Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GZEEB7JcELHG1YclxFmnOMHpT2Y.roa
File: GZEEB7JcELHG1YclxFmnOMHpT2Y.roa (raw, json)
Hash identifier: ug/1PLbuFRwrcH4DDPKFDVKzO0NuRjYepePxOWA3xMg=
Subject key identifier: 19:91:04:07:B2:5C:10:B1:C6:D5:87:25:C4:59:A7:38:C1:E9:4F:66
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01965A34C0FAC5B2C3FECD04B9AF2DF11E17
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GZEEB7JcELHG1YclxFmnOMHpT2Y.roa
Signing time: Mon 21 Apr 2025 21:15:28 +0000
ROA not before: Mon 21 Apr 2025 21:15:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41171
IP address blocks: 2a13:c242::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:34:c0:fa:c5:b2:c3:fe:cd:04:b9:af:2d:f1:1e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 21 21:15:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19910407b25c10b1c6d58725c459a738c1e94f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:e9:77:02:43:7d:bd:23:75:cb:6c:e2:5b:
f8:b9:f0:60:2c:1e:99:20:ae:fa:7c:bd:eb:6d:b4:
4a:88:ab:24:13:c1:41:29:d3:77:bb:59:d6:d9:42:
fb:aa:8a:ab:a8:2a:c8:07:2d:0b:34:da:ee:6e:fd:
51:05:c9:d7:18:d8:d9:a6:12:71:50:a3:3f:da:31:
07:2f:12:2e:4f:1b:f9:2e:76:a6:62:d7:08:59:cd:
1d:dc:0e:19:d5:ea:66:cf:ac:f8:01:54:7c:52:31:
98:0a:f0:3c:66:87:61:6d:f8:a4:57:fc:8d:7a:1f:
e9:34:22:49:24:b0:11:f9:7a:55:7e:a9:fd:0b:29:
00:1a:d1:bb:59:ae:be:d3:8d:ec:78:5e:96:47:26:
c0:e1:bc:80:c5:89:43:d1:ea:d8:8a:13:48:70:8f:
39:c4:a9:af:d3:39:36:ec:4e:01:ca:ab:42:26:bb:
81:6c:be:fa:32:2f:5e:56:19:88:fb:79:e8:d8:08:
96:14:7f:e2:fd:6c:1a:e6:ca:88:25:3b:50:33:c3:
1c:5d:66:43:6d:f4:ca:0b:69:c4:7e:91:fe:7e:5f:
e7:c8:37:37:21:47:da:3d:bf:38:bf:62:94:54:0f:
49:7c:fc:79:71:e7:fc:d0:c2:54:e6:ac:f3:9a:d8:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:04:07:B2:5C:10:B1:C6:D5:87:25:C4:59:A7:38:C1:E9:4F:66
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GZEEB7JcELHG1YclxFmnOMHpT2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c242::/33
Signature Algorithm: sha256WithRSAEncryption
93:11:3c:87:d2:87:2c:35:c9:f4:fe:1b:65:40:d3:4d:9f:07:
b9:bc:af:a1:94:07:5d:b6:ec:c9:7c:cc:12:65:14:04:ec:bd:
a2:92:ca:7f:9d:d9:bc:29:6e:48:c3:ea:e0:6b:23:a2:78:b0:
a4:a5:31:10:d4:10:a8:ac:a2:15:05:40:ca:0c:b8:a6:84:f8:
ab:e1:8f:47:eb:6e:35:f7:a0:8e:be:85:f3:c2:35:f7:ec:bd:
67:3c:48:73:37:6d:52:bd:67:7b:d8:eb:c0:ed:41:df:67:2e:
08:5c:60:71:49:ee:3d:7b:54:41:cf:c6:67:07:bd:d6:5c:5e:
b5:98:e9:83:9a:f5:8b:9e:5b:b4:3b:83:66:78:19:a7:90:c9:
83:b0:28:fd:e1:6d:3c:db:6b:d6:c0:c8:a2:9a:b6:02:8c:94:
a8:96:78:8b:2e:5a:85:60:c7:bb:81:2f:33:f3:36:39:02:b0:
d6:53:c8:44:23:c3:67:ad:c4:33:32:74:ee:ce:67:41:4d:b4:
38:97:ef:2d:60:89:21:28:1f:a4:c2:89:4d:94:f3:a9:94:f4:
e7:2c:89:a4:22:ac:9b:f9:6f:fb:93:a4:60:cd:98:a1:cb:7f:
78:ac:f5:0f:a0:42:92:7b:72:93:d3:f9:6b:6f:50:16:fc:85:
c4:23:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:34:34 2025 by rpki-client