Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KtlnfW9_h7_MyW-j9TcGiC0HAu4.roa
File: KtlnfW9_h7_MyW-j9TcGiC0HAu4.roa (raw, json)
Hash identifier: 104LifrnYp7wohFkNN5zsIKvsi2D4tpUsJX89f3PFT0=
Subject key identifier: 2A:D9:67:7D:6F:7F:87:BF:CC:C9:6F:A3:F5:37:06:88:2D:07:02:EE
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01977DB8E2D13ADBF63653A0F0E06FD3E88A
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KtlnfW9_h7_MyW-j9TcGiC0HAu4.roa
Signing time: Tue 17 Jun 2025 11:49:17 +0000
ROA not before: Tue 17 Jun 2025 11:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39690
IP address blocks: 2a10:b44::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:b8:e2:d1:3a:db:f6:36:53:a0:f0:e0:6f:d3:e8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 17 11:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ad9677d6f7f87bfccc96fa3f53706882d0702ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:29:4e:fa:fe:72:6a:f2:2e:a3:de:9a:3b:
cd:b1:23:da:9f:1b:b0:41:4b:25:c8:9a:5a:53:4e:
99:af:af:74:b5:98:81:55:2a:65:40:4f:b6:57:f3:
55:38:12:44:0f:c1:1b:8d:9f:aa:a3:78:d4:0f:20:
15:9f:e1:e7:eb:df:a8:69:f7:2c:a7:f5:a8:c6:cb:
52:57:d9:a1:96:8c:34:83:32:98:c2:35:9f:c8:80:
8b:66:4f:9d:ff:07:4d:b7:d3:1a:41:b6:11:3b:3e:
1d:6f:88:a0:5a:11:78:ea:fc:a4:fc:99:3b:b5:bf:
f2:b3:28:67:80:07:81:04:13:b8:21:95:b9:11:be:
7d:d7:73:59:b3:f6:55:06:29:b7:ab:21:29:6f:63:
87:04:90:00:d6:5c:d1:aa:dd:f3:76:27:04:61:c1:
be:71:53:01:ab:91:e1:1c:bf:f6:f9:b2:84:47:81:
b4:5a:79:33:62:a4:43:73:ac:5f:f0:76:a8:14:50:
15:be:e2:28:69:9c:7d:f2:d2:64:74:68:f7:bb:9b:
1d:78:42:af:05:77:00:88:fc:7c:20:f4:41:1e:a7:
06:30:e0:3f:56:ef:bc:ee:db:07:2d:ac:3a:03:7c:
87:00:88:0f:0f:85:69:01:94:63:7a:49:78:ae:ed:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D9:67:7D:6F:7F:87:BF:CC:C9:6F:A3:F5:37:06:88:2D:07:02:EE
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KtlnfW9_h7_MyW-j9TcGiC0HAu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:b44::/32
Signature Algorithm: sha256WithRSAEncryption
1c:0a:a0:c8:76:34:c7:05:a0:39:a0:67:00:5f:8c:fb:b6:63:
1a:82:f1:eb:51:bc:c2:48:67:b6:b4:d9:02:3a:02:75:ca:96:
42:80:44:68:84:19:b5:8c:10:09:42:2c:18:b5:20:a2:3b:ae:
e0:6c:1b:66:d0:50:b8:d9:5c:38:f7:8c:8c:b5:63:0b:d7:3d:
c3:a1:e3:6d:ab:65:c7:25:ea:5b:70:1a:38:6b:a2:9e:39:a0:
6a:d6:84:dc:70:07:38:97:13:84:33:02:31:c8:d5:67:c5:ba:
d4:bd:e5:6f:37:1b:cb:8f:32:4c:c6:03:cc:c3:15:d0:54:7e:
0b:f7:59:66:d9:97:ac:90:45:3b:aa:c5:16:7a:d6:90:4a:78:
88:a9:fa:36:d9:77:34:e5:d0:85:77:5e:57:e3:2f:22:1c:61:
62:f0:59:f3:2d:ca:1b:f0:44:48:a6:7b:c5:25:1b:56:0a:72:
0c:79:56:c9:7e:57:a4:43:77:ed:c2:ce:e7:25:35:96:b7:da:
87:cf:2f:98:0b:ab:98:3d:d8:d8:20:41:6d:6c:6a:9d:b9:14:
81:f8:55:0a:bc:ad:fc:0a:9e:b0:f3:0c:9c:5e:52:ba:5e:d8:
ef:16:d3:d6:2a:aa:47:b0:77:03:90:22:6d:89:93:94:0f:b3:
27:54:53:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:03:59 2025 by rpki-client