Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/fhDfnd1sxahgjYhOPaMH-zbPHNE.roa
File: fhDfnd1sxahgjYhOPaMH-zbPHNE.roa (raw, json)
Hash identifier: wgRkLUPLN9uGcU27XvQbCXpbgOex5MpWJQYXuSKlkNQ=
Subject key identifier: 7E:10:DF:9D:DD:6C:C5:A8:60:8D:88:4E:3D:A3:07:FB:36:CF:1C:D1
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01987AEB79DAECDAAFB839E48F3906432B81
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/fhDfnd1sxahgjYhOPaMH-zbPHNE.roa
Signing time: Tue 05 Aug 2025 15:48:29 +0000
ROA not before: Tue 05 Aug 2025 15:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a03:5000:431::/48 maxlen: 48
2a03:5000:432::/48 maxlen: 48
2a03:5000:471::/48 maxlen: 48
2a03:5000:481::/48 maxlen: 48
2a03:5000:501::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:eb:79:da:ec:da:af:b8:39:e4:8f:39:06:43:2b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Aug 5 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e10df9ddd6cc5a8608d884e3da307fb36cf1cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:d3:e6:89:3e:6b:5b:38:18:e0:bb:52:8d:
8c:ea:99:c8:2a:cb:56:aa:61:db:cf:30:06:d3:b0:
fc:aa:c9:b8:98:d9:75:6c:bb:ad:cd:fb:e4:ee:6f:
25:8f:1d:80:55:d4:75:c7:0e:44:f9:05:df:95:54:
6d:04:19:a0:af:ad:a9:d6:41:ef:3c:2b:3b:19:80:
0f:29:75:f7:21:09:98:2f:ba:c5:2c:16:b2:7b:2a:
97:19:56:54:7d:ea:f4:ff:81:b9:99:bb:c3:8f:e7:
51:70:34:74:55:ff:41:64:86:d6:eb:c1:d0:ae:a4:
b2:3c:2b:90:51:5a:14:0e:08:43:c8:fb:d9:54:6a:
1d:a1:8b:96:96:0f:6f:10:39:c2:a8:53:6d:ba:0d:
36:d8:2d:de:54:ab:e6:36:2f:c9:cd:e0:6a:ab:fc:
f2:7f:ec:fe:a3:1b:77:1a:2e:38:04:87:e0:e9:47:
d1:a3:e5:5b:ad:d5:40:98:c2:f0:d3:ee:98:37:0f:
42:b6:0b:15:9e:26:0a:af:8f:c3:e9:e9:b7:eb:c0:
9b:97:c4:6e:21:fd:6c:ba:e8:a9:8a:8a:95:3d:1a:
94:c4:5b:b8:97:85:09:a5:a3:20:61:05:90:b7:bc:
62:15:0b:26:06:5f:f0:a1:eb:74:85:eb:0b:5c:ca:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:10:DF:9D:DD:6C:C5:A8:60:8D:88:4E:3D:A3:07:FB:36:CF:1C:D1
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/fhDfnd1sxahgjYhOPaMH-zbPHNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5000:431::-2a03:5000:432:ffff:ffff:ffff:ffff:ffff
2a03:5000:471::/48
2a03:5000:481::/48
2a03:5000:501::/48
Signature Algorithm: sha256WithRSAEncryption
9a:75:e1:e4:51:63:c4:f2:88:f7:c7:31:fb:c7:7a:d1:62:62:
3a:e5:cb:65:b7:8f:62:56:39:f7:b2:02:55:16:b9:fd:55:1c:
bd:90:23:b2:d1:da:06:b7:fc:fb:dc:e5:38:7f:f5:cd:9b:2b:
0c:ca:24:04:ac:2f:07:bf:17:61:02:a1:19:d3:b6:91:24:e2:
e6:a4:f2:d3:e2:87:cb:e8:da:60:08:c0:95:55:e4:98:8a:f3:
15:6f:6d:9f:39:00:91:c6:ff:0f:0a:ca:a6:20:bd:ed:1d:ee:
8d:e9:90:84:16:2d:6b:28:d1:12:f7:c5:f6:9e:61:91:10:c5:
10:c3:5c:13:a1:03:32:5a:b3:9c:63:d8:1a:15:31:3b:1d:b0:
78:70:ca:b8:1b:0b:65:a3:99:c6:28:f7:20:83:ca:0f:c9:02:
fc:25:57:a1:94:87:f4:30:64:25:16:40:5f:f4:28:42:1f:cd:
85:13:b8:2a:5e:69:a2:94:b1:5e:6b:ad:5a:11:7e:b1:64:d1:
78:0b:e1:dc:b4:11:5a:8a:e9:09:98:c2:38:c6:65:64:a6:1d:
11:3b:94:db:df:3b:46:88:60:93:b5:f3:6b:af:dd:60:2a:f9:
4c:0b:c5:a3:de:4d:0a:5a:79:9d:b3:79:2d:3f:23:8c:d3:e5:
32:f7:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 19:00:58 2025 by rpki-client