Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/qHjRyI_syvpq7VXPCdqhN1kkh6w.roa
File: qHjRyI_syvpq7VXPCdqhN1kkh6w.roa (raw, json)
Hash identifier: gAmry4qMuz8BF4gHC1KD5lh+OIx99upbjuSefv8H7lU=
Subject key identifier: A8:78:D1:C8:8F:EC:CA:FA:6A:ED:55:CF:09:DA:A1:37:59:24:87:AC
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 019687D95928622105429F544DB47D2317C3
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/qHjRyI_syvpq7VXPCdqhN1kkh6w.roa
Signing time: Wed 30 Apr 2025 17:58:10 +0000
ROA not before: Wed 30 Apr 2025 17:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61400
IP address blocks: 2a11:647::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:d9:59:28:62:21:05:42:9f:54:4d:b4:7d:23:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Apr 30 17:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a878d1c88feccafa6aed55cf09daa137592487ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:18:c7:45:07:47:e9:a0:8e:4c:7b:45:5e:d2:
7b:ca:71:61:d6:13:71:da:67:df:ae:22:df:e7:ec:
de:68:46:a4:20:ae:0f:db:18:75:21:e6:6e:2c:00:
ad:b3:ef:d5:95:8b:56:09:2d:a5:e4:43:f9:36:3c:
f8:dc:7b:84:43:bc:0d:46:0d:eb:49:89:ec:5a:16:
0f:00:a4:d5:5f:ab:85:ec:02:54:75:e6:79:5f:bb:
5b:cd:8d:e3:f1:f3:19:18:82:98:80:90:21:99:59:
0c:0f:46:9d:f8:f5:f4:24:fc:c3:5e:1a:c2:aa:4a:
fc:94:25:8d:d4:0e:a7:fe:b2:0b:b8:72:89:62:83:
7f:f5:d6:b1:d2:67:c2:0b:69:49:93:55:c1:99:7d:
c7:b0:cf:10:2f:5e:54:5c:69:4f:e5:9e:f5:30:d8:
4e:61:6b:16:8c:96:eb:e2:96:75:a0:6a:74:9f:47:
e7:8d:96:3c:c6:48:56:90:67:2a:50:33:3b:f3:16:
2d:84:0c:1c:09:77:7a:77:93:6f:4d:63:a9:65:da:
88:84:0b:88:f5:48:70:23:1b:a7:9b:e1:dd:5f:2a:
16:bd:da:e3:42:35:f5:99:61:88:6d:e0:d8:13:87:
28:a8:1b:d6:c4:de:0c:9c:5c:ef:8e:47:cd:82:91:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:D1:C8:8F:EC:CA:FA:6A:ED:55:CF:09:DA:A1:37:59:24:87:AC
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/qHjRyI_syvpq7VXPCdqhN1kkh6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:647::/32
Signature Algorithm: sha256WithRSAEncryption
18:9f:34:f0:0d:bf:9c:1a:36:08:71:67:2b:29:a3:2b:4f:0c:
75:d6:fa:08:30:1c:75:c5:fc:a6:eb:10:84:57:cd:59:70:e8:
80:d0:dd:0a:9e:f1:2c:1f:91:5c:fc:f6:01:a8:37:5b:74:b0:
1d:ee:11:93:8f:1c:90:94:09:9c:b4:9e:ef:3b:05:06:4d:ff:
7d:70:30:66:6e:d1:f2:b5:7a:d3:61:02:34:e5:a9:b5:31:88:
f7:1d:80:6e:37:36:8f:5e:65:80:c0:c8:4f:91:bd:48:00:cf:
84:8f:79:34:23:5d:c8:17:aa:30:05:af:af:f1:35:42:49:93:
30:11:32:99:87:96:ef:c3:53:d5:7a:7d:f0:bf:50:82:1e:db:
9c:20:07:70:4d:9d:1b:7e:21:be:d1:8f:68:93:41:85:94:b9:
8b:85:f7:9c:03:3c:ce:70:09:a7:31:ad:c9:f1:0f:22:00:21:
41:4f:13:6c:9b:09:5b:5e:18:66:e3:b5:f5:aa:de:8d:58:1c:
eb:b8:66:45:5c:df:9e:7c:1a:92:62:91:5f:43:9b:66:bf:71:
54:20:c6:02:1e:0a:7e:a2:fd:8e:e1:e0:e4:c4:e7:a3:d2:41:
82:e5:a7:c1:d6:d4:8c:1a:14:a5:e6:ca:93:19:2a:d2:d0:4c:
e4:be:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:17:58 2025 by rpki-client