Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/1-Bhlrm-MhR_Kr6Rkiik1HNjDoUU.roa
File: 1-Bhlrm-MhR_Kr6Rkiik1HNjDoUU.roa (raw, json)
Hash identifier: ENX0SJrSrm8ZRDzc36WQ/2mxvuV32xR7gZuOK1623PM=
Subject key identifier: F8:18:65:AE:6F:8C:85:1F:CA:AF:A4:64:8A:29:35:1C:D8:C3:A1:45
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019680EFA22FA5592DC89DC6686C2E186963
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/1-Bhlrm-MhR_Kr6Rkiik1HNjDoUU.roa
Signing time: Tue 29 Apr 2025 09:45:10 +0000
ROA not before: Tue 29 Apr 2025 09:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:3b40::/29 maxlen: 32
2a14:f40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:ef:a2:2f:a5:59:2d:c8:9d:c6:68:6c:2e:18:69:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Apr 29 09:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f81865ae6f8c851fcaafa4648a29351cd8c3a145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:88:f5:37:b5:e3:b5:61:cc:8a:cf:cb:c0:
f2:3e:d3:0e:af:6e:db:4f:94:7b:2b:fa:19:98:10:
a6:f4:24:cf:d3:10:ba:e0:53:ac:8a:c6:46:bb:d2:
a1:eb:9a:6d:2c:55:7f:89:d5:e4:75:af:0b:c0:1d:
58:a6:59:d3:40:ff:2e:6f:1c:31:ee:1a:64:13:83:
05:ee:e0:e0:b2:d4:de:6e:af:ca:2d:83:0a:d4:69:
24:7d:d6:f3:0f:99:4e:31:20:02:31:d9:68:64:dd:
b7:c6:c6:83:75:74:59:76:c1:4e:d7:52:b3:9e:64:
0d:1d:49:a5:a3:b9:c5:c9:ac:a1:04:cb:f0:bd:47:
e0:3d:c9:14:0c:4e:20:7b:02:22:b5:61:bd:1f:e6:
3a:b2:38:6d:af:20:2d:10:9d:3e:ea:c8:da:be:f5:
c6:21:c3:85:8a:59:52:3c:84:79:19:92:bc:f5:33:
f9:aa:35:fe:ec:33:e1:04:fb:83:ef:04:c5:a1:bd:
c7:c3:0f:87:4a:fe:27:f3:7c:47:49:06:70:3b:b2:
d5:4f:95:9c:ab:a2:dd:68:e7:dd:b2:6f:f5:5a:f3:
85:d3:7c:22:36:5c:e3:8b:10:35:c9:88:8e:fa:17:
a7:f9:28:d5:33:0a:bb:6d:7a:ac:21:ea:4a:14:7c:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:65:AE:6F:8C:85:1F:CA:AF:A4:64:8A:29:35:1C:D8:C3:A1:45
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/1-Bhlrm-MhR_Kr6Rkiik1HNjDoUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3b40::/29
2a14:f40::/29
Signature Algorithm: sha256WithRSAEncryption
63:91:de:5d:be:3b:19:7e:b8:8a:14:b1:73:06:da:6e:31:af:
fa:3a:9c:67:65:ef:ad:54:26:1c:3f:96:35:e1:c5:db:89:d6:
a0:a7:ee:7d:a9:cb:7d:95:a2:eb:ef:bc:04:71:ff:0f:21:9d:
2b:e3:78:64:05:15:fd:76:53:9f:19:4a:20:1f:7b:ef:b1:f3:
70:b4:54:47:49:1f:92:0a:a9:1a:87:63:00:51:1d:11:1d:9d:
79:b5:31:7a:d6:0c:b8:ed:1f:f8:79:c4:d1:55:66:05:65:24:
9d:b7:d5:4c:3e:53:b2:7c:2d:20:2c:d5:fb:bd:0e:f9:11:e3:
2e:55:51:e5:f7:d1:ea:1f:27:11:bf:11:aa:76:4c:46:ce:5d:
4f:08:f4:77:2b:f0:29:07:0b:ce:e2:a5:d0:9a:a1:df:1e:86:
b6:f0:9a:29:0f:8e:f0:18:1c:78:96:3c:a5:47:87:69:58:e0:
32:64:65:82:84:f8:cc:2b:d2:7b:83:ca:d9:25:ed:0f:89:bb:
3f:e3:36:c2:ee:d4:a9:c9:20:c9:a5:87:42:a8:0c:52:8e:a9:
4c:e7:6e:65:89:dc:53:3b:b4:1e:d9:0e:50:4c:85:9c:36:3f:
2f:e3:f6:57:be:87:c6:a8:e5:20:f2:75:f4:10:6e:d6:06:0f:
73:ec:26:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:22:15 2025 by rpki-client