Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/jvkh_2Bs2-Cdp9R2QBLhKKf2qHo.roa
File: jvkh_2Bs2-Cdp9R2QBLhKKf2qHo.roa (raw, json)
Hash identifier: EFPLwLl931xOBx8SQt0xyKee58yS6t9M5V2iQL8pNHE=
Subject key identifier: 8E:F9:21:FF:60:6C:DB:E0:9D:A7:D4:76:40:12:E1:28:A7:F6:A8:7A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01977DBF4B09B3C3BF03C662C6F2003C333C
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/jvkh_2Bs2-Cdp9R2QBLhKKf2qHo.roa
Signing time: Tue 17 Jun 2025 11:56:17 +0000
ROA not before: Tue 17 Jun 2025 11:56:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49443
IP address blocks: 2a13:bb46::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:bf:4b:09:b3:c3:bf:03:c6:62:c6:f2:00:3c:33:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 17 11:56:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ef921ff606cdbe09da7d4764012e128a7f6a87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:e5:80:bb:05:0f:0b:20:2f:5d:be:90:91:
77:33:6d:1d:f0:6a:3e:ac:31:63:6c:a9:8f:9c:01:
cf:2b:18:4a:37:26:9f:60:4d:20:c5:f9:0f:6f:d7:
cd:92:b0:43:b3:d5:68:9f:7e:0f:5c:cd:9d:57:d4:
09:99:dc:36:12:3f:c1:43:61:0f:ba:3a:23:98:6e:
25:f7:0d:e8:22:0c:b6:36:dc:f6:93:a2:01:f1:04:
76:c6:c1:a3:79:79:c1:3d:8a:e2:0b:5d:cb:a1:9e:
20:00:73:18:bd:61:23:65:e0:15:18:de:37:c2:47:
41:3e:1b:a9:88:9d:90:77:fd:5e:47:59:1a:5c:60:
30:ff:b5:cf:ce:82:06:f7:b9:7a:68:c1:c5:8e:21:
89:5c:fb:10:e0:5a:db:2e:1d:d9:1f:0c:50:85:94:
02:5a:c3:6a:58:ba:f9:39:77:4c:da:ef:e1:4b:a7:
4a:3d:9e:03:9a:ee:72:e3:c9:81:2a:32:f3:89:84:
04:a4:2a:f1:03:cd:9a:41:be:35:cc:f6:ff:d8:a5:
56:ad:8d:bc:1a:bb:ba:fa:43:94:ed:d3:c3:bf:b9:
39:08:f5:8f:f5:1c:5c:85:88:93:73:08:dd:8f:d4:
9c:35:a3:14:29:70:70:3f:c6:ce:8d:50:be:34:b3:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:21:FF:60:6C:DB:E0:9D:A7:D4:76:40:12:E1:28:A7:F6:A8:7A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/jvkh_2Bs2-Cdp9R2QBLhKKf2qHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bb46::/32
Signature Algorithm: sha256WithRSAEncryption
25:1b:82:7e:c2:28:14:8b:2c:7f:17:80:69:b3:ed:5f:75:27:
d3:b5:dc:41:b3:f7:da:ea:4f:40:7b:09:f0:16:68:58:64:cd:
e2:13:1b:fe:13:39:1e:b4:d0:ed:5f:97:6c:78:e7:77:7b:eb:
cb:93:85:58:7e:71:d4:dd:ff:54:75:23:fb:fd:ef:5a:02:57:
52:69:1b:35:42:dc:c9:e7:f8:3e:ac:07:8a:ea:56:3f:19:75:
54:56:bf:d6:0f:39:b7:b1:46:c5:c0:ba:b3:93:00:21:33:e0:
74:9f:4d:e3:d6:8c:a4:bf:38:f6:7e:d1:c1:2c:e0:7f:55:77:
c3:e7:db:a0:cd:ae:68:52:c5:69:66:8b:8d:09:90:1c:04:36:
38:67:9a:3b:81:20:78:e9:77:c1:5c:f7:a5:77:ce:0c:23:31:
e3:32:2a:da:3a:db:ff:cb:fa:30:f8:cf:ae:d8:74:0e:ac:3c:
70:53:df:88:fd:d6:cd:06:65:52:bb:1c:58:25:26:10:b9:8d:
d7:39:a9:73:51:2a:48:c3:74:90:9a:69:e3:e7:ba:bd:b6:d0:
a1:b3:f9:e1:c7:68:8b:df:1c:c2:7a:0c:3d:9f:ca:ca:1f:a5:
3a:f4:db:d5:e3:08:8f:70:c2:4a:e6:ec:76:ca:aa:26:bb:23:
7d:94:b7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:37:48 2025 by rpki-client