Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UUux7sK0065XoPweGidlsv3gQQw.roa
File: UUux7sK0065XoPweGidlsv3gQQw.roa (raw, json)
Hash identifier: vOug2rHApSaIZc++GNf6fhCiPW1j8aqFy8QDSVKD7bU=
Subject key identifier: 51:4B:B1:EE:C2:B4:D3:AE:57:A0:FC:1E:1A:27:65:B2:FD:E0:41:0C
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0196B193B91A595BA214ADB200AD842202F4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UUux7sK0065XoPweGidlsv3gQQw.roa
Signing time: Thu 08 May 2025 20:26:10 +0000
ROA not before: Thu 08 May 2025 20:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205227
IP address blocks: 2a10:3f83::/32 maxlen: 32
2a13:c245:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:93:b9:1a:59:5b:a2:14:ad:b2:00:ad:84:22:02:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 8 20:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=514bb1eec2b4d3ae57a0fc1e1a2765b2fde0410c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:f7:db:7e:19:c1:e6:b7:ca:ad:fe:55:ef:
d0:ea:a9:af:44:83:ad:41:33:b0:5c:0a:fa:3c:31:
d4:2f:39:f7:a9:82:9b:24:84:d0:04:82:2a:62:e8:
1a:f4:71:65:f0:1c:05:a9:b4:22:8f:1e:18:db:8f:
35:9b:21:e5:8b:ae:e1:e1:0d:7a:d3:23:ab:78:6b:
f0:a1:e6:84:14:00:60:90:34:d3:6e:78:f1:60:07:
1d:32:13:74:9d:be:34:6e:54:27:eb:49:cd:d2:1c:
36:b8:e5:f5:4e:71:cc:56:8f:3f:85:c3:82:5a:ad:
d7:99:5b:a5:2d:2f:43:81:3e:52:16:0d:76:ee:bc:
9f:33:8d:8f:c2:17:16:2e:6c:b3:0b:9c:ee:a9:12:
3d:1f:a0:29:61:dc:4d:5a:aa:cb:70:97:14:35:37:
b9:3c:a1:6e:9c:10:61:ea:b1:39:38:c3:15:16:76:
90:0b:fb:c1:b2:e7:77:a8:82:7d:eb:4c:74:b0:1d:
96:0f:68:3a:b8:ca:05:b6:45:d1:57:03:a5:ce:fb:
d1:a6:75:70:2a:29:c7:d6:4c:14:b7:a7:7b:32:26:
a5:21:7b:86:f1:96:ce:29:b3:d2:0b:fa:77:ad:8c:
ae:bb:b2:db:38:57:ea:ec:4c:29:40:38:ef:10:1e:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4B:B1:EE:C2:B4:D3:AE:57:A0:FC:1E:1A:27:65:B2:FD:E0:41:0C
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/UUux7sK0065XoPweGidlsv3gQQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3f83::/32
2a13:c245:8000::/33
Signature Algorithm: sha256WithRSAEncryption
26:11:a1:ca:ee:d0:66:ee:1a:f2:c7:64:a9:d8:46:1d:ff:ef:
fa:d1:30:3d:08:03:e1:af:6d:4a:9b:7e:f9:39:9b:94:a8:03:
d5:6d:42:fe:ec:8b:65:11:b4:31:68:da:84:7f:c1:64:a3:08:
30:df:3e:e7:49:bf:5b:e0:33:a9:c6:d0:48:d6:9f:bf:b2:c8:
0f:b8:97:f8:0f:db:06:3f:8b:3b:95:60:a0:19:2b:20:b0:81:
bf:3c:1d:27:53:ea:e3:e9:13:7e:e5:9b:55:8a:b5:1e:b7:5b:
44:8c:6a:23:c7:92:0d:55:f5:3e:a6:6c:87:c7:e1:e5:5c:b8:
85:67:b0:f2:9e:fb:55:06:0d:da:85:49:cc:9b:a8:ed:45:17:
f2:1d:ee:d7:05:bf:f7:32:5a:1d:70:37:c6:cc:3b:ac:a3:23:
27:05:43:80:83:88:2e:56:34:9a:de:03:d4:96:e9:d0:8b:92:
96:37:21:5a:4b:7b:af:28:3d:5d:ed:7a:ab:aa:e0:93:f1:79:
ec:c6:24:61:39:e8:41:d5:07:2b:2c:c1:63:0c:aa:2e:5b:b4:
fa:7b:4e:4d:8a:13:a6:70:8e:78:a3:67:9b:74:c1:81:f1:75:
3c:be:20:e6:a6:01:a2:c8:9c:9d:7f:3b:70:76:8e:c5:45:ef:
48:0d:60:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:08:57 2025 by rpki-client