Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qJxoahfG9o8HBO3tzqT6BE-apQk.roa
File: qJxoahfG9o8HBO3tzqT6BE-apQk.roa (raw, json)
Hash identifier: mJ61LQQssDI6TLqn6mN/GoQHRpSWyfCPnr42jLSMw28=
Subject key identifier: A8:9C:68:6A:17:C6:F6:8F:07:04:ED:ED:CE:A4:FA:04:4F:9A:A5:09
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01971127DF5AA7681C1F2C2E34035D64B6A5
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qJxoahfG9o8HBO3tzqT6BE-apQk.roa
Signing time: Tue 27 May 2025 09:51:55 +0000
ROA not before: Tue 27 May 2025 09:51:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49443
IP address blocks: 2a06:5fc6::/32 maxlen: 32
2a13:bb46::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:27:df:5a:a7:68:1c:1f:2c:2e:34:03:5d:64:b6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 27 09:51:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a89c686a17c6f68f0704ededcea4fa044f9aa509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:6e:9a:17:98:43:0b:a4:65:da:d3:8b:6a:
14:9a:21:84:95:43:9c:64:9f:83:96:cd:d2:42:41:
58:38:40:bf:c8:53:91:03:72:0a:af:0e:27:81:96:
ef:d1:89:fe:d5:2a:7e:b6:4b:19:33:22:d4:64:3a:
c7:6f:51:de:4e:e9:cb:63:86:45:c6:9f:64:7b:c3:
76:92:b8:86:8a:d2:b2:c4:04:89:f8:1d:b4:af:09:
06:84:02:e9:8e:d2:6d:f3:03:2c:da:28:69:6d:b2:
29:52:c2:ea:a5:0c:91:0c:27:56:b8:da:a1:73:84:
dc:f5:d1:24:7e:3e:c3:72:74:f5:44:4c:08:87:b0:
98:a6:ef:2e:9b:bb:d1:21:30:8c:37:72:cb:96:41:
75:d3:61:6d:48:ec:4f:4f:78:da:5c:83:cd:51:ae:
8a:4d:27:a8:85:0a:e4:be:30:6b:57:a4:d1:fa:2c:
22:7a:eb:cf:55:83:3d:01:8b:96:79:9e:49:cf:43:
4d:58:a0:88:a0:be:05:35:cd:9a:ca:f9:e4:7c:f1:
1d:63:b3:b3:35:ce:4c:34:7f:86:68:60:f4:86:04:
88:f6:50:89:f3:c8:e3:10:73:17:fe:80:e8:63:e3:
f1:00:17:9b:bb:ee:8d:e0:67:8a:05:45:6b:4e:0a:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9C:68:6A:17:C6:F6:8F:07:04:ED:ED:CE:A4:FA:04:4F:9A:A5:09
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qJxoahfG9o8HBO3tzqT6BE-apQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc6::/32
2a13:bb46::/32
Signature Algorithm: sha256WithRSAEncryption
98:b6:bf:6c:ab:6d:a9:ea:04:d7:c0:63:4f:9a:3e:f6:a2:83:
74:46:62:c0:8d:45:71:b5:cd:70:e1:b2:4a:ab:0e:9e:92:3a:
a7:33:4b:21:2c:84:a6:5d:fb:cd:9e:16:79:83:72:ed:0a:6d:
49:4b:18:b4:7a:3a:bf:60:d9:76:02:77:2d:eb:86:93:2e:38:
71:e1:b0:e5:96:6c:e5:5a:ec:5b:e8:fe:61:10:3f:18:76:e2:
60:51:16:d1:d1:91:c1:b8:a8:63:87:1c:94:8c:54:a2:e0:b2:
ce:1a:de:06:35:ce:99:51:67:a1:bd:ce:b8:ac:26:53:d6:b8:
c9:75:a2:19:1b:c8:29:f9:02:a2:e6:ba:1b:84:5a:2a:da:85:
f7:d3:78:ea:e1:1f:7c:45:2f:8f:73:76:c5:6c:08:7b:53:f0:
83:c0:d6:08:52:6e:48:01:c3:6d:dd:f4:ec:17:d2:ce:b1:a1:
a1:f4:72:74:99:dc:81:24:1e:da:7e:16:ea:b7:83:dc:55:c6:
19:69:d6:b4:07:72:8d:71:25:75:15:46:3c:2d:74:9a:98:3e:
4a:99:69:03:d2:0a:03:df:67:28:96:57:6c:6b:0d:b0:cb:c4:
65:5e:91:ce:ba:58:57:0b:8c:fc:da:78:b9:e5:84:01:80:5f:
c0:f3:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:55 2025 by rpki-client