Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/f2urCIWz87yIezj6Pno23pfA-OU.roa
File: f2urCIWz87yIezj6Pno23pfA-OU.roa (raw, json)
Hash identifier: /pCx+bjxg8F7m97RoAjahNPfu+FfkDJhm3tPiKNautQ=
Subject key identifier: 7F:6B:AB:08:85:B3:F3:BC:88:7B:38:FA:3E:7A:36:DE:97:C0:F8:E5
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01965A34C27F5E8F5C9EDD59D3C880B8020B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/f2urCIWz87yIezj6Pno23pfA-OU.roa
Signing time: Mon 21 Apr 2025 21:15:29 +0000
ROA not before: Mon 21 Apr 2025 21:15:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206085
IP address blocks: 2a13:c242:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:34:c2:7f:5e:8f:5c:9e:dd:59:d3:c8:80:b8:02:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 21 21:15:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f6bab0885b3f3bc887b38fa3e7a36de97c0f8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:73:5f:b3:e6:38:d9:bc:00:fb:33:a8:4b:
7d:85:8c:42:5d:84:39:26:5f:52:ba:27:51:98:b2:
a6:61:df:ea:b3:c9:08:58:5c:b1:23:fa:85:44:48:
cf:17:bb:33:26:04:45:cc:56:14:2d:8c:d8:74:ee:
85:9a:94:67:8e:6b:c8:e5:9b:a7:b8:e2:66:48:01:
e8:4a:c4:d3:85:95:3d:11:9e:df:bc:b3:ac:64:d8:
f8:11:fa:9c:1a:32:7b:d7:63:ef:1e:9d:7d:09:5e:
c1:26:e3:37:cc:19:10:e6:f9:70:a8:23:f7:ac:a7:
88:af:b1:b0:1f:2e:52:1b:b9:b5:94:ac:16:d2:f5:
9e:0e:5d:c1:02:26:e9:4c:47:1f:f0:8c:10:e4:1b:
c2:b5:ae:da:ed:b7:d7:e5:f5:96:ba:f6:ee:19:37:
73:46:20:3e:1a:02:74:c1:0e:d6:76:1c:af:05:e4:
70:8d:80:fc:70:e2:06:ed:77:55:b6:76:c3:a5:a9:
bd:9b:a1:ff:0d:fd:33:0a:7e:94:a5:e1:40:3e:f1:
e3:d2:43:11:92:2f:4d:8d:32:ef:af:22:2d:7f:e0:
8d:53:4e:9d:ff:9c:d1:ac:f8:75:ca:cf:40:93:bb:
20:a7:8e:c7:94:b3:c6:0f:10:89:4a:6b:de:a8:6b:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6B:AB:08:85:B3:F3:BC:88:7B:38:FA:3E:7A:36:DE:97:C0:F8:E5
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/f2urCIWz87yIezj6Pno23pfA-OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c242:8000::/33
Signature Algorithm: sha256WithRSAEncryption
76:4b:47:3e:01:6e:4c:d7:4c:f2:fe:b6:03:d1:bb:13:d0:0b:
1b:9a:df:66:ae:3d:e9:f2:7c:52:39:99:eb:d5:6c:ee:a2:1b:
22:b4:48:8f:7c:c3:73:db:31:82:43:ee:dc:f4:9a:ed:fb:10:
39:2a:a5:55:a2:b2:29:f7:17:e0:ca:29:1c:2d:3f:e5:5b:61:
fa:02:03:59:e7:f0:64:01:d0:12:68:69:25:1a:f8:e6:51:3b:
c6:80:17:13:0a:c4:81:ec:97:18:1a:d6:7b:70:b0:c4:e3:84:
a5:c0:3f:e0:8f:0a:ba:3b:28:10:7c:4e:5a:36:f5:ca:60:ec:
f9:fb:c6:db:c4:82:30:c7:ea:23:e1:b9:17:bf:06:4c:a1:44:
da:d8:87:dd:09:91:d1:6c:24:cf:ad:fe:08:44:e0:da:dc:9d:
0d:de:09:2f:8d:97:05:ee:2d:c3:d9:47:a4:34:5e:a7:dd:83:
d1:b8:98:28:66:59:f8:07:4e:7e:6e:c4:66:0e:fd:57:0a:30:
35:f4:70:c8:89:b2:c5:ce:58:61:8c:d4:42:c0:bf:45:2e:fd:
42:1f:c1:76:af:fd:24:bf:8b:7b:8a:6a:37:dc:c7:62:e2:e4:
04:a3:fb:23:29:82:a8:c4:60:1f:39:b3:c4:81:94:7f:ae:10:
a6:c3:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:23:47 2025 by rpki-client