Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/kR5NdsNqqfo5tyE4W3hIqbX1QwA.roa
File: kR5NdsNqqfo5tyE4W3hIqbX1QwA.roa (raw, json)
Hash identifier: S/xdI0Kyn6BHZ98j2NfElOsLltcm+gGhRpxAQgHHeTc=
Subject key identifier: 91:1E:4D:76:C3:6A:A9:FA:39:B7:21:38:5B:78:48:A9:B5:F5:43:00
Certificate issuer: /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial: 0197601D3BD83302F254A8F650EE7D7F56CF
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/kR5NdsNqqfo5tyE4W3hIqbX1QwA.roa
Signing time: Wed 11 Jun 2025 17:50:17 +0000
ROA not before: Wed 11 Jun 2025 17:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215593
IP address blocks: 2a0e:8340::/48 maxlen: 48
2a0e:8340:1::/48 maxlen: 48
2a0e:8340:2::/48 maxlen: 48
2a0e:8340:3::/48 maxlen: 48
2a0e:8340:4::/48 maxlen: 48
2a0e:8341::/32 maxlen: 32
2a0e:8342::/32 maxlen: 32
2a0e:8343::/32 maxlen: 32
2a0e:8344::/32 maxlen: 32
2a0e:8345::/32 maxlen: 32
2a0e:8346::/32 maxlen: 32
2a0e:8347::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:1d:3b:d8:33:02:f2:54:a8:f6:50:ee:7d:7f:56:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Validity
Not Before: Jun 11 17:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=911e4d76c36aa9fa39b721385b7848a9b5f54300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:64:84:3e:aa:8d:b7:78:e2:b2:f2:15:66:
63:c1:8b:b9:80:cf:5a:ac:17:a6:85:67:ca:53:4e:
d3:13:9a:13:0b:60:a1:97:ea:f7:b8:71:d9:9c:b6:
c2:22:68:ae:4d:73:9f:db:7f:e9:5a:0b:1e:92:ee:
17:2e:7d:24:37:e9:e9:1f:c5:03:89:5b:7b:98:df:
19:eb:9c:1f:cb:98:b9:8d:3d:40:21:9f:55:f5:79:
41:ff:b9:2c:79:ed:a7:82:51:b3:8e:f2:d1:06:c0:
6d:fb:b5:4c:76:50:fb:49:c9:c2:b8:99:de:db:ce:
0b:be:5b:f1:ed:1c:e1:e2:7f:1f:60:82:5b:25:3f:
06:34:0c:ca:26:c3:f5:d5:2e:fc:24:5d:ba:76:e0:
9c:f7:32:2b:17:ff:0e:14:06:68:07:6d:3c:b6:7e:
42:cb:08:4a:d0:97:84:a3:4b:4a:94:c0:75:8c:af:
58:72:62:4e:86:af:f3:57:90:8f:72:94:57:b0:f0:
cf:b3:ad:0c:51:93:5b:79:26:c8:fe:6d:75:3b:b2:
5e:ce:34:e5:ec:79:35:05:df:c5:34:bd:f7:ad:98:
c4:ee:d9:1f:f8:5e:05:09:3c:bb:54:0f:75:38:15:
3c:1e:2b:a8:4d:79:23:b0:99:e8:b5:84:d1:51:46:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1E:4D:76:C3:6A:A9:FA:39:B7:21:38:5B:78:48:A9:B5:F5:43:00
X509v3 Authority Key Identifier:
keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/kR5NdsNqqfo5tyE4W3hIqbX1QwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8340::-2a0e:8340:4:ffff:ffff:ffff:ffff:ffff
2a0e:8341::-2a0e:8347:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6c:d8:23:1b:82:b3:00:99:e7:26:73:b2:67:6a:11:b7:67:57:
46:bd:3d:73:d2:ec:f7:b2:f0:2e:cf:38:75:fb:f0:56:eb:9f:
b7:ab:60:c4:22:87:5f:ba:1c:52:54:ad:14:de:79:ac:de:18:
09:86:cd:0e:33:8a:02:b5:a2:5d:d9:8e:28:13:2c:19:62:14:
48:ea:fb:4a:9b:e9:72:e4:8d:59:a6:19:d8:3e:94:82:eb:78:
03:d2:8d:cb:a9:0d:6a:a6:69:02:b5:5f:1e:df:6b:0d:62:b5:
06:ce:58:df:7f:28:76:fb:5a:d7:01:a4:36:53:ac:a1:30:0f:
26:e4:3d:c7:86:33:19:9d:3a:19:fc:24:cd:73:ce:25:17:31:
b3:ab:fd:73:f6:fe:36:a4:bd:62:c5:84:c1:b0:40:19:bb:40:
89:fb:c2:b7:7c:83:33:8f:6c:46:42:24:bb:ef:83:ae:aa:03:
71:5c:08:81:4c:f0:bd:b1:2f:f3:87:d1:82:49:96:da:e4:af:
79:b7:d9:a8:d4:22:ae:07:81:bc:87:5a:d4:0a:f0:1e:d3:08:
9a:78:5c:90:d4:3e:57:c1:9a:ef:e2:46:13:d3:8f:ac:7f:a4:
ec:1a:1d:18:36:b9:c1:67:dd:2e:cd:d6:20:f8:11:5e:3f:ab:
6e:8c:2a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:14:28 2025 by rpki-client