Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DiNy_2NE6UYhuH5PNFdl5_pfH6M.roa
File: DiNy_2NE6UYhuH5PNFdl5_pfH6M.roa (raw, json)
Hash identifier: yDIDoFRutp4A1iyFNKJVMbrMN8eXQQN4oy5K7RKsFkc=
Subject key identifier: 0E:23:72:FF:63:44:E9:46:21:B8:7E:4F:34:57:65:E7:FA:5F:1F:A3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019711251FD66BFFA37F2B2F634E040796FE
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DiNy_2NE6UYhuH5PNFdl5_pfH6M.roa
Signing time: Tue 27 May 2025 09:48:54 +0000
ROA not before: Tue 27 May 2025 09:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204872
IP address blocks: 2a05:9a41::/32 maxlen: 32
2a13:c441::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:25:1f:d6:6b:ff:a3:7f:2b:2f:63:4e:04:07:96:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 27 09:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e2372ff6344e94621b87e4f345765e7fa5f1fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:5b:c9:7c:6a:75:3e:74:1d:7b:82:d5:b4:
bb:73:02:78:3c:46:ef:e8:63:8a:4a:1d:41:b6:98:
2d:9d:90:91:b9:92:36:f0:48:fd:55:34:49:a8:6f:
db:bc:ac:c8:16:f1:41:9f:ca:c3:76:f4:d5:7c:c7:
97:6d:ca:48:bd:b8:bf:be:2f:f6:23:88:4e:1f:9e:
75:b9:26:0f:a5:55:0d:1f:2b:23:8d:d4:ae:47:5c:
1e:91:f4:94:07:b0:01:60:7d:0a:1f:03:98:e1:c3:
01:5f:55:52:ba:66:b6:ad:95:dc:a8:8f:cf:57:b1:
1c:f2:a0:07:41:1e:16:91:2d:33:bf:58:d6:c7:16:
f3:66:00:48:7e:b2:a5:89:2f:b3:0f:db:0b:72:8b:
01:bd:bf:18:51:14:ba:eb:4c:1c:88:6b:00:4a:ef:
fb:f0:68:45:ad:e2:de:2b:f0:7f:62:1d:38:8f:c0:
51:3a:d1:94:43:94:8a:84:86:73:80:e3:5e:95:8c:
ed:3c:40:8e:b3:5f:4f:dd:1b:d7:de:a6:d4:27:a9:
dc:dc:dc:bd:e4:70:8a:53:5d:8f:c9:95:8e:97:b9:
39:6f:26:e3:24:f5:22:7e:e6:fa:35:81:7f:f8:6f:
6e:61:45:9f:09:80:8c:8a:c9:8f:a3:cd:38:0a:44:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:23:72:FF:63:44:E9:46:21:B8:7E:4F:34:57:65:E7:FA:5F:1F:A3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DiNy_2NE6UYhuH5PNFdl5_pfH6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a41::/32
2a13:c441::/32
Signature Algorithm: sha256WithRSAEncryption
89:56:fb:66:8e:91:6e:93:c0:d1:2d:f0:75:64:1a:21:7a:c0:
64:4c:99:70:db:29:82:9b:3f:17:2e:65:dd:c6:b8:23:4d:69:
08:49:90:24:42:35:73:a6:55:4e:c9:23:55:87:60:13:29:16:
fe:d6:89:64:93:2b:37:c2:95:52:eb:57:0c:5c:32:2c:bb:ec:
47:1c:da:8d:dc:a6:8f:4b:18:11:f4:c7:65:9d:fb:16:d3:84:
de:d6:7e:dc:3d:e6:94:4d:90:65:4e:15:92:89:b4:70:95:6b:
c0:ba:20:88:fe:3e:dd:72:a5:24:e9:ac:f3:36:45:8c:f0:87:
e1:cf:92:da:f1:70:c8:6a:4a:53:a3:c9:62:6b:4f:d5:71:22:
00:40:74:3a:9c:c7:2f:6f:75:1b:52:86:87:0f:b1:fe:66:5e:
12:9d:14:ea:12:79:7e:3d:10:a9:46:b9:32:fb:4b:f3:58:f7:
77:e8:18:fe:07:4c:bc:db:41:c0:4a:6f:d7:67:9b:61:d9:fe:
85:72:56:ca:c8:7b:5a:e3:d3:07:db:ac:4c:a1:d3:e5:13:e1:
cc:0a:b4:4c:44:90:ba:e6:46:a9:ae:f5:0c:8f:29:18:89:a9:
e4:8a:82:ff:18:fd:6b:01:94:4a:db:6e:fc:06:d0:89:58:8b:
d6:24:6b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:55:16 2025 by rpki-client