Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/f3paRU35mmDgdqeIi2pybryiSeI.roa
File: f3paRU35mmDgdqeIi2pybryiSeI.roa (raw, json)
Hash identifier: hU3XgLvVJfMVc1Q29gOo4Y2tlEk0o2lnxKfiCdIau/A=
Subject key identifier: 7F:7A:5A:45:4D:F9:9A:60:E0:76:A7:88:8B:6A:72:6E:BC:A2:49:E2
Certificate issuer: /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial: 019715EF405EFC0C80D3DF4C2AEB340A4E98
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/f3paRU35mmDgdqeIi2pybryiSeI.roa
Signing time: Wed 28 May 2025 08:08:10 +0000
ROA not before: Wed 28 May 2025 08:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1257
IP address blocks: 2001:678:450::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:ef:40:5e:fc:0c:80:d3:df:4c:2a:eb:34:0a:4e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Validity
Not Before: May 28 08:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f7a5a454df99a60e076a7888b6a726ebca249e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:ba:fb:ce:b5:67:79:c7:1a:6b:ea:57:ef:
65:21:ad:a0:6c:a9:0a:5f:14:10:d2:07:9e:17:f6:
04:d6:0b:b6:35:44:21:d5:28:b8:34:84:1e:55:5f:
5c:da:69:50:9c:21:59:46:0a:fd:2a:e0:47:35:b4:
4b:17:0f:b6:40:04:0c:96:35:d0:07:58:38:56:de:
a7:4e:40:8f:48:55:83:83:2a:41:4c:27:44:0e:be:
00:0b:0d:da:e3:e0:24:18:61:3a:21:1f:db:58:07:
38:16:b7:e1:e4:e0:25:47:f6:61:fa:cb:0b:ab:31:
51:43:6b:6c:87:48:11:d9:73:3e:c7:9e:7e:a7:7b:
20:83:ab:68:f6:2b:45:10:1f:3d:f4:0c:fd:fd:e6:
bf:c7:29:17:9d:13:38:cf:f8:9e:48:54:fe:4f:f7:
dd:f5:36:a9:a6:43:65:dc:2c:2b:8f:54:f0:32:5a:
58:7d:ba:95:04:33:25:d7:3a:e6:c0:23:51:a6:f6:
da:86:1d:c7:fb:1d:18:34:a1:06:a3:7e:91:f5:79:
ab:60:b5:c6:66:5b:76:97:fe:f4:0d:6e:1b:4f:24:
3e:4a:f9:62:7e:0a:4c:e4:fc:78:3e:82:96:6b:81:
ca:63:9f:5c:01:df:fc:fc:8c:08:6c:ee:42:c3:64:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7A:5A:45:4D:F9:9A:60:E0:76:A7:88:8B:6A:72:6E:BC:A2:49:E2
X509v3 Authority Key Identifier:
keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/f3paRU35mmDgdqeIi2pybryiSeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:450::/48
Signature Algorithm: sha256WithRSAEncryption
2e:7d:01:8e:94:73:5e:07:62:a4:29:4e:a4:47:cd:9f:f6:18:
22:5b:12:89:f2:21:e7:b6:95:58:0e:70:25:a9:8a:55:8b:47:
65:8b:47:ea:3e:a1:ff:8a:96:18:8d:4b:89:55:1b:2b:20:50:
55:ef:20:6d:53:c1:fd:ab:98:66:b0:c1:6c:85:a1:24:91:0d:
c2:19:7a:45:90:e2:4e:3c:a3:e2:d3:5a:9f:3c:5c:36:26:39:
89:33:94:24:73:14:c8:c8:61:75:59:58:4e:b0:ff:42:11:90:
11:70:e8:dd:57:18:fe:ac:c3:9b:a4:26:b3:0d:2e:06:ec:42:
60:5b:ca:ab:3f:92:2c:25:95:62:a4:c5:c0:ef:04:7a:67:74:
98:d9:a6:54:f2:d4:87:7e:89:b6:e6:f5:4d:8d:0d:78:a6:71:
e8:d3:d6:40:7b:b0:8c:bf:99:a0:a5:51:46:79:91:3e:af:e9:
21:c7:24:72:f2:a4:1a:82:32:5d:58:35:4f:d0:e5:da:4b:35:
85:d3:7f:23:96:9e:19:c6:9a:08:47:62:92:96:fa:8c:f1:4a:
11:8e:45:98:7f:7c:a5:cf:fe:e0:f5:40:c7:26:7b:41:c6:78:
13:e0:99:b6:82:6b:4b:67:a8:be:9e:19:45:f0:3f:84:26:40:
6e:9a:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:49 2025 by rpki-client