Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TL1P3pwLxj8TCu9Uo79tcbRXF9A.roa
File: TL1P3pwLxj8TCu9Uo79tcbRXF9A.roa (raw, json)
Hash identifier: 59l0+MvbzN9/CzPKLnA093M/uVAYkr1hAYSqaYz1XF8=
Subject key identifier: 4C:BD:4F:DE:9C:0B:C6:3F:13:0A:EF:54:A3:BF:6D:71:B4:57:17:D0
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01977DBF4BA29FF84CBCDDCAFE7D0C835636
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TL1P3pwLxj8TCu9Uo79tcbRXF9A.roa
Signing time: Tue 17 Jun 2025 11:56:18 +0000
ROA not before: Tue 17 Jun 2025 11:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201813
IP address blocks: 2a13:bb47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:bf:4b:a2:9f:f8:4c:bc:dd:ca:fe:7d:0c:83:56:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 17 11:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cbd4fde9c0bc63f130aef54a3bf6d71b45717d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:0e:99:80:59:5a:5f:5b:e8:3f:15:af:a7:
8a:7a:f2:ec:70:ce:af:54:8a:30:b8:39:8f:fb:8b:
2e:f1:d4:4e:67:50:92:2e:00:18:8b:2f:c8:c9:74:
3a:7b:be:e0:12:42:e5:af:49:0e:7f:27:f8:b5:56:
fd:bc:5c:e9:a7:f6:46:d8:f5:69:6e:41:e7:e4:c7:
4f:16:61:3c:43:09:d4:78:da:39:5a:40:48:c8:16:
a3:96:e9:3d:f2:66:ee:2a:6f:7e:7e:db:db:2d:e4:
48:fc:10:72:db:e3:d1:c1:79:11:a1:0f:50:3f:2a:
09:08:ac:d8:c3:88:8d:0f:1a:0d:2f:92:74:dc:bd:
0b:fb:96:da:98:12:bf:a5:9d:32:14:fc:52:2e:63:
1e:95:5b:9b:01:ab:6f:15:74:49:22:83:46:39:25:
31:0c:35:5d:91:d6:44:0a:0f:58:fa:7b:05:1f:5b:
e1:2e:a8:c6:61:a4:21:87:72:a5:8d:bf:de:a4:ce:
0a:cd:c0:27:60:8f:1d:01:01:30:36:da:dc:34:1c:
61:f1:d5:55:e0:5f:0f:03:5a:1e:7b:26:07:75:5c:
3f:fd:d5:4b:ed:64:38:1d:e7:55:eb:68:4d:80:27:
bf:49:22:39:45:5c:f5:64:ba:d8:2f:b2:13:5f:ad:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BD:4F:DE:9C:0B:C6:3F:13:0A:EF:54:A3:BF:6D:71:B4:57:17:D0
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TL1P3pwLxj8TCu9Uo79tcbRXF9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bb47::/32
Signature Algorithm: sha256WithRSAEncryption
ae:6f:b8:7b:12:10:bd:94:5a:f5:f2:ba:f1:5c:61:c6:4e:0b:
13:11:c7:eb:ba:5c:28:1b:5a:94:be:40:78:34:9c:48:7d:9c:
1c:41:02:ea:e5:be:fc:4a:ac:76:c2:db:58:44:72:da:2e:36:
9c:a7:43:d8:02:5c:92:f5:cb:49:1d:fc:a3:33:38:ef:66:f7:
bb:cf:0a:d0:8c:96:84:ed:a7:fb:35:01:04:8f:59:7a:82:48:
12:3d:c1:c0:1f:c8:8e:ad:2d:52:74:62:d8:41:a1:c1:4a:8f:
75:77:2b:df:a6:0a:41:2a:46:de:2d:29:ba:9d:5f:11:84:df:
ce:ca:87:d3:c2:e1:b2:80:b2:c5:a3:34:1d:1f:b3:a0:e5:3f:
91:e3:ee:73:d9:64:ec:85:65:7b:d3:25:eb:ed:bd:f5:e2:3c:
64:2a:cb:96:e8:62:64:9a:11:bb:37:bd:4b:e4:fa:a7:80:d3:
c9:13:ae:29:2d:8a:d5:78:22:96:41:74:63:47:eb:ab:10:81:
9d:76:04:7a:2f:8e:cd:0f:67:75:14:40:40:80:53:93:6f:8a:
3b:30:04:ac:e6:79:e4:d6:ff:aa:ce:f6:9f:7c:68:74:f4:aa:
4b:9a:b4:9b:a7:d7:39:82:f3:e8:5e:1f:20:c5:ce:0f:cd:ed:
2f:ed:8c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:15:11 2025 by rpki-client