Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/aiQzKvCLxoc-jbSifPWI0H5s0EY.roa
File: aiQzKvCLxoc-jbSifPWI0H5s0EY.roa (raw, json)
Hash identifier: 2MNoWPbLxGTHxE75GVGoT7L//M3cbhmYnAI81N0/HEk=
Subject key identifier: 6A:24:33:2A:F0:8B:C6:87:3E:8D:B4:A2:7C:F5:88:D0:7E:6C:D0:46
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 0196642FB52CBAB92663695354E0DF527C79
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/aiQzKvCLxoc-jbSifPWI0H5s0EY.roa
Signing time: Wed 23 Apr 2025 19:46:10 +0000
ROA not before: Wed 23 Apr 2025 19:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213333
IP address blocks: 2001:67c:1520::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:64:2f:b5:2c:ba:b9:26:63:69:53:54:e0:df:52:7c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Apr 23 19:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a24332af08bc6873e8db4a27cf588d07e6cd046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:11:26:15:c6:31:99:66:48:f8:b5:69:8f:32:
0b:db:2f:6e:c2:de:fc:11:a8:f5:c5:45:b5:52:fb:
28:aa:7a:0c:b2:9a:36:21:97:8c:f8:b7:ce:07:87:
b1:13:c9:be:14:7b:ed:8f:65:ce:4a:46:cf:48:e9:
9e:45:2a:c5:45:80:10:3f:c7:d3:3d:d2:36:a1:f5:
9a:dc:67:cb:b6:d5:d6:f3:f4:e7:d3:05:e3:3c:f4:
c0:6a:35:58:97:d2:c9:5e:4f:83:a9:5a:81:a0:95:
4a:8d:b3:31:d0:e9:e4:9b:98:41:78:72:6a:82:b4:
ef:01:97:b9:b2:4e:9c:6b:71:3b:ad:10:89:af:a5:
b9:89:37:e7:9f:3c:c8:bb:af:72:c9:1d:62:2c:69:
da:ae:a2:4b:cd:a6:6d:aa:d0:25:46:2b:46:f6:ce:
7e:fc:bd:03:af:e9:66:1a:81:77:05:49:3e:35:a9:
31:46:af:8a:4f:0a:e0:95:d9:18:68:6b:fa:e3:01:
36:cd:b9:96:60:69:9a:d3:34:3d:99:48:6f:2c:fb:
4e:ec:ff:5c:24:74:4a:ea:e6:71:dd:8c:ac:71:ae:
f0:5d:da:19:29:13:3b:3f:88:1d:7f:fc:14:26:ea:
4b:61:43:c8:ce:25:3f:12:5b:40:3e:4d:57:84:28:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:24:33:2A:F0:8B:C6:87:3E:8D:B4:A2:7C:F5:88:D0:7E:6C:D0:46
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/aiQzKvCLxoc-jbSifPWI0H5s0EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1520::/48
Signature Algorithm: sha256WithRSAEncryption
7c:2d:bc:94:ca:57:70:ba:61:57:86:a4:91:7c:57:48:9b:ed:
45:a7:c4:5b:b3:80:96:34:af:57:54:4b:cb:a1:8f:bb:7e:2a:
4c:80:05:55:30:46:c0:60:03:bd:95:b0:3d:0d:52:30:99:ca:
02:7d:b4:a7:11:6b:5a:7e:c9:e4:14:70:43:41:a7:61:7a:f3:
bf:71:54:02:99:d3:db:2a:98:17:44:22:b0:62:4e:b3:71:03:
6a:6b:91:49:40:6f:69:c0:e8:1a:a7:b4:8a:5d:9a:5e:92:e7:
56:4f:14:5f:2c:06:bf:e2:16:23:9a:6c:7c:97:88:84:d6:32:
2c:70:ad:5d:05:a1:44:3c:1f:79:f7:86:86:b7:66:33:19:d5:
4d:ca:b9:d7:c6:98:80:68:e5:b9:90:7d:b1:2e:78:74:68:d5:
96:cb:ac:bb:32:fe:2a:03:4b:f4:54:94:4a:64:a7:1e:39:05:
5d:ea:f1:c9:f0:08:b9:15:5c:5f:8b:68:dc:cb:5f:d0:36:4d:
68:fc:10:95:47:d9:bb:a7:f9:cc:85:47:a3:e8:a5:cb:41:67:
13:7d:e4:d9:a7:4b:41:16:3c:19:c2:a5:73:46:02:a9:8a:8e:
dd:8e:5a:c0:cb:a0:ec:73:be:59:34:78:df:2d:d0:7d:48:9d:
58:d7:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:22:52 2025 by rpki-client