Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/OQ9RtML9G-ixWSm5EbGC_EQmqZQ.roa
File: OQ9RtML9G-ixWSm5EbGC_EQmqZQ.roa (raw, json)
Hash identifier: Jj0BQnswIB1ZHaTdvAdTXUICRNEwRPIUjy/LhMuocGY=
Subject key identifier: 39:0F:51:B4:C2:FD:1B:E8:B1:59:29:B9:11:B1:82:FC:44:26:A9:94
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 0197B075D89E5F20077D9797E10CFB641894
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/OQ9RtML9G-ixWSm5EbGC_EQmqZQ.roa
Signing time: Fri 27 Jun 2025 08:16:42 +0000
ROA not before: Fri 27 Jun 2025 08:16:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207160
IP address blocks: 2a14:d100::/32 maxlen: 32
2a14:d100::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:75:d8:9e:5f:20:07:7d:97:97:e1:0c:fb:64:18:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Jun 27 08:16:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=390f51b4c2fd1be8b15929b911b182fc4426a994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:e5:49:12:68:e9:4a:32:16:87:a7:f2:d1:
67:ab:dc:5a:a3:49:42:d5:13:b5:6c:c3:8b:01:59:
03:7e:a9:07:fc:d6:19:1d:2e:a3:1d:4a:4d:63:aa:
6b:62:51:49:4f:1d:ea:31:82:0c:5b:ab:da:3d:ab:
5c:2e:c5:92:e2:86:29:81:44:df:24:3f:aa:d4:f2:
60:e2:12:9d:03:a5:d4:a0:c7:2d:42:15:2a:e5:64:
fd:f2:6d:0f:22:ca:7a:9b:21:64:42:ab:e8:18:ef:
4d:0c:7f:3e:65:d5:86:d9:6f:d9:59:6b:77:55:11:
ed:76:0a:63:76:fc:28:8e:8d:fe:6a:89:8f:6e:40:
60:93:49:55:9a:ea:8d:15:38:c5:df:ce:b6:1c:83:
96:83:35:ce:18:91:ea:d4:b6:fc:d7:1e:ed:14:85:
5b:03:77:33:08:ff:3d:d2:65:45:2e:a4:97:dd:4f:
7a:eb:d6:f6:9a:c1:3c:59:98:5c:86:98:c6:6b:0d:
85:49:06:35:bf:00:06:19:40:cd:a5:92:ad:93:da:
79:ec:d8:6a:0b:0f:2a:fb:1e:47:df:59:bc:40:ca:
e4:6e:78:12:c6:cb:09:d6:86:e9:01:dd:30:46:bf:
0a:f3:ec:04:00:42:27:20:cd:70:9a:ec:83:78:d8:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0F:51:B4:C2:FD:1B:E8:B1:59:29:B9:11:B1:82:FC:44:26:A9:94
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/OQ9RtML9G-ixWSm5EbGC_EQmqZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:d100::/32
Signature Algorithm: sha256WithRSAEncryption
3b:d9:7e:14:85:06:78:80:61:a9:ea:9d:41:54:8e:bc:be:d0:
1f:5c:02:94:5d:2f:de:fe:c7:2e:61:6b:da:09:e5:58:41:0d:
c7:a4:e3:be:77:d4:5e:8b:d2:5c:62:51:ee:00:b4:c3:a4:0c:
c2:c2:6a:a2:f3:dc:2e:60:b2:23:08:ab:32:82:c9:85:36:de:
d9:93:c0:96:04:89:dd:5f:b1:2e:98:d7:03:98:71:4f:b5:1d:
e6:c0:d2:68:2f:fe:31:6a:20:e3:6a:f2:50:10:9d:46:8a:0e:
52:b6:66:14:34:4d:05:88:f4:58:df:80:b7:39:23:17:6d:71:
09:64:54:2b:71:b9:20:67:3c:7d:61:99:81:e5:1c:15:f9:db:
3f:73:37:d4:72:c8:22:9a:61:dc:fd:3e:e3:06:94:5b:8d:16:
97:b5:20:c5:09:f9:ac:e1:cd:bb:24:b7:48:18:a8:2a:2b:9b:
7d:81:66:86:bc:ed:5d:88:12:50:95:cb:80:0c:37:2f:d9:bc:
35:3a:ed:05:15:9e:56:82:0c:de:75:c4:0f:ab:59:77:26:c8:
99:1d:ea:29:73:62:d6:b0:73:69:18:0e:dd:69:60:34:69:82:
a5:42:95:49:f2:17:f0:a9:22:c7:2c:4f:ba:5e:74:49:04:f6:
1f:3e:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:28:59 2025 by rpki-client