:be:03:7b:58:ec:3b:04:e8:ab:1c:87:f2:26:dc:1f:ee:d8:
3a:81:fe:42:e8:1b:43:3b:5a:de:c0:91:64:cc:12:07:02:1c:
2d:aa:8e:28:87:c7:90:0a:4c:90:08:32:ef:86:21:47:d7:9b:
22:f2:f2:39:3d:b1:93:d2:a6:e4:0c:7a:fb:ad:48:55:c5:62:
d0:ff:4f:6a:4c:0a:dd:cb:5c:70:a4:c8:99:99:40:c6:67:e1:
b7:d3:5c:d0:87:be:29:1d:7b:96:1e:f7:35:4c:c0:e7:38:8e:
b7:4b:f3:e5:c5:13:f2:22:34:fa:02:28:fb:65:37:f1:9d:04:
56:7a:30:78:37:ca:30:a3:d9:dc:2a:61:72:4c:06:59:b5:af:
d0:73:8e:8d:9b:39:90:91:f7:6a:f0:c7:4b:fa:75:c3:23:2a:
10:18:f1:a9:f2:72:83:98:34:05:68:8f:27:e8:39:87:90:0d:
94:38:f3:9f:3d:78:cb:4e:16:d4:10:94:1d:24:dd:52:28:d6:
d6:e3:5f:e2:5b:0c:04:f2:08:56:6e:bd:08:9e:9d:32:ac:4e:
20:2f:0b:b2:19:c5:8b:ab:47:62:bc:d9:19:c4:ba:8e:8a:25:
f6:c5:af:d9:27:45:c7:c4:45:96:cb:00:8a:41:81:f3:0b:78:
ae:fb:20:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:06:27 2025 by rpki-client