Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-geA4Ico5yq3rhO_6TQ1HaKzBlI.roa
File: 1-geA4Ico5yq3rhO_6TQ1HaKzBlI.roa (raw, json)
Hash identifier: Ydoq+MZ0ejNsczXhvn6M9rs3O3UgHuzMqFCeyMicaFQ=
Subject key identifier: FA:07:80:E0:87:28:E7:2A:B7:AE:13:BF:E9:34:35:1D:A2:B3:06:52
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019713F1FCFC8A45E922A061E9256E70B566
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-geA4Ico5yq3rhO_6TQ1HaKzBlI.roa
Signing time: Tue 27 May 2025 22:51:55 +0000
ROA not before: Tue 27 May 2025 22:51:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216084
IP address blocks: 2a0e:97c0:ee0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:13:f1:fc:fc:8a:45:e9:22:a0:61:e9:25:6e:70:b5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 27 22:51:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa0780e08728e72ab7ae13bfe934351da2b30652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:51:00:56:f9:04:f7:6c:53:16:75:ea:e5:b4:
05:3d:e2:ce:32:cd:3d:fd:15:ee:a1:91:9e:e7:61:
8a:63:c2:5d:11:be:70:11:05:58:2b:61:a1:cb:c0:
b6:dd:d9:53:80:ba:27:3f:df:84:9f:d9:f5:4c:3a:
e7:d2:7b:e6:2b:f4:d9:f3:6d:94:c5:8f:bb:98:d7:
77:5a:5d:51:0e:13:16:bd:50:c8:2f:57:45:d7:c6:
12:30:ed:15:33:f6:ab:d3:bc:d3:98:ed:5a:3b:92:
c3:63:92:61:e2:90:53:ca:a7:f5:d3:43:9c:2d:36:
ae:d6:97:76:ac:ef:60:3e:0c:90:06:b8:8e:83:0b:
c5:15:b7:12:6d:bd:05:ff:07:87:81:6a:01:0a:f6:
84:9d:95:a4:5d:12:30:7e:bf:24:d9:dc:6b:7d:2f:
c3:ab:2d:22:f1:3b:1c:e6:3a:ad:dd:d5:61:4e:0a:
a8:06:33:75:80:34:2a:61:bc:40:51:59:44:69:c9:
4c:54:0e:71:b0:56:ff:19:8a:87:1c:a9:8a:6c:a7:
98:53:8f:a2:8a:5b:db:6f:aa:48:f1:0c:b9:35:99:
28:bc:61:06:74:08:fe:76:3a:2c:8d:53:ae:7d:84:
78:03:a1:01:63:2e:77:0c:30:50:6b:00:0e:27:53:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:07:80:E0:87:28:E7:2A:B7:AE:13:BF:E9:34:35:1D:A2:B3:06:52
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-geA4Ico5yq3rhO_6TQ1HaKzBlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:ee0::/44
Signature Algorithm: sha256WithRSAEncryption
24:e0:2b:71:26:c1:a3:f9:bf:da:aa:f6:fb:f3:b3:23:55:66:
3d:69:f5:48:12:c4:c7:30:d3:cb:0e:71:1c:48:71:7f:bb:1a:
d0:83:17:ca:44:c6:39:18:e0:68:8c:36:78:82:4b:3a:cb:9a:
c3:e7:bc:d5:ce:49:4b:45:4b:bd:06:7e:1d:f2:6a:f3:94:93:
38:ce:4c:e3:ac:c5:6b:a3:d3:e8:75:8a:34:f0:2f:79:15:cd:
ab:b4:ba:8f:b0:08:ba:02:a0:48:c1:0e:02:2b:de:3d:d0:19:
c1:05:25:f5:6c:ae:10:37:31:5b:95:d9:63:cd:22:bd:74:17:
17:7d:79:9a:5b:93:d2:10:bf:53:ae:aa:80:32:a8:74:de:9f:
80:b7:f8:ac:a4:08:3e:3c:9b:5d:a1:4c:53:f5:15:c2:90:e5:
da:ed:11:b1:f6:2f:00:9f:47:19:62:30:71:cf:8f:cf:21:5f:
41:38:c7:74:08:95:07:e3:b3:d9:b9:3f:e6:58:a2:72:d2:d7:
cd:dc:89:6f:23:e8:cc:ca:ac:e5:14:1d:86:b6:0c:84:f9:1e:
fe:d9:d9:1d:38:26:3d:ae:f9:49:56:16:02:c6:88:fc:ea:f5:
b5:7a:f9:39:08:76:3b:1b:80:d6:68:23:44:f7:ff:59:7a:35:
6f:70:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:50:34 2025 by rpki-client