Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oU5Bf7tXUJaMXqK9kueSi6MN55Q.roa
File: oU5Bf7tXUJaMXqK9kueSi6MN55Q.roa (raw, json)
Hash identifier: Hanyf5XYuubmS/z8LBwpuYOttDY8bOdkwhsQ0xGKOHI=
Subject key identifier: A1:4E:41:7F:BB:57:50:96:8C:5E:A2:BD:92:E7:92:8B:A3:0D:E7:94
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0197C6AB48592D61E82645057A408BDBF8E0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oU5Bf7tXUJaMXqK9kueSi6MN55Q.roa
Signing time: Tue 01 Jul 2025 15:46:43 +0000
ROA not before: Tue 01 Jul 2025 15:46:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209552
IP address blocks: 2a06:de01:c0::/44 maxlen: 48
2a06:de01:c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ab:48:59:2d:61:e8:26:45:05:7a:40:8b:db:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 1 15:46:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a14e417fbb5750968c5ea2bd92e7928ba30de794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:61:94:b1:54:be:80:24:70:ca:12:e9:f9:
14:8a:84:b3:e3:e7:4e:9b:a6:c3:a4:c4:7a:68:16:
f3:2c:30:92:0e:69:17:54:31:80:13:67:33:76:76:
e1:77:38:a6:f8:f6:b3:c3:02:8d:35:bf:cf:cd:dc:
f0:e8:09:cc:e3:32:29:78:b8:9f:bb:ad:a4:19:17:
bf:4a:fb:74:c8:26:ca:a8:c7:28:c9:11:07:55:74:
ef:7b:aa:bd:7f:c5:2b:3a:e4:84:f6:26:19:f7:f7:
eb:b7:a5:c0:21:83:70:20:25:9c:aa:72:7d:37:90:
c6:6e:ee:e0:fb:7c:82:f1:9f:5d:a0:23:28:d6:3c:
d6:82:ea:67:0a:66:17:72:12:19:47:1d:84:95:f9:
f2:e7:06:1f:31:09:8c:cc:03:22:e8:1e:07:df:8d:
49:6b:78:d3:37:6c:19:a2:d7:48:5e:10:a4:df:97:
8f:61:5a:ca:ff:c5:cd:c3:c1:aa:20:d9:36:4f:fd:
07:e1:4f:63:f6:33:1c:6e:9d:50:ca:6d:03:79:28:
e3:89:2a:68:59:90:af:86:79:d6:ac:18:ed:45:e9:
48:10:9a:57:47:62:11:6b:16:b4:c2:a6:b9:a3:fc:
ef:10:e0:cc:3a:e2:88:1a:4c:0b:a0:d3:0e:50:a8:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:41:7F:BB:57:50:96:8C:5E:A2:BD:92:E7:92:8B:A3:0D:E7:94
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oU5Bf7tXUJaMXqK9kueSi6MN55Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:c0::/44
Signature Algorithm: sha256WithRSAEncryption
47:1e:8c:aa:ce:1d:25:bb:b2:a7:d1:9b:3b:fb:de:5d:2d:e0:
9e:53:64:a0:27:1d:c6:d7:36:eb:63:7b:a7:10:79:6a:56:d2:
1a:fe:ec:d1:73:34:e5:eb:88:fb:f0:be:23:87:d7:46:be:1c:
4f:0f:81:35:83:3e:7d:f1:c6:4c:fe:a6:01:24:df:cc:6a:ac:
ff:b6:53:da:1c:58:c5:86:ae:72:64:45:34:ae:57:1a:20:63:
eb:84:e1:6a:dd:c6:db:a8:2a:b9:38:0e:8e:46:7e:30:28:44:
2e:78:e1:a8:ed:b5:e1:81:a5:1b:33:3b:dc:41:22:83:52:d8:
91:28:2e:b5:23:35:9c:ca:be:c0:f4:c5:f8:63:bf:f1:72:18:
7f:95:f6:01:90:34:95:ae:da:6b:8e:b6:e5:87:a7:ff:17:dd:
f3:b4:9b:cf:2b:70:b4:d8:02:62:e6:be:0e:68:40:62:59:13:
ab:4c:5e:17:6f:d4:1d:1e:22:3d:8b:22:df:49:48:59:a6:9b:
1f:09:b3:9e:38:c7:c3:fe:c9:cf:45:84:62:3b:52:49:e0:4a:
c3:6e:40:83:c0:6a:a7:e9:c6:19:8c:55:1c:07:ea:ee:7d:67:
27:40:83:df:28:b4:02:e1:79:1a:d8:2d:a5:a6:26:fc:08:93:
7d:b8:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:40:52 2025 by rpki-client