Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SIso4_5ACOOMtz4YILN1ISnkOno.roa
File: SIso4_5ACOOMtz4YILN1ISnkOno.roa (raw, json)
Hash identifier: YATgCVzxlDG5+0kAECG/YE8FNAy3lUQwsgIER3TnhYQ=
Subject key identifier: 48:8B:28:E3:FE:40:08:E3:8C:B7:3E:18:20:B3:75:21:29:E4:3A:7A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01977DBD79D5FCAEF41029E288DDC5F80201
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SIso4_5ACOOMtz4YILN1ISnkOno.roa
Signing time: Tue 17 Jun 2025 11:54:18 +0000
ROA not before: Tue 17 Jun 2025 11:54:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209896
IP address blocks: 2a13:c443::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:bd:79:d5:fc:ae:f4:10:29:e2:88:dd:c5:f8:02:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 17 11:54:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=488b28e3fe4008e38cb73e1820b3752129e43a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:40:40:c8:3c:af:c7:49:b3:91:e7:91:9f:
d3:c2:19:cf:d6:3e:88:25:d1:1e:f8:6c:a4:fe:82:
4b:9b:14:54:da:93:2d:07:51:b9:5d:9c:9f:13:7b:
31:ee:26:5f:4c:2a:50:d2:78:9c:92:b7:e8:c6:43:
df:63:25:99:36:98:47:03:9b:51:50:14:43:74:b9:
c9:b5:89:d2:33:b0:27:8e:6f:af:30:cd:d5:10:a9:
07:2d:21:ee:bf:8d:4d:4d:2b:7a:ff:cf:00:08:3d:
f3:68:cb:62:40:24:72:53:ac:3a:3a:69:0a:b8:3c:
37:83:50:f6:f2:07:80:92:8f:ff:2a:f6:4f:46:e7:
c2:48:2d:38:5f:07:71:39:71:e6:a8:e2:0d:f2:b9:
c0:32:18:50:18:e8:7c:68:43:65:41:df:cc:66:07:
98:a5:ef:23:23:3c:f2:db:da:31:ab:c1:9b:bc:dd:
59:e5:49:f9:13:2a:f8:58:a3:58:26:5f:23:ab:7f:
27:bb:99:ba:a6:ba:b4:26:20:fe:3b:24:fa:89:a0:
9e:8d:e4:bd:98:6c:9f:a0:59:0d:1f:1e:39:30:f7:
93:85:01:83:cc:78:97:08:5b:fd:10:99:fc:b4:12:
d2:47:fc:20:78:40:2b:e3:cd:df:fb:24:2b:24:aa:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8B:28:E3:FE:40:08:E3:8C:B7:3E:18:20:B3:75:21:29:E4:3A:7A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SIso4_5ACOOMtz4YILN1ISnkOno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c443::/32
Signature Algorithm: sha256WithRSAEncryption
a3:ca:7a:69:4b:74:98:38:eb:0d:12:dc:bb:45:f1:68:a0:80:
fc:1c:c3:f3:57:fe:55:3e:3e:12:68:87:ac:b0:5c:da:99:f3:
ad:0b:81:72:2b:6d:b3:9f:c5:8d:41:e3:63:6c:71:bc:98:2e:
19:5f:5d:5d:cb:43:88:b7:27:74:6b:79:a1:69:4e:d6:6a:5e:
28:e8:06:c8:5b:3d:db:47:b9:37:3e:ff:ff:b5:cf:2b:65:e8:
ac:a7:20:e0:b6:2b:9e:36:fc:5a:01:62:b1:11:d1:c3:e6:e9:
9b:5e:cc:3b:21:21:04:98:b7:58:ca:d4:46:f7:cd:6d:d7:2a:
1d:77:ab:84:40:a9:ff:6b:33:ef:8c:d6:09:d7:20:cd:c5:6d:
ed:17:3d:7d:db:f8:49:62:f4:69:cb:f0:93:7f:72:cd:c9:ba:
c4:31:e0:22:c4:6d:bc:90:d2:8c:b7:1a:a5:dd:68:04:a0:6e:
2c:a4:4d:39:ae:1b:70:df:ac:40:bd:c0:35:9a:d9:2d:90:7a:
72:92:6e:41:27:4b:ea:51:25:00:97:7d:14:83:1d:f6:93:b1:
c1:3d:67:e1:69:ad:22:45:08:ff:7d:f7:0c:05:1e:14:6d:13:
c4:02:cd:76:ba:4c:44:e7:93:5a:4f:3a:b1:43:02:a1:60:dc:
d1:b3:37:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:27:21 2025 by rpki-client