Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/abtTBXhuwWweBm_CoDYQ2cwjEMw.roa
File: abtTBXhuwWweBm_CoDYQ2cwjEMw.roa (raw, json)
Hash identifier: OLYyoagLI5DJJLJBZlTWlcO/4B4SUfrQDGrJ6xD4mOc=
Subject key identifier: 69:BB:53:05:78:6E:C1:6C:1E:06:6F:C2:A0:36:10:D9:CC:23:10:CC
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01977DBF4FAACEDB157CC9BF0055ABFAC5FD
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/abtTBXhuwWweBm_CoDYQ2cwjEMw.roa
Signing time: Tue 17 Jun 2025 11:56:19 +0000
ROA not before: Tue 17 Jun 2025 11:56:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206744
IP address blocks: 2a13:bb45::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:bf:4f:aa:ce:db:15:7c:c9:bf:00:55:ab:fa:c5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 17 11:56:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69bb5305786ec16c1e066fc2a03610d9cc2310cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:2e:d2:b6:49:3a:1a:f9:70:a9:a9:76:ab:
1b:d3:7f:d9:e4:00:d9:b3:2e:af:a3:39:11:5e:42:
b0:a8:41:d9:98:79:7b:83:b6:29:31:82:96:eb:77:
86:39:2c:86:97:7d:76:48:6b:bc:6f:6c:4e:dd:6e:
6e:c7:ba:2b:ef:02:fd:57:89:aa:c2:58:de:e3:94:
d3:ea:fa:61:28:75:e9:ce:39:48:fa:44:4a:97:57:
ab:31:26:6d:5d:84:5a:38:13:cc:14:90:a3:5d:de:
12:c8:50:25:72:99:2c:ba:ce:d1:44:3b:b3:21:dc:
ff:64:8d:ce:90:95:cb:2d:fe:d8:fa:48:66:96:f9:
9a:78:73:72:09:88:40:12:94:9d:d0:02:95:26:37:
90:f5:1e:26:6b:35:55:98:63:fa:6c:a5:ce:64:59:
0d:be:b7:66:14:7b:54:e4:dd:19:78:26:71:99:51:
bc:9e:aa:52:eb:d9:24:f0:c6:58:7b:e8:aa:00:9d:
8b:f3:bf:74:b3:69:db:dc:51:d3:b5:b2:1d:1b:22:
c8:09:9e:be:ea:3e:9e:bd:06:5b:7a:51:c9:29:3a:
2a:01:b2:aa:46:d8:19:b0:d7:66:c5:a5:cd:c6:29:
72:45:6c:4b:2c:a7:7f:5a:85:c3:42:c9:59:bc:39:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BB:53:05:78:6E:C1:6C:1E:06:6F:C2:A0:36:10:D9:CC:23:10:CC
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/abtTBXhuwWweBm_CoDYQ2cwjEMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bb45::/32
Signature Algorithm: sha256WithRSAEncryption
1d:81:82:ad:9b:83:4e:3a:85:62:f8:a0:92:cd:b9:87:3e:f7:
f7:db:64:e5:a4:8a:be:08:57:b9:f6:7e:cb:d5:d8:26:94:be:
e6:ed:da:89:bd:55:8f:da:6b:73:07:81:dd:20:73:51:7b:1c:
66:40:6f:8f:5f:51:af:e1:bf:00:08:bd:01:4c:b4:f2:f3:db:
f7:71:c7:46:99:9d:75:48:4f:e6:a6:27:51:5b:99:87:9c:8b:
5d:1b:26:62:e6:99:1c:d9:04:2d:44:08:ad:80:92:41:45:d3:
db:d9:56:0b:be:9b:01:28:17:c6:8c:71:53:6a:de:56:89:1c:
63:6d:57:c5:e5:a9:61:77:e1:3d:92:dc:09:f7:78:0c:da:dc:
33:97:e3:97:10:37:e3:c6:f1:5e:85:1b:50:eb:bb:02:24:95:
94:80:50:e0:68:cb:8a:a8:23:dc:33:88:a8:a5:2f:16:75:6d:
6e:10:89:d6:4f:a8:5f:da:c9:cb:f3:0f:80:43:73:1f:ba:72:
a5:dd:85:97:fe:40:a1:73:02:dd:82:6d:3c:02:d3:5b:56:6d:
ca:38:b0:e2:63:f2:59:44:9d:0e:a9:95:bc:fb:72:ca:c7:d7:
08:7b:27:80:75:a6:24:86:01:43:fb:68:e7:e3:3a:cb:c6:2f:
06:15:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:46:33 2025 by rpki-client