Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/ET1qcB4V98A_IKXLYXraZJzJShg.roa
File: ET1qcB4V98A_IKXLYXraZJzJShg.roa (raw, json)
Hash identifier: tEszrUqZF8KTNTKLbhCoEtjCpoq/ERwnRwZKBj0QR6s=
Subject key identifier: 11:3D:6A:70:1E:15:F7:C0:3F:20:A5:CB:61:7A:DA:64:9C:C9:4A:18
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0196A1ACA1765B9D5CD1395041AF3A787891
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/ET1qcB4V98A_IKXLYXraZJzJShg.roa
Signing time: Mon 05 May 2025 18:19:27 +0000
ROA not before: Mon 05 May 2025 18:19:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213861
IP address blocks: 2a14:e605::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:ac:a1:76:5b:9d:5c:d1:39:50:41:af:3a:78:78:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: May 5 18:19:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=113d6a701e15f7c03f20a5cb617ada649cc94a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f3:e7:a9:ef:16:94:b3:95:5c:0d:40:0b:96:
26:73:af:9a:5e:44:8f:51:5d:e2:d2:5a:b5:13:5f:
48:7e:1d:4b:9d:79:bb:6a:ab:43:e8:58:5f:fa:47:
c7:0f:c4:24:e5:c4:60:d9:0d:13:5f:6b:4c:fe:34:
b7:6b:f9:82:bc:3a:07:9d:4b:9e:a9:46:da:f6:f6:
1a:9d:e0:6d:37:15:e8:dc:48:dc:c5:63:bf:5c:34:
fb:29:89:a2:bb:a7:38:10:c5:ef:fa:38:26:f5:ce:
6d:62:a1:a3:be:10:24:fa:17:fa:97:62:9b:d2:73:
31:ca:96:12:96:6b:5e:74:70:d1:5c:4b:ea:bf:41:
97:d3:cc:03:20:a2:9d:4f:80:ed:15:7f:18:5e:05:
4e:47:02:ec:39:33:71:fb:7c:54:d3:9d:a5:69:06:
c4:93:b6:dd:da:6c:62:75:5f:90:d7:46:9a:e6:30:
d8:05:88:ef:c6:bc:5f:04:a8:86:a0:4b:70:92:c2:
7f:96:1d:c3:09:fb:b7:e0:a5:68:09:6c:b4:b7:80:
0a:1e:95:84:11:81:71:03:2b:ec:ad:36:1e:1d:6d:
a8:85:74:7d:c9:b6:30:76:10:99:e2:ee:c0:67:a9:
17:7d:35:78:5d:4d:52:e1:f6:00:c5:4e:8b:3b:d3:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3D:6A:70:1E:15:F7:C0:3F:20:A5:CB:61:7A:DA:64:9C:C9:4A:18
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/ET1qcB4V98A_IKXLYXraZJzJShg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e605::/32
Signature Algorithm: sha256WithRSAEncryption
04:40:3c:30:dc:23:c3:14:b3:46:28:d5:c2:77:eb:4d:58:1c:
8f:87:f7:0a:22:3a:d0:78:af:a4:1b:c7:7c:d7:05:00:0f:92:
b0:cd:14:5b:09:d7:f8:c0:de:39:f3:ae:6c:ca:39:29:24:4a:
69:77:bb:38:af:19:6d:2b:56:db:79:1f:3b:1a:d0:cc:4a:12:
8f:56:e3:b8:01:fe:dd:83:a7:47:58:fd:6a:22:3c:d6:47:20:
64:ff:e5:33:c3:ff:a6:15:4b:88:46:24:4c:be:a8:e4:92:ec:
b8:23:92:d8:6f:21:8c:2c:46:97:7c:60:43:c8:ce:1c:08:20:
c7:da:60:49:3d:ae:91:1f:54:4b:03:be:87:8d:0d:ad:5a:40:
de:92:0f:ff:2e:1e:22:a4:48:52:a7:de:8c:32:d1:f3:16:28:
42:a2:f7:5a:6c:28:9e:43:91:d2:46:8c:23:6e:97:50:42:5d:
cb:c4:61:06:84:c6:3a:8a:07:15:84:5b:ea:1d:ea:1f:df:dd:
70:0d:cb:49:4b:a7:cb:91:b3:cb:96:0e:89:76:b6:c3:4e:4a:
e3:f5:af:1b:f9:a8:07:6e:0a:52:b9:9f:b3:72:10:de:15:b1:
d2:67:d9:70:e9:49:21:e2:b7:90:ab:95:68:1c:c4:91:5d:d8:
63:13:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:31:26 2025 by rpki-client