Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UNbCcvZGT-MbJazQBBnGFdVBjOY.roa
File: UNbCcvZGT-MbJazQBBnGFdVBjOY.roa (raw, json)
Hash identifier: ZhDbbCwEOEhZbmOZ50lqj3hnrMOHwTXD9Fy2pPb0iYs=
Subject key identifier: 50:D6:C2:72:F6:46:4F:E3:1B:25:AC:D0:04:19:C6:15:D5:41:8C:E6
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01971126F4ED8153A752C55744AF0D393F15
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UNbCcvZGT-MbJazQBBnGFdVBjOY.roa
Signing time: Tue 27 May 2025 09:50:55 +0000
ROA not before: Tue 27 May 2025 09:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206560
IP address blocks: 2a06:5fc0::/32 maxlen: 32
2a13:bb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:26:f4:ed:81:53:a7:52:c5:57:44:af:0d:39:3f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 27 09:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50d6c272f6464fe31b25acd00419c615d5418ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:76:8a:fe:25:54:64:0c:5e:a7:59:71:fd:
47:92:69:47:f9:92:22:e7:93:ad:29:2b:b5:21:28:
fa:f5:3c:c5:4b:c1:d5:45:e2:90:99:dc:d7:9d:4f:
9c:3f:25:ed:12:b4:e9:05:c7:a8:3f:34:4f:b9:ae:
c8:21:e4:fe:20:dd:33:c9:d4:1f:21:20:78:59:02:
6b:d1:a4:ae:2c:33:bb:a8:83:3a:65:fd:0b:1f:6b:
3f:4a:38:2d:06:31:c1:10:ba:84:0e:a7:64:b0:1e:
e4:6a:43:83:bb:33:43:98:e5:9b:db:87:b2:03:f0:
76:36:6b:75:29:4d:c7:c5:51:7d:80:9a:83:d6:af:
f2:7c:03:ae:86:8c:ab:34:e7:9f:a4:f1:a5:9a:80:
ce:b6:c7:d6:87:c5:c0:e2:80:1a:b9:51:c6:69:b2:
0e:23:cc:05:01:b1:16:6a:7f:af:d0:a8:4a:0d:fe:
7e:77:ea:82:ba:e8:52:68:22:6d:f6:61:f9:96:5e:
19:fa:90:49:a9:65:75:4d:11:21:db:7e:81:d2:d8:
d3:c0:4c:6b:0e:b4:0d:39:88:c5:ea:88:d6:49:c9:
48:d3:5c:43:01:78:6a:4a:ad:74:57:ed:1b:ea:fb:
d2:41:8b:05:65:1f:f4:a5:ff:70:72:f7:3f:52:ab:
4c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D6:C2:72:F6:46:4F:E3:1B:25:AC:D0:04:19:C6:15:D5:41:8C:E6
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UNbCcvZGT-MbJazQBBnGFdVBjOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/32
2a13:bb40::/32
Signature Algorithm: sha256WithRSAEncryption
46:a9:d6:01:84:a8:2d:95:44:bb:9b:72:a3:73:4c:8a:98:a9:
28:e6:fc:d9:8d:32:3b:0b:df:8a:c8:33:61:1c:13:cd:52:d1:
9c:5b:b9:95:5d:f1:b4:33:e9:69:87:e0:f1:d3:3a:be:ae:30:
60:b5:a5:92:6e:17:d1:fd:22:0f:ac:6b:78:6f:82:ce:ec:59:
52:f4:e1:15:5c:e1:d7:39:5c:68:8f:ae:19:6c:24:a3:4f:68:
e1:3a:91:6e:c3:a1:d7:31:a5:ed:fd:35:f5:16:25:17:35:e4:
db:3e:e0:fb:44:1a:d2:65:c3:a4:3b:77:aa:17:68:b2:7a:94:
2b:39:a9:e1:67:66:ff:eb:0f:f9:04:69:73:fa:00:70:40:bb:
c6:37:e7:ed:55:50:e7:d4:26:52:f0:b6:c8:75:99:8a:20:cb:
3f:02:6c:68:ed:d4:90:69:eb:8a:c5:96:ae:88:39:d2:c8:06:
71:e3:12:bf:35:8d:79:2c:f3:25:e2:6d:f9:be:5b:aa:c6:e5:
19:bb:d2:1e:fe:88:b3:1b:57:a3:82:59:55:cb:9a:0a:24:ce:
26:6b:13:aa:d0:d8:20:a6:47:aa:11:8b:43:ca:8b:6c:bf:5d:
09:3d:5d:f6:e2:35:e9:94:41:21:be:17:5e:9b:c3:23:9a:7e:
fa:b9:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:22 2025 by rpki-client