Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/atNz0WdRnHANtOvahe4tYSXD9RA.roa
File: atNz0WdRnHANtOvahe4tYSXD9RA.roa (raw, json)
Hash identifier: NRl5RKkOXSKEcAEWPD0OwEYwTxLnIvplSR5oJx7Nj0w=
Subject key identifier: 6A:D3:73:D1:67:51:9C:70:0D:B4:EB:DA:85:EE:2D:61:25:C3:F5:10
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 01978386C9159538D592433033BDAFCE5B9F
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/atNz0WdRnHANtOvahe4tYSXD9RA.roa
Signing time: Wed 18 Jun 2025 14:52:17 +0000
ROA not before: Wed 18 Jun 2025 14:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214965
IP address blocks: 2a05:e9c0:7800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:86:c9:15:95:38:d5:92:43:30:33:bd:af:ce:5b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Jun 18 14:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ad373d167519c700db4ebda85ee2d6125c3f510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:6c:fe:70:f1:e8:7c:79:17:1d:d3:f0:5f:
94:67:1e:48:88:09:36:2f:cb:4c:bb:41:6f:a9:84:
f8:fa:1d:c3:a7:e5:b9:4c:e3:5e:9d:e1:72:9e:c4:
db:7b:41:0d:1f:80:1e:85:1b:03:c9:ed:8a:6c:0f:
ae:01:88:fe:23:9f:01:be:ba:e5:07:f8:f5:5b:ca:
9b:8d:19:d3:08:f5:2f:37:6b:7e:fc:97:71:7a:0a:
01:d6:8a:ae:07:2a:a6:e9:64:fd:02:43:6d:ac:f1:
f4:7f:91:6e:42:af:32:09:5f:37:3b:89:f3:0d:7f:
ad:70:ec:cc:88:ed:fb:a1:f3:a8:22:86:ee:4d:30:
dd:36:cc:39:71:87:1a:43:0b:5c:8e:ab:6f:08:e3:
62:04:45:7e:8f:5c:d3:8b:0e:2a:5d:3a:8f:b2:8a:
9f:8b:3e:12:5c:71:c4:ee:8c:9e:d7:e3:02:10:77:
92:3e:db:08:74:35:7f:18:a3:c0:07:2f:50:06:9d:
73:cf:c0:52:3e:cd:58:dc:20:f4:09:3a:33:4c:87:
a3:f3:79:e8:91:ff:33:8c:ca:d2:cc:16:c4:06:c5:
67:ef:e7:51:3f:70:f8:9b:bd:e6:8f:fc:21:0a:79:
54:f5:00:75:8f:0d:2b:1b:2a:89:56:97:ff:b7:a6:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D3:73:D1:67:51:9C:70:0D:B4:EB:DA:85:EE:2D:61:25:C3:F5:10
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/atNz0WdRnHANtOvahe4tYSXD9RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e9c0:7800::/40
Signature Algorithm: sha256WithRSAEncryption
14:29:67:be:19:af:d2:df:db:20:31:ff:69:fb:ec:2b:d2:be:
f1:0b:18:5a:c6:67:ad:19:4d:97:22:ee:82:6f:03:67:8d:76:
a8:79:0c:95:39:0f:e1:c8:87:d9:92:a1:3f:ef:ed:da:40:98:
bb:29:03:71:b2:50:bd:5c:f5:b1:25:02:4c:69:c4:b5:7d:7a:
6b:6a:bd:1c:ff:b0:63:41:7b:59:28:52:e1:5d:66:d5:b9:e2:
c2:71:13:87:5d:bd:ad:92:bc:e0:c7:18:7b:8d:2e:a4:c9:27:
f3:6d:2c:dd:a1:cc:56:c8:3f:bf:69:e6:ca:b5:42:ef:8a:2e:
a3:14:8f:cd:a1:64:d1:1e:fa:1e:7d:61:47:8a:ff:86:2a:b6:
86:cd:8e:29:4b:de:50:f1:fc:d4:b6:d0:05:a3:77:34:06:f7:
26:a3:ba:2a:bc:eb:2c:f0:8f:e0:d8:24:48:3b:cb:5a:4a:5f:
d7:20:b4:8b:61:1c:53:1b:83:36:59:db:d1:9d:04:6f:7f:ab:
0c:ca:1b:84:23:b9:f5:41:3c:d4:4d:55:b1:c3:e8:d4:79:f0:
36:c5:bd:b7:52:5b:ff:aa:fc:74:2e:f8:62:0f:43:29:d9:84:
a9:3b:4a:74:04:ae:f9:af:7d:c4:fa:dd:4d:f6:ea:5c:2f:b4:
60:33:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:12:15 2025 by rpki-client