Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/bLuTCuReawvirgt63Y38aMhuqEE.roa
File: bLuTCuReawvirgt63Y38aMhuqEE.roa (raw, json)
Hash identifier: YmwaBk2p2S46SNICsfN5G2xJkYe99FC9Tn3uW4i3XCY=
Subject key identifier: 6C:BB:93:0A:E4:5E:6B:0B:E2:AE:0B:7A:DD:8D:FC:68:C8:6E:A8:41
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019711260B7CA5E08484275C899CA0F8FA52
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/bLuTCuReawvirgt63Y38aMhuqEE.roa
Signing time: Tue 27 May 2025 09:49:55 +0000
ROA not before: Tue 27 May 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209896
IP address blocks: 2a05:9a43::/32 maxlen: 32
2a13:c443::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:26:0b:7c:a5:e0:84:84:27:5c:89:9c:a0:f8:fa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 27 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cbb930ae45e6b0be2ae0b7add8dfc68c86ea841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:e2:d1:52:22:05:0e:e4:ad:8c:b5:ff:e8:
25:7d:b4:69:ce:cc:9b:69:46:11:e2:04:cb:a8:a9:
4a:38:a7:c7:ed:1f:25:5a:00:96:8d:23:3c:ac:47:
92:5a:80:f6:c0:96:fe:59:d5:42:54:44:ed:0b:5d:
ec:bd:2e:17:aa:2e:96:73:03:e8:84:94:9e:b5:2b:
5e:39:09:1c:8f:d8:2b:7f:c4:d4:bf:1d:2b:1d:5e:
64:03:e0:6d:32:a4:02:9f:ad:87:66:76:2c:c4:6c:
67:38:f3:b3:6b:ae:8b:59:0a:88:97:c9:68:7c:f8:
5c:a3:7f:83:fe:35:2f:f4:8c:d8:74:d0:7d:f0:2d:
2c:21:f7:02:51:9e:79:fb:d7:aa:a7:d9:c1:52:87:
bc:92:5b:b5:0c:7a:d0:5c:25:50:46:8e:18:11:51:
41:74:1a:97:35:cf:3f:47:1e:d1:73:89:77:cb:c3:
e3:84:ef:36:36:2e:41:d2:53:84:1f:db:81:af:ed:
86:6b:02:9d:6b:78:61:0b:1d:ae:d8:0f:84:3a:e8:
84:49:7b:96:4b:af:4b:e8:bc:91:0e:12:72:51:00:
68:91:d9:f1:72:3d:09:66:8f:9e:a3:27:5f:74:33:
6c:09:85:06:6e:0b:55:9f:2f:51:b0:a8:33:7d:1f:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BB:93:0A:E4:5E:6B:0B:E2:AE:0B:7A:DD:8D:FC:68:C8:6E:A8:41
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/bLuTCuReawvirgt63Y38aMhuqEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a43::/32
2a13:c443::/32
Signature Algorithm: sha256WithRSAEncryption
30:a3:0f:10:09:c6:90:1a:85:0b:b8:97:9d:40:ad:70:c5:7e:
55:31:24:89:61:8d:18:1a:e1:d6:d9:48:c9:af:8c:ec:16:22:
68:34:b8:1f:be:6e:ab:2a:9a:1d:b7:f7:ec:a6:da:02:63:bb:
9a:70:e9:dc:1c:66:5b:41:4a:d7:0c:d5:56:46:92:57:33:7f:
12:21:5f:81:ef:6b:61:22:b6:d5:a9:04:1d:a5:5f:33:b7:71:
5d:d7:13:4a:a2:f0:27:da:51:4f:61:7e:0c:e8:87:03:ce:ad:
b6:65:0f:d0:eb:aa:5f:9d:b4:76:18:05:5b:4f:94:4f:8c:ff:
f3:3b:95:8b:9a:fc:98:91:af:1d:b4:09:c1:0c:1b:d9:26:87:
8b:28:22:03:90:e0:d3:91:ac:57:8a:9c:44:24:79:da:bc:59:
5a:a4:f4:08:3d:f8:d0:f1:ce:47:09:0a:6d:c6:c7:f7:c1:c0:
1b:b0:e1:a9:23:6d:5d:6d:37:14:93:d3:66:56:97:f9:57:3c:
e8:91:4f:96:ad:4d:0d:c2:65:c2:4c:16:7a:ba:36:aa:66:7c:
cb:fb:85:8a:98:1f:48:91:96:77:75:1c:72:98:60:35:36:86:
0f:25:89:43:43:11:84:d9:f1:a7:1d:a9:c7:4c:aa:27:c1:02:
aa:d4:fd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:07 2025 by rpki-client