Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ldTPVx6k91FArciXh71IhRdLNG0.roa
File: ldTPVx6k91FArciXh71IhRdLNG0.roa (raw, json)
Hash identifier: Ver9kSk8OmgvlZh1wmwV5sOwlE1cNbHBsZii6s1+I0k=
Subject key identifier: 95:D4:CF:57:1E:A4:F7:51:40:AD:C8:97:87:BD:48:85:17:4B:34:6D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0197091B04ECCE8B8A3AB6CF6AF18C468742
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ldTPVx6k91FArciXh71IhRdLNG0.roa
Signing time: Sun 25 May 2025 20:20:55 +0000
ROA not before: Sun 25 May 2025 20:20:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206340
IP address blocks: 2a13:b9c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:09:1b:04:ec:ce:8b:8a:3a:b6:cf:6a:f1:8c:46:87:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 25 20:20:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95d4cf571ea4f75140adc89787bd4885174b346d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:a6:35:ba:5f:c0:fb:ba:fc:3b:5c:24:61:
84:73:42:f5:98:5f:8a:a2:26:db:01:5f:69:c7:bf:
1d:00:ea:bc:9b:f7:a8:23:bd:7f:be:dc:61:b4:12:
71:49:ef:11:83:d7:7d:fa:61:aa:25:30:86:28:f4:
2d:51:07:5d:55:98:a3:02:b0:eb:8e:14:b7:72:04:
d1:07:31:a8:f5:80:43:79:58:82:68:2e:b2:62:4a:
08:94:e2:48:5c:eb:9a:76:61:ab:43:19:97:38:cf:
41:23:31:61:e1:7e:39:b7:f8:05:18:85:7e:68:79:
2f:c8:60:95:54:02:50:56:8d:af:8c:a0:cc:77:f0:
32:85:e6:8c:26:0d:a1:50:f6:94:5c:2c:d8:2d:b7:
31:cb:45:03:a6:a5:ea:63:8e:68:3d:2d:86:bd:08:
3d:07:06:3b:30:05:fb:a2:38:ac:ad:10:24:22:7d:
14:f3:6b:83:a3:df:94:d1:1a:74:53:4b:33:fb:15:
3a:15:59:03:36:ae:eb:b5:a9:17:70:d2:84:b3:8b:
95:84:58:2f:60:4e:cb:90:33:8f:15:1e:2f:fc:d2:
d4:60:71:8e:c8:fd:5d:14:34:8b:6b:1c:fc:92:75:
dd:da:f9:1d:74:a5:79:31:db:5d:33:e0:4a:62:b1:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D4:CF:57:1E:A4:F7:51:40:AD:C8:97:87:BD:48:85:17:4B:34:6D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ldTPVx6k91FArciXh71IhRdLNG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b9c1::/32
Signature Algorithm: sha256WithRSAEncryption
62:99:23:8a:72:87:8b:a2:f1:ea:02:e9:9f:4b:8f:b5:2c:4c:
28:39:48:f0:9f:9e:06:00:92:7f:eb:3d:25:a2:95:c4:1f:06:
e0:be:23:37:6c:e5:02:42:4a:78:f5:de:1f:58:78:1d:41:e3:
9d:16:bb:bf:ae:c3:66:ad:83:24:85:26:7c:f2:65:5d:bb:00:
b8:94:13:c3:52:5c:26:9a:78:fd:c4:92:e2:a7:12:3a:1f:6d:
3e:76:0f:a3:63:5c:84:5f:80:4b:c8:47:68:2a:c9:5f:c1:b3:
f5:78:8a:ad:6c:9d:e9:84:89:84:55:e4:d0:8c:7a:d8:6c:fa:
79:a1:9b:7a:ad:66:7f:e4:6d:44:ed:b8:82:b8:0e:9a:35:bb:
15:ed:82:ef:b3:cf:60:a2:b4:72:c2:e6:2a:3d:ae:4d:c4:4d:
ab:a9:86:84:20:5f:4a:d6:be:ad:b6:9b:09:de:69:f6:8b:16:
d2:8c:bc:70:66:d7:b6:25:26:35:d8:e2:d5:8e:b4:62:60:46:
ee:3d:6b:a0:88:61:ba:00:24:5c:33:0e:cf:38:68:44:13:28:
2e:00:1f:30:53:97:ce:8d:37:1b:79:b7:03:a6:42:21:22:ae:
1b:f4:09:dc:18:07:ef:c2:61:4a:cb:f3:bf:bc:ee:3c:22:8a:
3e:66:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:13:51 2025 by rpki-client