Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/TUukLx44kjF0H_lfWyE2v7MimXs.roa
File: TUukLx44kjF0H_lfWyE2v7MimXs.roa (raw, json)
Hash identifier: hh6d1KEKUecIQgdhGgz8Bqi6uh15mWOy43tdVfLxrHg=
Subject key identifier: 4D:4B:A4:2F:1E:38:92:31:74:1F:F9:5F:5B:21:36:BF:B3:22:99:7B
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 01964900C921D2626BAE2C1FEB9074B8B92A
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/TUukLx44kjF0H_lfWyE2v7MimXs.roa
Signing time: Fri 18 Apr 2025 13:05:10 +0000
ROA not before: Fri 18 Apr 2025 13:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64286
IP address blocks: 2a01:e100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:00:c9:21:d2:62:6b:ae:2c:1f:eb:90:74:b8:b9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Apr 18 13:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d4ba42f1e389231741ff95f5b2136bfb322997b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:c2:4d:67:d1:0f:fe:3e:16:bc:58:cd:8f:
2a:49:29:03:ba:74:d5:52:b0:2d:2a:d6:a3:e7:99:
3f:bf:7c:ac:10:0a:96:d6:3f:48:b0:93:0a:e9:8a:
e9:9d:77:11:a7:2f:c9:b3:d4:e4:92:66:76:3f:d6:
78:98:57:da:a3:b1:8a:47:b4:45:ef:cd:3d:26:68:
e9:5e:18:e4:93:d9:23:1c:a5:0d:be:bf:19:c5:30:
88:86:08:ba:7f:33:d5:c1:14:a6:d6:1c:c4:90:db:
ac:28:c6:ce:89:49:c1:3a:0d:85:2a:48:11:55:af:
db:38:99:10:57:a1:d5:ab:f9:5c:bf:e7:19:5e:39:
d3:ad:57:09:d2:06:66:4c:7a:4b:be:d3:1e:f6:fa:
e7:2d:c7:fb:aa:9b:fa:ee:85:9f:c4:3e:c2:16:f5:
c8:aa:e3:22:37:3f:2e:3a:19:56:fd:c3:e0:b7:25:
ba:75:64:bc:f5:db:60:25:e3:aa:4e:69:3b:d0:f3:
98:10:35:eb:37:92:55:c6:98:b4:e7:a4:5c:36:96:
f9:a8:0d:7d:ee:3e:f0:58:db:07:b3:d6:96:30:63:
eb:6b:15:d0:be:78:d6:67:30:25:67:ba:59:05:62:
f4:29:a3:24:07:30:dc:95:ac:d9:b9:1f:5f:be:12:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4B:A4:2F:1E:38:92:31:74:1F:F9:5F:5B:21:36:BF:B3:22:99:7B
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/TUukLx44kjF0H_lfWyE2v7MimXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e100::/29
Signature Algorithm: sha256WithRSAEncryption
58:f8:ec:f8:46:69:1e:10:9a:c8:46:d0:7f:c2:b4:b9:a2:49:
0c:53:11:15:cf:15:47:f7:bc:fc:e6:aa:67:dd:8e:f5:37:71:
0b:1c:89:8d:cb:74:eb:5a:ac:5f:50:99:aa:ec:50:d7:c1:6d:
4a:67:9a:41:f8:93:72:1a:d0:69:3e:17:60:2a:08:f0:a1:d3:
a6:f4:e6:27:50:2b:de:36:02:99:ec:d5:45:90:b2:16:83:b3:
d3:4b:d7:5f:bd:ba:97:34:67:88:03:0d:bf:59:bd:84:a2:e3:
49:8e:7a:50:d1:6a:11:10:8c:27:45:ac:9e:32:1e:f8:c7:b3:
02:8a:22:f3:4c:b4:96:e4:d3:d0:ca:67:7b:ae:1b:98:dd:9f:
6f:b8:1b:73:6e:b2:fe:d7:b8:8e:9a:7d:ed:c5:aa:37:03:c6:
fd:d6:51:f4:90:c0:3a:c7:f0:9b:f3:e8:ad:f6:80:f1:cc:ba:
86:63:ff:c4:6d:40:16:80:70:3b:2d:44:ff:71:56:a5:8f:fa:
6d:7a:d5:24:55:49:fb:46:d6:9a:0b:d5:f7:f1:5d:f0:41:39:
87:d1:df:82:a4:7b:7e:05:f1:d4:15:8c:b2:c6:f1:7a:f7:de:
70:57:b6:d1:f8:24:ec:a6:29:3f:f8:e2:2a:cb:b8:05:48:83:
9e:82:cc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:29:27 2025 by rpki-client