Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QoD2FuLGkWR_3lbsAagxDPIQ1Gc.roa
File: QoD2FuLGkWR_3lbsAagxDPIQ1Gc.roa (raw, json)
Hash identifier: i3WcyUkNeZ7pZ4qYZOH694Lo3GwHQR1nhmjZ2fX7MJA=
Subject key identifier: 42:80:F6:16:E2:C6:91:64:7F:DE:56:EC:01:A8:31:0C:F2:10:D4:67
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0196CE097D6ED13D7807A6BEE268500DB626
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QoD2FuLGkWR_3lbsAagxDPIQ1Gc.roa
Signing time: Wed 14 May 2025 09:04:10 +0000
ROA not before: Wed 14 May 2025 09:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59841
IP address blocks: 2a10:3c86::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:09:7d:6e:d1:3d:78:07:a6:be:e2:68:50:0d:b6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 14 09:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4280f616e2c691647fde56ec01a8310cf210d467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:0e:9d:c4:a3:ef:d0:07:ed:57:a5:87:f0:
a2:5f:a7:63:f0:3e:dd:2a:c6:81:ec:98:f4:6f:10:
88:4d:43:4e:d9:d5:4e:10:57:7d:f5:e0:b7:56:29:
54:8b:af:85:64:9a:85:9f:c2:0e:a9:2f:d4:ae:74:
56:93:75:0c:f3:96:c9:d8:e2:c5:a4:4a:34:88:7d:
00:fb:2c:79:18:22:a0:3f:3f:12:29:ef:57:02:b6:
39:58:cc:3b:73:6a:08:88:ef:aa:b5:2b:19:f1:59:
45:dd:fc:e1:80:71:76:b5:94:ed:b1:fd:49:eb:86:
6b:ec:ec:34:7c:51:c1:20:20:2e:73:69:df:e6:82:
91:9e:ea:5a:6a:93:aa:30:0b:73:b8:f1:68:89:e8:
86:d3:04:1c:1e:c2:fb:29:cd:3a:42:f2:db:6b:46:
2a:a8:e5:3d:c1:87:5f:96:6c:0b:9c:bb:e5:35:1b:
49:b0:00:9f:e4:5b:c9:ea:68:95:be:b7:27:b1:d4:
66:07:9d:35:27:84:8c:3c:30:8f:de:92:87:a6:ff:
59:d5:54:b9:0d:ad:35:e8:0d:a1:4d:a4:0c:c5:35:
04:fd:e0:ff:71:db:9a:5c:1a:fd:17:0e:2e:a1:3b:
98:8f:8f:21:63:79:c2:08:2c:4f:e1:5f:18:64:49:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:80:F6:16:E2:C6:91:64:7F:DE:56:EC:01:A8:31:0C:F2:10:D4:67
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QoD2FuLGkWR_3lbsAagxDPIQ1Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c86::/32
Signature Algorithm: sha256WithRSAEncryption
8f:e6:df:82:0f:c3:5c:ed:13:da:cb:a1:54:6c:cd:17:a7:a8:
cd:5d:be:b6:5e:f6:56:ae:42:fe:5d:54:c8:5c:6d:1a:23:d5:
0c:61:09:c5:34:46:76:10:e3:d5:c1:03:d1:04:89:0f:0e:bb:
56:66:db:4c:b8:d6:4a:90:62:77:e6:b6:cd:48:66:9c:ce:98:
7d:65:1f:c3:0b:92:eb:09:8c:9d:a4:fb:2a:58:da:db:2d:a8:
0b:1e:e9:21:2d:54:ce:09:ea:bb:a7:f8:d9:61:00:f6:45:63:
03:83:3d:07:a3:31:09:04:1c:0f:98:ce:d1:e7:44:ee:29:cd:
46:05:4f:e0:48:c6:da:3e:d1:af:3f:1e:be:5a:e9:df:5f:fc:
db:bf:c4:43:7c:c1:3c:35:6a:8c:8b:ff:62:49:d5:6d:a8:ab:
27:a7:28:5f:75:8f:d9:a3:80:31:eb:b0:79:dc:5a:42:94:30:
20:67:e7:36:6b:c7:17:9f:d7:de:19:25:26:ef:cf:39:7e:55:
c2:00:15:07:e0:bc:c8:35:19:f3:07:0d:32:f5:fc:17:ad:a4:
21:71:ff:8f:2b:a0:b7:a2:44:33:b4:9b:48:0a:a7:5c:d3:0a:
9b:70:dc:16:d0:7c:f4:06:a1:d0:b2:a5:e9:35:a4:09:f3:22:
a7:c0:49:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:57 2025 by rpki-client