Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/iFxstO-WVnD9IG0JkOz6WUiqBMg.roa
File: iFxstO-WVnD9IG0JkOz6WUiqBMg.roa (raw, json)
Hash identifier: FRc4wj/+X9Ympx5U2FPeqkwg7OAtyTRiyOsZKKC0/FQ=
Subject key identifier: 88:5C:6C:B4:EF:96:56:70:FD:20:6D:09:90:EC:FA:59:48:AA:04:C8
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0197371F754E85209BC0A76D238F1DC6A165
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/iFxstO-WVnD9IG0JkOz6WUiqBMg.roa
Signing time: Tue 03 Jun 2025 18:48:17 +0000
ROA not before: Tue 03 Jun 2025 18:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202511
IP address blocks: 2a14:6ac5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:1f:75:4e:85:20:9b:c0:a7:6d:23:8f:1d:c6:a1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 3 18:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=885c6cb4ef965670fd206d0990ecfa5948aa04c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:09:e0:85:3f:37:81:b8:87:4c:38:69:a2:
44:37:ac:de:e3:c6:41:f9:64:da:09:33:27:83:3c:
f1:0a:c9:c4:83:e4:f2:f8:c7:cd:ad:40:b0:36:51:
8d:18:16:9b:7d:f4:26:6c:f5:a0:32:61:90:7d:7b:
95:13:d4:fa:cd:18:3f:77:eb:36:d9:68:9e:b1:9a:
15:a6:16:1a:1e:5b:35:ad:e9:cc:11:95:fd:aa:55:
21:17:ec:f6:87:c9:6c:2f:19:0c:ab:71:34:ea:cd:
8b:e2:01:ac:77:f9:46:72:44:a3:5f:9d:0f:8c:f9:
c5:cb:84:49:a5:65:5e:62:b9:f6:c3:c9:53:31:02:
ef:73:59:85:fc:7c:f1:ae:f4:7b:5b:61:8a:51:c7:
97:40:36:52:56:48:35:9d:7a:65:9d:4f:84:12:66:
35:1e:50:c5:13:e4:bc:bb:5b:87:3d:d6:34:fd:dc:
49:6d:25:20:27:51:ee:96:0d:68:34:d1:c3:fb:3b:
84:3d:3f:1b:ab:fd:f6:bf:93:55:45:ea:3f:80:da:
63:2d:a8:82:1b:a1:55:cf:61:b5:c0:b0:09:5d:8a:
e7:1c:56:bc:e7:e8:86:d2:c3:bf:4b:5c:af:b2:29:
d8:8b:87:5c:f4:c3:9c:2d:60:d3:17:39:bf:a6:69:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:6C:B4:EF:96:56:70:FD:20:6D:09:90:EC:FA:59:48:AA:04:C8
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/iFxstO-WVnD9IG0JkOz6WUiqBMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6ac5::/32
Signature Algorithm: sha256WithRSAEncryption
a3:9e:66:c5:dc:2c:e5:1a:32:63:dc:30:35:ae:3c:fe:2f:4f:
a7:d7:98:99:b4:9c:bf:ff:5b:22:ed:88:a3:27:46:ed:0f:05:
a1:b4:ce:fe:86:6e:3f:6a:19:a2:2d:88:50:0e:69:e1:d0:6a:
c1:85:89:26:89:24:c7:b2:e9:77:86:b9:e7:f9:34:8e:d8:04:
df:1d:c7:1a:ac:5e:55:83:03:6b:b4:da:e7:da:10:a8:f5:c4:
a5:7d:c0:7e:16:52:42:f3:db:49:6b:a8:81:e8:05:c5:55:89:
f6:ea:ed:8d:a5:a7:c0:08:2c:d0:19:1b:7e:73:32:af:d6:57:
e3:bf:d7:92:43:e2:27:45:e3:00:8e:2f:cb:3b:07:8e:42:5d:
11:43:9a:d3:fe:42:dd:f6:4f:54:f1:93:59:1d:64:ed:52:13:
72:45:38:81:98:67:a1:a0:c5:dd:e3:6b:08:5e:8d:16:c3:7c:
0c:84:2b:1a:9f:63:28:d0:16:27:1d:48:b7:9b:3b:6f:83:34:
af:ab:22:c1:5d:38:fd:c2:45:9e:c4:23:c5:44:2d:a0:e0:ed:
d0:38:94:28:88:9d:bf:30:b8:3e:31:0b:f2:6b:f1:b8:38:ec:
be:01:a2:45:9f:ff:39:b0:82:22:87:00:0b:0e:3e:be:d7:87:
86:81:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:15:18 2025 by rpki-client