Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/J4PfcauAqvFasW-FfVuoKJ7TuU8.roa
File: J4PfcauAqvFasW-FfVuoKJ7TuU8.roa (raw, json)
Hash identifier: zla8ahPIx06nw4k0oxQ6KprLhb2Hc8/ngi13a+bB4mY=
Subject key identifier: 27:83:DF:71:AB:80:AA:F1:5A:B1:6F:85:7D:5B:A8:28:9E:D3:B9:4F
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0196CE0E10C0C17F6195B78BB41CFD02F303
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/J4PfcauAqvFasW-FfVuoKJ7TuU8.roa
Signing time: Wed 14 May 2025 09:09:10 +0000
ROA not before: Wed 14 May 2025 09:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41171
IP address blocks: 2a0f:63c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:0e:10:c0:c1:7f:61:95:b7:8b:b4:1c:fd:02:f3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: May 14 09:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2783df71ab80aaf15ab16f857d5ba8289ed3b94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:a3:a3:5e:aa:b7:33:68:16:e5:79:de:83:
a4:84:bb:96:05:78:47:be:b1:ee:d0:e8:00:d6:5c:
78:35:9a:5a:44:4a:8c:bf:6d:c6:73:97:6a:7e:61:
10:4d:f7:86:e0:7a:88:34:04:d5:15:51:a8:4f:59:
2e:44:f7:47:35:e8:35:57:cc:25:ec:f7:ab:17:37:
d3:f0:02:d6:72:ce:b9:b4:d6:81:e1:5f:c8:70:99:
14:b9:c7:f8:70:09:9d:f0:2b:b9:95:57:35:77:e3:
97:f0:00:70:a9:bf:a2:0c:d1:4a:ca:84:52:00:19:
12:ca:55:51:a4:bc:ba:f3:cc:53:cc:26:27:81:b4:
12:55:b1:78:cf:cf:e9:96:99:86:27:12:b5:22:ac:
04:6f:2c:cc:5b:06:f3:57:94:5a:1f:23:d1:e3:2a:
f5:a9:71:91:19:c8:6b:11:ab:a6:d4:a6:08:5a:04:
6f:2c:0c:5f:5c:09:29:9f:a4:8f:85:9c:db:2a:c5:
84:89:0b:42:39:85:ad:f9:ba:34:56:f2:40:0e:76:
f4:7b:24:35:32:a0:4f:e7:31:54:63:fd:35:e1:4f:
2a:fc:6b:82:56:4b:c9:fb:80:20:c6:bb:87:be:bd:
b5:96:21:96:b5:a9:7c:54:60:de:85:e7:2e:83:46:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:DF:71:AB:80:AA:F1:5A:B1:6F:85:7D:5B:A8:28:9E:D3:B9:4F
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/J4PfcauAqvFasW-FfVuoKJ7TuU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:63c1::/32
Signature Algorithm: sha256WithRSAEncryption
b7:2d:67:5d:03:5a:3f:f4:ef:11:67:91:d4:a5:f3:4f:00:e4:
56:a2:a4:d9:65:43:d2:5a:f0:bf:76:af:8b:9a:ea:1c:32:a2:
5e:e3:e7:f6:d6:94:de:a5:30:74:22:37:4d:f8:90:57:6d:be:
91:ff:a1:e9:f4:60:7a:ce:97:bf:7a:69:26:b4:83:5c:4a:16:
47:ec:15:60:ee:d1:f8:51:dd:8e:36:fb:69:0c:dd:73:8a:c6:
5d:12:1d:e8:d8:3d:c3:eb:67:bb:df:5d:d8:88:02:f0:de:80:
24:01:fa:9a:f1:9a:df:fa:6d:06:2d:ab:5d:6d:57:96:f3:a8:
46:f7:82:c5:27:1e:7f:d8:6d:34:f6:32:cc:10:18:65:d5:89:
34:ab:8d:2e:b5:13:0c:cb:6b:1a:94:fd:e6:6d:82:3a:6b:39:
2b:ff:ca:23:58:cb:54:7b:8f:5b:ef:39:4c:e9:c6:80:bd:f7:
ad:b4:1b:45:5b:5b:aa:ad:23:fe:5a:56:e4:7b:3b:e2:25:ab:
76:a7:a2:a7:2b:b0:d4:f0:59:37:d5:7e:20:18:4b:75:26:37:
6f:16:28:f2:c5:1c:55:84:ca:1d:ff:4e:b0:76:8e:15:1e:41:
37:37:e2:71:7d:68:8b:59:22:64:0c:4b:53:3e:e7:e2:a3:77:
df:8a:8e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:08:08 2025 by rpki-client