Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa
File: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (raw, json)
Hash identifier: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=
Subject key identifier: AB:88:DC:FA:F7:54:9F:F4:8F:47:20:4E:79:3E:D8:EF:DB:50:D5:C8
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 019721B7ADA5019376F4EC419FCEEA26F5E7
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa
Signing time: Fri 30 May 2025 15:02:55 +0000
ROA not before: Fri 30 May 2025 15:02:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44812
IP address blocks: 2a11:7686::/32 maxlen: 32
2a11:8307::/32 maxlen: 32
2a12:3b44::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:b7:ad:a5:01:93:76:f4:ec:41:9f:ce:ea:26:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: May 30 15:02:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab88dcfaf7549ff48f47204e793ed8efdb50d5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:51:3d:5f:48:d7:91:67:13:be:fe:59:3e:
66:03:f0:61:e3:f4:4d:3c:5e:34:f1:98:b4:4a:b2:
f7:45:48:c4:0b:5b:7b:a9:ae:64:e7:23:b7:0a:6a:
3f:69:5c:52:6f:75:ae:6e:d7:f4:19:b1:99:e3:e2:
03:66:74:b0:71:ab:3d:a4:79:d3:b5:4d:66:56:f3:
15:17:5b:99:d7:7b:b7:75:4f:ef:83:4f:9a:8e:c2:
66:16:26:df:0e:de:6d:60:b9:92:50:3f:d6:10:3f:
8d:95:f3:12:0c:08:43:45:7e:c9:d2:78:6a:c7:67:
b6:10:6d:bd:23:40:73:5f:54:16:07:6a:bd:94:4f:
fb:a9:c4:ed:a8:4b:79:3d:37:0e:1b:bc:94:9b:17:
4b:ac:28:4c:20:ba:e8:f8:27:73:0f:e1:fe:0c:63:
19:f2:36:c7:5f:25:09:17:67:43:31:a0:57:db:a1:
24:f8:45:1c:1e:74:ed:3f:1a:d3:a4:ee:12:f8:41:
ce:15:d6:92:23:6b:a5:cb:3f:2f:73:01:51:af:8b:
e7:24:c9:5b:f9:57:59:4d:8b:50:69:89:a5:21:f6:
c1:36:3b:9c:f8:35:ca:23:48:b0:59:43:ea:27:1d:
d3:23:f4:46:5a:0d:d8:19:72:4e:ad:99:24:d1:cc:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:88:DC:FA:F7:54:9F:F4:8F:47:20:4E:79:3E:D8:EF:DB:50:D5:C8
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7686::/32
2a11:8307::/32
2a12:3b44::/32
Signature Algorithm: sha256WithRSAEncryption
14:00:61:a7:ea:3d:1e:45:15:72:63:0b:4a:46:b8:f7:c0:5e:
e2:06:52:97:7c:2c:5b:3f:a0:37:db:f8:67:e8:d6:64:4e:e8:
d8:06:e4:ac:af:fa:97:67:23:95:5a:b8:a8:13:07:2a:01:f2:
51:82:15:ea:ca:77:34:e9:b4:26:cc:66:6d:69:64:21:6d:c7:
27:45:8f:18:f6:59:3f:05:bf:95:2d:88:42:62:d1:50:bd:be:
91:b8:5e:b2:92:16:4d:e1:9c:86:f1:f7:78:14:35:50:6d:55:
a5:b5:6d:08:35:7a:ba:47:48:a9:31:25:14:3b:bf:ae:66:1f:
69:bd:63:1c:84:67:86:5a:08:b7:1f:6d:ff:63:d0:b6:32:90:
f1:94:7f:b4:09:9a:c9:f7:49:a6:2b:87:4a:d2:7f:f8:27:4f:
c5:6a:3a:9f:eb:e2:e6:1b:34:c1:01:eb:cd:aa:56:1c:b2:fa:
92:76:d2:d0:9b:b3:35:1e:4d:ce:74:c6:95:18:da:27:a1:55:
5a:cc:93:0e:62:e3:d6:dc:35:90:64:fa:0f:16:d3:62:13:86:
6f:2a:e9:23:7f:b3:90:04:70:8f:31:41:cc:07:c2:8b:7b:27:
ac:c5:7d:7b:5c:7d:c7:ad:4d:eb:3f:46:60:c6:90:7e:46:0a:
25:42:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:11:27 2025 by rpki-client