Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/AmTrNmiUz3PQJSPRxeGKui--CsM.roa
File: AmTrNmiUz3PQJSPRxeGKui--CsM.roa (raw, json)
Hash identifier: D2X8Ub7d1XFRGUtdtCWVBQi+s/6Li/HzCnTuVF4H0hw=
Subject key identifier: 02:64:EB:36:68:94:CF:73:D0:25:23:D1:C5:E1:8A:BA:2F:BE:0A:C3
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0197592845285DA7BF6104E9A47788FEFF7A
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/AmTrNmiUz3PQJSPRxeGKui--CsM.roa
Signing time: Tue 10 Jun 2025 09:25:00 +0000
ROA not before: Tue 10 Jun 2025 09:25:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 2a06:b3c0::/29 maxlen: 29
2a0f:e000::/29 maxlen: 29
2a11:1140::/29 maxlen: 29
2a14:7e00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:28:45:28:5d:a7:bf:61:04:e9:a4:77:88:fe:ff:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jun 10 09:25:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0264eb366894cf73d02523d1c5e18aba2fbe0ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:b0:13:29:f6:23:b1:76:1a:46:97:72:bb:
f0:8d:ab:74:50:4d:e4:5b:92:9e:c6:70:db:55:71:
85:30:ce:20:d9:59:6f:02:f1:f7:8b:3d:6b:e2:2c:
44:82:87:2f:a0:db:63:2d:d9:2e:0d:c6:77:73:5a:
b7:d9:85:e8:24:7a:54:15:7a:ce:26:3c:b5:5d:d3:
77:c2:e0:b9:f0:a7:9c:d2:56:7d:ca:e1:5c:4a:2a:
ad:67:16:71:79:80:25:7b:79:f7:37:e0:03:df:1f:
ab:79:ad:cf:69:7b:76:e1:07:20:f0:6d:f7:66:4b:
53:69:ad:ae:4f:f5:53:38:39:25:e0:04:42:e7:73:
2b:4b:6e:5b:74:d6:90:65:92:0e:41:74:fc:4f:aa:
4e:2d:1f:b8:10:13:ef:ff:2b:fb:a3:8b:8b:75:dd:
63:b0:b0:2d:84:9d:2b:30:54:a3:52:c8:e6:8f:74:
f9:a1:93:35:32:ee:b0:8d:ea:fb:f9:36:78:55:d0:
6e:0f:75:a7:a2:76:bb:dd:c7:7b:65:b2:6f:11:05:
d1:78:96:84:7d:4f:ff:4f:d5:da:5c:99:b5:a2:77:
43:c1:2a:44:ff:c0:36:d0:2f:08:f0:54:4a:33:e6:
05:2b:59:a2:3c:af:5e:1e:e8:20:b8:94:07:52:46:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:64:EB:36:68:94:CF:73:D0:25:23:D1:C5:E1:8A:BA:2F:BE:0A:C3
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/AmTrNmiUz3PQJSPRxeGKui--CsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
2a0f:e000::/29
2a11:1140::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
c4:f6:95:07:3f:67:40:00:07:8f:49:8a:75:7a:06:6d:2c:d2:
07:c5:d0:40:f2:97:51:6c:0d:01:60:36:e8:29:31:37:9a:be:
e0:60:f2:c6:be:d4:19:06:e7:ca:15:83:e6:b9:c0:67:3c:76:
c7:cb:a7:0e:ba:89:55:fe:09:30:dc:c5:13:6f:f4:ed:9e:97:
03:2e:9e:ba:31:38:ac:0f:7d:ab:f7:45:71:30:6e:53:de:5c:
86:17:7d:b0:c7:38:db:7d:59:e0:1a:5a:1d:25:4e:11:d3:b5:
83:72:01:e3:d3:49:ce:59:c4:47:f1:f2:fb:7a:de:92:60:75:
72:98:5a:79:b8:ff:84:ff:29:ca:f2:99:34:1d:a6:45:ca:2e:
8b:b4:88:4b:f2:93:61:75:48:10:b3:af:06:e5:41:36:16:01:
68:98:af:ff:37:a1:49:65:45:ad:26:02:ff:59:94:d9:e2:20:
31:cc:0f:33:4f:c5:0e:93:a2:85:64:4e:4c:35:c7:4d:5c:5a:
f6:a2:41:63:9a:61:09:c5:09:8f:59:6e:85:ac:37:32:88:fc:
4a:65:74:21:1d:d7:ad:1b:04:95:d4:f3:bb:91:af:94:78:d6:
a7:0c:be:88:91:27:0f:93:ec:84:fd:58:01:e3:7b:33:29:1d:
e9:9b:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:38:23 2025 by rpki-client