Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/dcRsvF_oemW3H50JvCLQ4BVZYms.roa
File: dcRsvF_oemW3H50JvCLQ4BVZYms.roa (raw, json)
Hash identifier: FAyj8KsdNZUhgag1yQLUlgcxb906IkzoiWzlQwN0S/g=
Subject key identifier: 75:C4:6C:BC:5F:E8:7A:65:B7:1F:9D:09:BC:22:D0:E0:15:59:62:6B
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0197A8395A370BE7BE39CEFE15D67E53C981
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/dcRsvF_oemW3H50JvCLQ4BVZYms.roa
Signing time: Wed 25 Jun 2025 17:53:40 +0000
ROA not before: Wed 25 Jun 2025 17:53:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 2a12:4140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:39:5a:37:0b:e7:be:39:ce:fe:15:d6:7e:53:c9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Jun 25 17:53:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75c46cbc5fe87a65b71f9d09bc22d0e01559626b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4b:b1:15:fe:40:ed:09:44:60:c4:51:d0:b2:
66:6b:07:71:14:4f:5e:52:21:62:bc:33:48:53:2e:
21:5e:d8:37:f9:9c:79:f8:d0:8e:35:f6:f7:78:ca:
be:26:21:ff:c2:d1:81:7c:b3:c4:87:8e:37:7b:1a:
d0:20:0e:78:0b:2c:a3:ce:08:3c:57:5c:70:96:46:
a4:a2:dd:55:9e:e5:f9:1e:47:0b:0c:d0:08:87:04:
40:37:50:dd:42:7c:b1:84:53:31:a4:e0:fd:76:01:
f2:1d:54:92:1e:3e:fd:12:6a:10:02:d6:4c:8d:12:
90:cc:83:5f:e9:f3:2c:68:f7:97:f4:30:08:ef:a4:
2f:dc:66:3a:78:9f:63:a7:a1:82:0c:e2:21:35:fd:
3e:20:ee:ee:93:3c:73:ef:52:04:78:1c:9d:fa:dd:
bf:bb:12:9e:99:de:1b:0d:91:03:09:87:44:6e:b5:
9a:36:5e:6f:b8:9d:cd:92:9b:a4:d8:ae:8c:11:a3:
49:fc:48:8c:cb:30:66:d5:9c:64:53:26:5f:90:9b:
95:9b:5b:0b:73:bf:10:f4:af:23:33:c5:d2:8f:a1:
8f:63:a6:a0:3b:45:dd:34:bf:fc:15:33:2c:a5:79:
92:5d:7a:c7:83:2f:5e:fd:a0:04:dc:7b:3a:22:13:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C4:6C:BC:5F:E8:7A:65:B7:1F:9D:09:BC:22:D0:E0:15:59:62:6B
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/dcRsvF_oemW3H50JvCLQ4BVZYms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4140::/32
Signature Algorithm: sha256WithRSAEncryption
7f:d0:67:38:bb:70:45:dc:43:be:41:4c:e2:b2:dd:1e:38:23:
56:29:86:52:56:98:56:ce:fe:ef:cb:63:ae:9c:df:d1:7e:ad:
99:04:33:d9:d9:00:e9:b1:68:6a:71:9c:47:a5:83:32:01:c8:
81:17:ea:9d:c7:8c:ba:20:37:fa:89:13:7c:33:99:94:90:b9:
6f:0e:b6:b6:99:6d:a5:b1:cb:78:03:46:c8:9d:ef:a0:ef:75:
f1:77:2e:6b:ed:76:0c:3e:a1:21:b1:8b:fb:6c:69:66:36:82:
67:ec:2b:bb:a0:63:d1:7f:c4:5d:99:09:d8:3c:fb:ec:93:5a:
10:8b:81:3b:e6:d2:57:de:5b:ba:5b:e4:14:9f:c1:ce:01:30:
4e:19:bc:d1:61:8d:fd:e6:c4:3e:5d:08:bc:0e:55:b5:d3:ea:
0d:60:11:68:97:84:d0:f0:2c:c1:37:e3:cf:9c:cd:83:8b:94:
cb:c2:7f:b9:57:db:e8:c2:00:f5:30:3d:42:59:c1:3b:15:43:
a1:13:22:15:34:7e:9d:92:a9:e5:b3:db:2a:61:7b:56:8a:a1:
77:01:68:04:24:3b:03:09:5c:b8:25:4d:26:5d:79:70:47:d0:
6f:6f:2f:c7:58:4b:c2:ee:19:8a:ad:ea:6d:ec:bd:75:1e:de:
39:94:83:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:15:11 2025 by rpki-client