Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/frcxdkUw4UpOIInuJYfn8SRPQZM.roa
File: frcxdkUw4UpOIInuJYfn8SRPQZM.roa (raw, json)
Hash identifier: KiUVj2z1C4bvxKWHp8luf2Dy38iFZYtpBtQ+5sYAzKM=
Subject key identifier: 7E:B7:31:76:45:30:E1:4A:4E:20:89:EE:25:87:E7:F1:24:4F:41:93
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0196CE0894375075928012011EF0E868EE97
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/frcxdkUw4UpOIInuJYfn8SRPQZM.roa
Signing time: Wed 14 May 2025 09:03:10 +0000
ROA not before: Wed 14 May 2025 09:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202469
IP address blocks: 2a10:3c83::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:08:94:37:50:75:92:80:12:01:1e:f0:e8:68:ee:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 14 09:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7eb731764530e14a4e2089ee2587e7f1244f4193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:e6:13:0e:23:92:57:10:e8:30:c0:44:5c:
12:9a:5f:4d:1d:f6:49:01:9b:63:3e:5e:e1:d9:43:
62:88:69:e9:a0:0f:15:22:ec:fd:9f:80:07:a9:43:
18:22:6b:ad:7a:1d:20:50:2d:20:a2:69:f4:14:b3:
fa:5b:23:11:6a:27:2c:f1:4d:a5:b8:9b:43:1e:ec:
65:bd:e3:8a:84:87:69:fd:27:24:02:9a:b1:cb:c9:
90:f9:a8:18:a0:93:94:6f:0f:c0:c9:63:65:4f:a7:
8f:9b:30:f3:89:75:b1:6e:3a:3b:17:67:ad:40:cc:
3f:c7:92:ab:40:13:26:b2:5f:19:fe:97:5e:f7:b0:
92:34:c8:91:a7:9c:b5:60:fa:2d:6d:b6:24:22:fd:
8c:70:85:ac:a9:12:af:99:a2:05:db:3a:9b:83:da:
a8:af:31:88:8a:0c:2e:84:dd:c6:06:34:3c:3d:b9:
7e:5a:55:20:fe:ee:f6:7d:c9:71:73:42:20:60:00:
15:69:1b:6a:8b:ac:e2:4a:2a:19:5b:7a:18:1c:1e:
47:1a:03:95:da:81:89:d5:58:e4:36:65:be:34:e9:
68:0f:54:c1:b0:50:30:13:df:12:aa:7d:c8:8c:99:
96:bd:40:4e:00:08:d2:72:3e:a4:1f:e3:9d:bd:3c:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:31:76:45:30:E1:4A:4E:20:89:EE:25:87:E7:F1:24:4F:41:93
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/frcxdkUw4UpOIInuJYfn8SRPQZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c83::/32
Signature Algorithm: sha256WithRSAEncryption
29:16:99:70:57:59:52:7f:e7:fc:ab:0e:d1:6a:91:54:35:1b:
2a:0b:5e:cf:69:46:09:55:29:fd:ce:d6:74:8e:bb:30:e1:7a:
c0:c2:b0:5d:39:ac:78:4f:56:60:07:52:23:2e:a1:e1:74:df:
08:25:54:72:01:13:56:51:56:18:53:5d:4c:f9:67:a9:ba:22:
48:9a:4f:10:b9:4c:b9:6a:36:e8:94:67:bb:fa:a2:59:d1:e5:
6a:f6:67:a5:46:85:8e:a0:9d:f7:86:e8:a4:70:4b:27:c0:42:
f8:10:1c:a3:6f:74:5f:af:24:d8:92:64:e0:ac:8e:80:ce:e5:
24:f0:4a:87:ee:f9:5d:1c:4e:8c:3b:26:bb:78:50:d8:3b:86:
bb:46:42:88:bb:95:41:81:fc:8d:62:05:b2:a6:ac:f3:a3:b6:
6a:bc:7d:f8:07:00:ba:32:0a:c7:50:fa:e0:f7:5a:c0:7c:50:
ee:b9:ee:08:35:70:0b:b1:ea:e5:7f:fc:a8:83:98:83:4f:f1:
ee:66:bd:9b:3f:3c:38:9d:40:79:ae:30:3c:d4:b3:3f:ac:e4:
71:25:00:4b:2e:ea:3a:e7:35:86:4b:43:0a:a2:dc:1f:8b:e0:
ba:e2:33:1b:72:ac:b0:7d:a5:b7:15:9f:8c:3f:24:e8:21:65:
a3:a9:9c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:13:07 2025 by rpki-client