Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xMasQceydTZcZsjJ0G1xqv22RS8.roa
File: xMasQceydTZcZsjJ0G1xqv22RS8.roa (raw, json)
Hash identifier: Gn3d7yAyEC2mSWuItAA/HIsql3a3gI/aK5D90tUYS+A=
Subject key identifier: C4:C6:AC:41:C7:B2:75:36:5C:66:C8:C9:D0:6D:71:AA:FD:B6:45:2F
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0197994D359D3EB4EDFD521E3A3852B580BD
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xMasQceydTZcZsjJ0G1xqv22RS8.roa
Signing time: Sun 22 Jun 2025 20:21:03 +0000
ROA not before: Sun 22 Jun 2025 20:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a10:b45::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:99:4d:35:9d:3e:b4:ed:fd:52:1e:3a:38:52:b5:80:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 22 20:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4c6ac41c7b275365c66c8c9d06d71aafdb6452f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:51:d5:9c:d5:95:ae:2a:06:b3:a9:8f:59:3a:
e1:3e:e4:08:33:92:80:73:ad:93:64:79:c3:96:d4:
11:19:4a:bf:b7:fc:c4:18:cd:26:07:4a:97:fb:8c:
be:f3:c3:58:0a:ec:d5:7a:d4:90:ab:41:ce:c4:94:
27:da:d9:90:8d:e8:b3:ba:95:16:aa:53:00:f0:91:
f7:1f:07:61:cf:bb:29:73:c4:e5:f4:38:31:e4:c0:
fb:13:91:c1:a2:6d:a4:e2:fe:19:2f:da:61:aa:90:
30:d4:6c:81:2b:ce:1d:c2:bf:8a:97:a9:29:64:a8:
72:9e:0e:34:3d:35:ed:ae:66:da:f7:b8:9e:37:50:
cc:1e:64:34:bc:43:9c:45:ac:21:32:95:95:81:9d:
8c:a7:d5:b2:8c:ec:3e:2b:57:4d:25:04:3d:06:8f:
9a:a2:09:24:b6:1d:c8:21:fe:ae:4f:4c:37:a8:52:
3a:2c:9b:89:86:3c:d2:d3:56:0e:93:65:be:4d:6a:
e6:e1:ab:da:a5:32:a0:20:26:9c:dd:0c:99:ad:0f:
50:bd:67:63:e4:fe:0c:16:3c:f9:96:c2:39:19:ef:
9f:01:c8:7c:75:82:39:50:8e:74:3b:55:eb:4e:12:
a8:2c:21:a1:f9:05:ab:a6:a5:00:a0:b1:7e:37:02:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C6:AC:41:C7:B2:75:36:5C:66:C8:C9:D0:6D:71:AA:FD:B6:45:2F
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xMasQceydTZcZsjJ0G1xqv22RS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:b45::/32
Signature Algorithm: sha256WithRSAEncryption
ae:a2:9c:39:ac:80:91:4c:1d:66:a0:5f:5b:cd:ee:e2:ef:12:
d7:b1:07:91:c4:91:42:0a:19:bc:c8:6d:f7:a0:94:31:7c:91:
11:f5:ee:33:77:2a:1a:b1:3c:6f:6f:fe:16:4d:c6:4e:a8:61:
4f:86:60:f4:95:22:a2:64:43:65:d6:fb:2b:93:5c:b1:50:c7:
88:a7:27:62:f8:18:ae:4a:3c:70:35:9a:4e:aa:24:d6:c5:ea:
32:d3:19:f5:42:53:f6:a7:40:37:f6:2d:99:b2:d7:63:33:46:
ea:14:f8:50:2c:cb:d4:ed:93:42:48:bb:c4:c6:84:e8:d5:6f:
87:c2:61:c6:81:2d:06:82:df:08:66:76:ea:8b:c8:8f:21:d9:
41:ff:cd:a9:ff:06:47:75:44:1f:f7:4a:35:e7:13:0e:56:0c:
27:1b:1c:e9:15:97:15:eb:e8:c3:31:a8:6c:53:c4:ec:42:12:
65:96:4b:6c:af:91:39:7f:60:15:79:14:e4:8c:e1:48:e8:33:
94:36:3a:07:fa:c8:bc:c4:85:c6:0c:75:54:0b:93:92:06:56:
73:9c:63:7d:6d:78:56:79:44:3f:0f:2d:12:c8:47:6f:96:c0:
59:63:81:42:c5:a9:5e:77:9f:45:da:49:91:52:64:7e:13:31:
c6:b2:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:00:35 2025 by rpki-client