Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/N_XMfZR0qwYiTnGGPBVzX1-VbCc.roa
File: N_XMfZR0qwYiTnGGPBVzX1-VbCc.roa (raw, json)
Hash identifier: ouuNsheVqIbqR9RzkwdJ4+ZIgUll9Z5umbhEXmymXG0=
Subject key identifier: 37:F5:CC:7D:94:74:AB:06:22:4E:71:86:3C:15:73:5F:5F:95:6C:27
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01974B859F951A9B0872EE0F7EEAAEF0F548
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/N_XMfZR0qwYiTnGGPBVzX1-VbCc.roa
Signing time: Sat 07 Jun 2025 17:52:17 +0000
ROA not before: Sat 07 Jun 2025 17:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204916
IP address blocks: 2a11:7880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:85:9f:95:1a:9b:08:72:ee:0f:7e:ea:ae:f0:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Jun 7 17:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37f5cc7d9474ab06224e71863c15735f5f956c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:2d:ab:ae:f7:5e:1e:cd:23:c0:be:48:b5:
7a:a8:fd:fc:24:ae:f8:b9:7a:d9:90:a1:66:d7:f1:
47:7e:87:72:6f:f9:1b:6a:3f:35:7c:e4:aa:83:ca:
1b:f0:59:f1:f8:a7:a0:0e:8b:ed:5c:b4:ef:9a:06:
c8:7b:29:4c:1b:60:a8:f9:78:fc:bf:85:d3:5f:cc:
23:84:d5:aa:4f:c0:18:b2:72:45:7e:03:b9:41:b9:
f6:cb:fb:20:38:04:f7:6c:29:0c:43:30:a5:4a:8b:
dc:82:17:ef:b8:82:30:92:f9:dc:6e:86:d1:01:0f:
ac:64:91:45:84:30:8c:85:29:b3:2a:5e:99:76:b6:
f9:2b:22:70:cd:3b:54:a3:ea:92:c2:65:af:09:95:
29:b0:3b:77:4d:6d:93:13:38:80:a0:1d:1c:b4:74:
3c:91:cd:b8:9b:d7:75:e3:f3:5f:70:69:d8:99:a5:
f4:2e:9d:9b:b5:7d:1f:76:d4:b5:db:1b:8a:19:2c:
09:1e:3d:a1:99:dd:dc:17:60:41:58:3f:77:e1:aa:
b2:61:45:f7:37:a4:aa:d2:0b:fb:0a:7a:49:24:56:
f0:8a:40:0f:00:cc:d0:fd:f4:a9:f3:e2:a9:eb:de:
77:57:58:0c:6b:3c:a7:d3:dc:8e:b9:d6:43:7f:a5:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F5:CC:7D:94:74:AB:06:22:4E:71:86:3C:15:73:5F:5F:95:6C:27
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/N_XMfZR0qwYiTnGGPBVzX1-VbCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7880::/32
Signature Algorithm: sha256WithRSAEncryption
e5:32:dc:86:95:fe:af:df:a9:f7:6f:41:8c:74:c3:cd:70:1c:
d8:56:8c:6d:ce:d9:27:e1:25:14:68:e0:2b:a1:c7:dd:75:a5:
55:34:3e:39:fc:fc:71:1c:19:76:5f:27:83:83:d4:f9:40:5c:
f2:a1:d1:1e:c7:ad:a0:1b:6d:75:3b:67:b7:97:dd:81:1c:75:
17:e9:b5:12:c1:43:c7:4a:d9:ce:9b:d2:a5:d2:d2:bb:d2:da:
10:57:c8:2b:92:d3:ed:61:c7:43:83:42:93:0f:dc:6b:81:e4:
50:96:62:e8:0d:7d:9c:65:a6:c6:96:2b:a3:e0:cb:6f:71:08:
f8:04:b7:56:f7:08:ba:d8:b1:7d:61:c8:45:96:ce:15:36:9a:
b4:36:c1:c9:20:26:54:26:a8:d5:07:8c:b0:27:89:63:46:20:
88:30:76:d3:c0:6e:86:7a:00:8b:ea:66:2f:20:f8:ea:81:10:
5e:bf:95:9d:2d:b3:34:0a:1c:b2:a2:af:f1:11:79:b7:1f:0b:
ea:60:51:df:04:8d:61:e4:a4:c0:4d:4c:0b:53:d9:82:e2:37:
2f:31:67:37:c4:c6:67:cf:b8:57:62:05:33:a4:a6:ff:5d:d9:
09:38:e7:63:61:9c:00:93:f0:cb:4f:dc:47:ef:17:b5:20:65:
1d:48:51:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:47:13 2025 by rpki-client