Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eHlRjnWREyPp41RK4b4fE8OGO3U.roa
File: eHlRjnWREyPp41RK4b4fE8OGO3U.roa (raw, json)
Hash identifier: b9xXYCUF7soLD4UXPCMLfuwKWr2RqpYDgTB7uSKCh90=
Subject key identifier: 78:79:51:8E:75:91:13:23:E9:E3:54:4A:E1:BE:1F:13:C3:86:3B:75
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0197091CD916C445DF50977A6654941AB8E8
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eHlRjnWREyPp41RK4b4fE8OGO3U.roa
Signing time: Sun 25 May 2025 20:22:54 +0000
ROA not before: Sun 25 May 2025 20:22:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209963
IP address blocks: 2a13:b9c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:09:1c:d9:16:c4:45:df:50:97:7a:66:54:94:1a:b8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 25 20:22:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7879518e75911323e9e3544ae1be1f13c3863b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:1a:62:0a:a3:ad:98:2e:40:3f:c8:65:c0:
ef:97:d9:29:a6:46:a4:42:90:13:25:6d:44:b2:44:
32:0a:8a:9b:ca:fc:19:b3:8f:d1:1b:a5:6d:7e:a2:
55:9e:a4:16:66:2b:2a:ea:6e:92:c1:78:3f:cc:dd:
42:34:b5:2a:17:92:76:95:7b:0d:d1:6e:a7:2e:a0:
ba:45:e5:09:33:29:41:36:4f:fa:33:d9:af:ae:e3:
a2:94:f9:bb:fe:9f:f9:9d:03:bc:cb:e4:69:3f:39:
74:ff:c7:09:94:ef:f1:71:cb:c0:9e:1c:69:f7:8d:
8e:71:c4:a7:0e:24:6e:75:f5:ea:df:75:5b:47:74:
3e:0a:da:83:e1:86:11:6c:4a:4e:c8:c1:e0:bf:12:
10:23:9b:8f:19:b2:9c:1f:f2:af:d9:91:fb:b1:e1:
04:9c:a0:cd:c7:fa:f2:43:97:20:af:ba:d8:0e:01:
f9:5c:e2:d7:cb:2c:5a:14:12:9a:49:ff:ce:1f:f7:
be:35:0d:aa:de:2a:b6:cc:0b:e0:40:75:17:c9:53:
14:a1:1f:29:4b:91:96:ec:5e:bc:62:28:f2:8f:f8:
90:cb:e7:5c:59:23:bb:e4:04:44:91:39:99:9a:74:
d7:55:65:97:86:be:b4:08:5a:12:49:d0:dc:ce:06:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:79:51:8E:75:91:13:23:E9:E3:54:4A:E1:BE:1F:13:C3:86:3B:75
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eHlRjnWREyPp41RK4b4fE8OGO3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b9c7::/32
Signature Algorithm: sha256WithRSAEncryption
b4:55:bf:15:ee:8c:3c:8a:4d:2a:73:0e:13:d8:20:2d:84:21:
b8:de:25:99:6f:d3:dc:a7:1a:4e:87:eb:c0:a9:93:87:9f:b3:
c1:54:15:6d:df:f6:f8:d3:f8:63:d6:4d:f5:df:9a:73:99:43:
2b:2d:05:c3:c4:9b:35:37:79:81:30:12:62:34:36:e8:80:c2:
c7:b5:34:ed:bc:13:e8:dd:65:53:d5:e4:b6:ae:d0:c4:a0:08:
6d:2b:24:f7:bf:be:f3:de:62:e5:34:87:d5:53:14:d8:a1:0e:
d0:b5:51:5f:ac:4c:a5:ea:bc:c1:52:f2:9d:ed:a4:21:eb:f4:
ed:0e:39:99:bf:20:33:9e:f1:ad:df:0c:21:9c:8a:20:45:ee:
ba:14:5f:cb:53:5e:d4:46:ef:b5:fb:fe:d4:8b:41:b7:7b:56:
70:f4:1f:fa:75:e5:52:0a:e3:b4:52:e2:bd:b4:56:59:1e:4d:
e5:a1:6e:47:6f:ee:04:42:a7:ed:ad:fe:81:59:f4:7c:28:a6:
1a:8c:bc:9a:78:8c:08:47:fd:e5:f8:bf:f5:91:b4:30:ac:c9:
24:84:34:a0:d9:a2:14:07:ab:2d:12:54:6f:53:e8:5c:f3:3a:
5c:ab:ab:aa:2b:bd:4e:15:ab:a9:44:1a:20:30:c0:48:a7:7b:
7b:46:b9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:48:01 2025 by rpki-client