Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hLQCswNyioZU8Ze7591MQubyh20.roa
File: hLQCswNyioZU8Ze7591MQubyh20.roa (raw, json)
Hash identifier: fKQHqjR9tDSMntjNRCFwvUlS402J8iEoALpIUItDZms=
Subject key identifier: 84:B4:02:B3:03:72:8A:86:54:F1:97:BB:E7:DD:4C:42:E6:F2:87:6D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01971BF957B8DA655E92C5E52A854C95985B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hLQCswNyioZU8Ze7591MQubyh20.roa
Signing time: Thu 29 May 2025 12:16:55 +0000
ROA not before: Thu 29 May 2025 12:16:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58285
IP address blocks: 2a14:6a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:f9:57:b8:da:65:5e:92:c5:e5:2a:85:4c:95:98:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 29 12:16:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84b402b303728a8654f197bbe7dd4c42e6f2876d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:3c:80:cf:47:3e:93:ef:44:c9:1c:dc:a4:
6c:52:67:80:b6:37:ef:83:8c:a3:d4:76:fa:46:ea:
86:68:19:d8:e9:d5:5b:93:6e:e0:c9:63:1e:85:03:
2f:18:55:f7:43:bc:09:ae:76:f3:65:59:ef:4a:49:
1e:ae:4a:dd:cb:1b:94:d7:47:a2:1f:51:7d:81:e7:
a1:7f:97:35:d8:54:e0:27:08:df:81:53:d4:33:97:
03:87:a4:c9:52:c3:64:ee:ae:78:6f:1c:b2:7b:c4:
96:30:d1:6d:bd:bb:8d:96:5c:b9:93:b6:4e:03:72:
2e:5d:31:83:04:72:b3:95:6c:07:1a:8f:a2:b0:f3:
9e:17:ff:54:ea:8b:b2:a0:48:36:74:4c:90:c9:15:
1e:4d:93:35:32:0e:31:a7:54:2b:03:0c:a5:a2:ce:
2f:5d:bd:07:4d:f1:f2:bf:a6:30:f4:9b:e9:0a:95:
d4:e6:08:c4:55:ea:52:d4:38:1c:46:f8:76:01:5f:
a0:36:15:db:1e:2c:7d:b7:db:64:74:1e:93:36:9f:
b9:dc:1c:64:c6:26:23:8b:13:a5:2e:df:6f:62:68:
19:41:14:41:b5:9f:46:f8:3b:6f:81:5c:96:c6:1c:
32:86:c8:82:9d:af:af:72:87:fe:de:98:94:08:5a:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B4:02:B3:03:72:8A:86:54:F1:97:BB:E7:DD:4C:42:E6:F2:87:6D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hLQCswNyioZU8Ze7591MQubyh20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
7a:09:28:d5:61:eb:e3:df:b1:a6:6f:fa:ff:2c:14:64:2d:bb:
be:19:fb:e3:e5:7d:57:b9:85:e4:e1:cb:c3:1c:dd:8a:f6:1a:
de:e9:94:b0:e6:a6:c2:c2:05:37:96:ca:54:a1:7f:f2:23:09:
76:e5:4f:38:e9:f2:5d:e7:ae:14:03:69:20:94:c3:61:f1:39:
6b:70:6d:65:0f:91:ab:f8:55:8f:64:a6:f7:a5:38:2c:d2:90:
25:e0:ca:a6:5e:c8:08:87:19:a3:45:fe:ac:f7:c3:bb:19:6f:
d6:11:ae:7f:ba:33:c4:6f:09:bd:9d:34:2b:d8:4e:c9:6f:f1:
4c:ee:c6:52:cd:7e:e5:0a:32:2b:db:29:97:11:a6:fe:9e:c1:
c5:d1:a1:fd:c9:cd:c5:ce:f3:b9:76:e4:66:5b:7c:8d:68:82:
1f:42:dc:a5:75:f5:43:b7:49:3a:93:a6:9f:e0:60:ac:81:0f:
4c:ba:1d:4b:90:e2:1d:a3:f3:20:8a:ec:e8:b6:52:a8:bf:f5:
8b:d5:aa:15:52:17:e1:ed:e4:99:fc:f6:01:3a:80:61:3e:93:
b3:6e:07:99:d5:2e:82:e4:91:a1:1f:37:e1:b8:5b:23:4c:b1:
8d:42:d7:b5:60:f3:c8:f4:37:4d:96:42:05:73:5c:88:40:11:
52:9a:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:52:31 2025 by rpki-client