Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/42941HRE4jl-hthDEY4GrX-_j84.roa
File: 42941HRE4jl-hthDEY4GrX-_j84.roa (raw, json)
Hash identifier: pIiJxp+wxLjTRu7T8wIE/B6cPWjtNQOFMuAOHx67Hnc=
Subject key identifier: E3:6F:78:D4:74:44:E2:39:7E:86:D8:43:11:8E:06:AD:7F:BF:8F:CE
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0196FC1CE857823EC26CB8DB44F5636426C4
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/42941HRE4jl-hthDEY4GrX-_j84.roa
Signing time: Fri 23 May 2025 07:47:54 +0000
ROA not before: Fri 23 May 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 2a12:bec4:150::/44 maxlen: 44
2a12:bec4:1460::/44 maxlen: 44
2a12:bec4:1a70::/44 maxlen: 44
2a12:bec4:1a80::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 15:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:1c:e8:57:82:3e:c2:6c:b8:db:44:f5:63:64:26:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 23 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e36f78d47444e2397e86d843118e06ad7fbf8fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:9c:2a:ce:5e:47:98:17:b2:c2:eb:eb:7c:
31:3a:b1:ec:cd:8e:81:3e:07:eb:71:f6:dd:f6:7d:
22:4c:ae:85:0b:8b:be:8f:fe:aa:fa:d0:8f:f1:d4:
ec:02:ee:fd:6a:e2:85:d2:be:03:c0:6b:b4:24:c7:
a1:b0:21:15:04:5b:a8:be:b4:b7:b8:e3:04:19:39:
04:fd:26:66:89:9e:dd:1d:e1:76:bb:4f:2c:e2:bf:
f0:19:5b:af:32:ec:b9:27:49:05:c3:2b:c7:8c:b6:
c9:16:b5:d5:a8:dc:de:b1:d7:c7:d7:48:ec:30:92:
19:b3:4d:c2:e3:c4:61:0f:c6:59:1c:14:b2:35:3b:
8f:a0:2b:40:93:f0:08:4c:90:dc:49:c0:85:4d:5f:
84:64:31:94:e5:35:42:99:97:e5:8f:12:dd:a1:b3:
75:51:da:2b:31:e0:5b:4c:ed:ba:63:5b:cf:e9:c5:
91:dd:6e:71:53:8a:fa:81:05:4b:d3:5c:39:99:66:
30:12:5d:f9:a9:e0:24:0d:f5:57:2c:d3:68:2c:4c:
05:87:d6:e1:44:42:d5:7b:92:97:66:d5:fa:48:3d:
fe:3c:4e:d7:d5:7c:a2:07:14:2d:c3:8e:d3:b0:91:
26:36:ce:2e:8e:45:cf:c3:77:4d:fc:88:9d:d3:28:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6F:78:D4:74:44:E2:39:7E:86:D8:43:11:8E:06:AD:7F:BF:8F:CE
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/42941HRE4jl-hthDEY4GrX-_j84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:150::/44
2a12:bec4:1460::/44
2a12:bec4:1a70::-2a12:bec4:1a8f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4d:62:79:0c:40:34:bc:db:6f:93:f9:a3:7a:c4:ea:c6:00:ed:
b5:be:5f:c0:79:97:55:da:9a:a0:2b:ce:15:fb:cc:b3:d9:ce:
7b:c6:4a:8e:46:ad:43:be:35:c1:1d:c0:d7:a1:b6:9e:4f:4b:
6b:e6:ce:2d:a4:0c:e5:20:8c:83:41:ba:69:65:6b:76:32:5b:
d7:09:bf:f5:31:a9:c2:6e:f5:73:65:63:70:b8:cb:a7:79:82:
a0:63:57:a2:19:80:03:4d:ac:ca:af:04:06:fa:67:98:5e:b6:
58:68:52:e3:ec:5c:cf:4d:e4:7b:f2:02:12:62:2b:54:30:36:
ef:52:ac:7e:ea:20:c0:a3:17:8c:ec:ca:81:05:a9:47:31:a1:
9a:41:d5:10:e8:e8:62:b0:c7:ff:4b:0c:b6:b5:e8:dc:05:ed:
8d:e0:e7:66:43:68:17:c7:fd:be:bf:c5:02:0b:78:c0:44:d4:
36:3f:2a:fe:46:c1:66:85:ee:53:63:5a:83:7d:12:15:3b:af:
13:81:2c:1e:7a:30:c9:5d:d8:cf:31:2f:9f:47:ab:99:be:97:
cb:13:db:a3:cc:6a:b8:c1:ff:af:c3:ee:ea:32:2f:d8:ce:74:
5d:7d:82:0f:d9:41:b5:d9:76:78:5a:15:51:54:3b:0d:79:32:
15:9d:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:17:21 2025 by rpki-client