Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-BLTsv7IiOzUd5Cmg3PI62yN5FY.roa
File: 1-BLTsv7IiOzUd5Cmg3PI62yN5FY.roa (raw, json)
Hash identifier: vM/Ixfy+NSoknTBB0PDoGhX3P2RHeZU6fGzYJ103yUI=
Subject key identifier: F8:12:D3:B2:FE:C8:88:EC:D4:77:90:A6:83:73:C8:EB:6C:8D:E4:56
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01965A34C378938AB49999F7212B9071430B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-BLTsv7IiOzUd5Cmg3PI62yN5FY.roa
Signing time: Mon 21 Apr 2025 21:15:29 +0000
ROA not before: Mon 21 Apr 2025 21:15:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206847
IP address blocks: 2a13:c241:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:34:c3:78:93:8a:b4:99:99:f7:21:2b:90:71:43:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 21 21:15:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f812d3b2fec888ecd47790a68373c8eb6c8de456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:22:3d:89:cc:50:d4:79:46:93:61:bf:c4:
ca:c3:1f:71:21:ab:25:58:cd:ae:ab:4c:0d:46:a5:
38:a7:7b:22:91:1e:a2:80:00:a0:81:09:28:ac:9d:
de:0c:8b:7e:52:e5:5e:db:df:20:30:af:69:74:8c:
e7:1c:53:b8:52:23:fc:e8:54:2a:82:01:9c:7c:da:
76:d0:5c:c1:4e:c5:86:49:a8:cb:59:a2:94:b4:70:
cf:e9:0d:cb:17:dc:9a:9b:e0:4b:07:40:40:ab:27:
f7:d4:b2:11:50:77:1c:7d:07:97:ff:88:ce:3c:62:
3f:97:d5:c3:53:c2:d4:a0:6d:41:1f:e1:64:b0:e3:
3c:3f:7e:6f:9d:c8:b9:05:ae:f9:46:fb:c6:4e:e8:
2b:f2:95:09:d9:94:b5:f4:2d:ee:13:88:7f:84:6c:
ae:ad:d7:ad:5b:d2:60:fc:23:41:da:19:f6:87:09:
18:19:26:64:e8:f1:17:81:69:35:09:9c:2a:15:2a:
1b:65:e3:d5:52:3b:30:b8:cc:43:31:8a:e8:b8:76:
26:69:16:14:a7:90:15:23:a6:b8:68:9b:68:cc:3a:
f2:fd:fd:52:a9:db:fc:30:b9:23:45:bc:19:c1:42:
94:26:33:d0:de:51:2d:f6:b1:c9:e5:d5:0f:7c:ac:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:12:D3:B2:FE:C8:88:EC:D4:77:90:A6:83:73:C8:EB:6C:8D:E4:56
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-BLTsv7IiOzUd5Cmg3PI62yN5FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c241:8000::/33
Signature Algorithm: sha256WithRSAEncryption
17:e0:4b:53:58:c4:65:51:75:b7:35:c6:9a:3d:6f:0c:ff:66:
f3:cc:c9:b7:e5:b4:2c:e1:3b:07:d2:0e:b5:54:1e:af:85:e7:
71:e0:ce:30:3a:8e:50:be:ab:3b:07:dd:65:80:bb:3f:ce:d1:
06:f0:ea:b6:f2:31:44:01:6c:14:40:60:28:4e:cd:25:8c:5e:
18:8b:d4:15:7c:b4:6d:51:75:31:cb:4b:39:68:f5:11:80:66:
92:2a:a1:6a:c1:93:1b:1c:8f:fa:e5:b5:7f:29:17:f4:4e:97:
b4:8a:e9:04:78:35:4b:9f:90:2f:eb:0f:4f:95:05:16:1c:b3:
26:bd:e5:4e:7f:54:16:b7:9b:bf:16:e4:dc:d5:b0:14:7f:1f:
39:96:e4:b3:be:b5:33:8b:c8:42:05:31:bc:87:42:79:90:59:
32:2c:a9:55:69:39:1a:7b:ea:9d:44:37:2f:b0:a9:3f:1e:d8:
1c:94:16:8d:15:c2:8c:fb:7c:80:41:58:6a:2e:bc:41:c4:33:
45:bf:94:10:f6:85:ec:da:8f:99:f1:c8:ea:66:75:28:c7:f4:
01:21:22:3e:01:ce:c5:e9:8d:2e:92:82:f1:5f:6b:27:5c:72:
28:51:c5:bb:d0:8f:cc:b1:1e:22:1f:d7:4d:20:d0:ff:43:96:
2c:61:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:18:42 2025 by rpki-client