Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rQK_KANfwuiKjTkERBOME7pl0E4.roa
File: rQK_KANfwuiKjTkERBOME7pl0E4.roa (raw, json)
Hash identifier: 3nDjgarbpb7vkO3NpMfFO9Ks5kBd77NK/+R7J+HO4Y0=
Subject key identifier: AD:02:BF:28:03:5F:C2:E8:8A:8D:39:04:44:13:8C:13:BA:65:D0:4E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01972F81F59BFCA76831D0C88BDD9FDCC1FD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rQK_KANfwuiKjTkERBOME7pl0E4.roa
Signing time: Mon 02 Jun 2025 07:18:55 +0000
ROA not before: Mon 02 Jun 2025 07:18:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 2a06:de01:70::/44 maxlen: 48
2a10:ccc2:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:81:f5:9b:fc:a7:68:31:d0:c8:8b:dd:9f:dc:c1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 2 07:18:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad02bf28035fc2e88a8d390444138c13ba65d04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a2:5d:2a:e3:a2:2e:42:b9:58:ef:6e:b9:a0:
e9:12:da:43:8e:21:35:40:61:6b:dc:6f:12:7a:35:
0e:a8:31:63:74:b2:04:3b:78:a3:09:d8:0f:b1:8e:
33:09:9d:33:ce:4e:5b:3a:1d:af:e4:62:4a:59:31:
f4:2f:e1:b4:9f:3d:eb:f2:53:d6:ea:5c:8e:af:bd:
25:93:90:fe:94:82:6c:b9:bd:a1:68:1c:ee:be:91:
41:44:03:8c:29:3d:16:b3:33:4d:3c:ca:fc:8b:18:
12:66:31:3c:5e:32:3a:99:07:a2:be:2c:be:38:4d:
3f:d1:02:01:51:9c:b8:f5:b6:69:04:99:66:e0:3f:
12:50:9c:da:df:a8:12:64:d5:f5:78:ed:8d:41:35:
bf:ad:e4:13:b5:6a:59:b7:39:63:89:84:07:ac:8d:
00:00:b6:dd:86:4e:21:53:b8:97:43:69:da:6c:31:
36:01:e9:13:6c:07:3a:8d:da:e1:3a:99:b1:3b:5c:
06:cc:3b:05:a1:93:bc:83:26:a1:75:61:71:50:3e:
e9:41:25:1b:c9:bd:b8:e1:82:8b:eb:b5:70:fd:31:
8a:92:28:5a:32:92:27:fc:e8:31:f0:ab:65:b1:e3:
9e:fc:55:c8:55:24:e7:1e:d6:9a:22:5a:2a:bb:3b:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:BF:28:03:5F:C2:E8:8A:8D:39:04:44:13:8C:13:BA:65:D0:4E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rQK_KANfwuiKjTkERBOME7pl0E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:70::/44
2a10:ccc2:10::/44
Signature Algorithm: sha256WithRSAEncryption
ba:8d:ad:2e:8d:70:f5:bd:90:5c:35:5c:e4:17:77:6e:29:ec:
ab:02:9d:dd:4d:ef:6a:cb:6c:ce:f4:1e:13:e5:77:04:5a:be:
75:a8:1c:40:92:8b:59:ba:9e:47:79:5d:4e:31:09:02:a9:b5:
fc:e7:67:c7:cc:af:3f:2a:a1:2f:00:b5:1c:0b:3a:c9:38:28:
4e:ef:c7:ee:88:56:5f:5b:4d:3b:af:88:33:24:af:5b:2f:a6:
64:67:55:22:25:80:14:47:9f:71:86:ff:ac:47:52:e8:f0:1f:
bd:d2:9a:ad:6d:5b:0b:e2:b0:af:61:bf:f6:a1:56:56:f1:3f:
77:36:21:3a:92:7e:f9:62:09:3a:12:19:e1:e2:96:5e:12:15:
3a:89:fd:a6:93:e1:92:a5:ea:dd:7f:05:eb:9e:54:56:68:b2:
70:8c:88:25:8c:63:6b:01:b1:3e:1f:50:c9:7c:db:de:95:9d:
2c:68:bf:d4:38:55:bd:b5:05:d8:7d:85:44:11:1b:10:b2:97:
e7:64:45:15:c0:5f:73:3b:92:ca:7a:f9:48:e8:c2:e5:d9:9d:
1e:18:30:00:89:13:63:72:05:76:c4:26:1d:ba:a0:f4:e1:69:
8e:4b:5d:00:e0:1d:24:e5:e6:f8:77:bf:4f:e3:74:ec:dc:76:
82:95:af:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:43:11 2025 by rpki-client