Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/oApbu5UqKxcyrhysV3wnU-7AxM4.roa
File: oApbu5UqKxcyrhysV3wnU-7AxM4.roa (raw, json)
Hash identifier: EFdFjDSW8MqQAqaknmlgMG8NOZTqIlzFQxLm61wBgLE=
Subject key identifier: A0:0A:5B:BB:95:2A:2B:17:32:AE:1C:AC:57:7C:27:53:EE:C0:C4:CE
Certificate issuer: /CN=79cb91394b790781d3a8773a855e5a9a3af20810
Certificate serial: 0197C855E79C8B9EB86D9F458A8A29B5FEF7
Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/oApbu5UqKxcyrhysV3wnU-7AxM4.roa
Signing time: Tue 01 Jul 2025 23:32:42 +0000
ROA not before: Tue 01 Jul 2025 23:32:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a14:d286::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:55:e7:9c:8b:9e:b8:6d:9f:45:8a:8a:29:b5:fe:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810
Validity
Not Before: Jul 1 23:32:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a00a5bbb952a2b1732ae1cac577c2753eec0c4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:42:d3:29:8d:b2:ad:13:82:87:0d:19:3f:
15:79:25:2a:d4:59:2d:0e:91:e8:26:b7:bd:30:fa:
bf:50:82:68:e3:ce:bc:55:54:e7:93:08:eb:3c:45:
6b:b1:bf:c3:5d:8f:93:db:44:66:69:57:50:75:a9:
b2:0c:74:e1:49:51:56:a5:d9:bc:43:fc:5a:c9:d3:
2a:6f:8f:c5:ec:f2:fa:e5:5e:8e:52:3b:27:f9:be:
6c:b0:44:a6:f9:22:d3:32:7f:8b:5e:bf:83:c5:ce:
f9:5b:ef:f8:3f:95:e6:d3:7f:84:cf:20:64:64:43:
73:03:32:25:f5:01:70:39:c8:dd:c5:9e:0e:3d:94:
fd:fd:a7:20:18:16:78:34:ab:ad:0d:1d:73:30:e5:
61:b3:2d:31:27:3f:72:d3:b2:95:7e:02:36:f8:b9:
5b:a9:f4:2f:98:3a:3e:48:ce:88:c4:d1:99:41:e0:
82:91:48:25:9c:e7:3c:a1:48:55:8f:be:60:33:27:
ca:67:a6:3f:e9:e2:c5:f2:1d:a5:4a:50:ff:4c:1a:
a5:07:84:af:ce:3e:b5:af:84:4e:da:e9:2d:16:41:
a0:c4:6f:44:10:1c:4c:49:99:d1:6c:42:07:e6:ee:
26:ea:02:1f:08:e7:fe:af:60:e9:06:ad:40:9b:cd:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:5B:BB:95:2A:2B:17:32:AE:1C:AC:57:7C:27:53:EE:C0:C4:CE
X509v3 Authority Key Identifier:
keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/oApbu5UqKxcyrhysV3wnU-7AxM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:d286::/32
Signature Algorithm: sha256WithRSAEncryption
3b:e6:f9:dd:88:32:db:42:98:fe:fd:d5:6b:66:9d:c3:8f:a8:
6d:df:ac:bc:ae:41:48:a4:5e:31:7a:2e:9d:8e:d4:c6:98:90:
48:0a:eb:d2:eb:94:6e:7b:2a:a8:f3:07:5b:71:13:1c:df:f7:
59:6b:4a:ea:0a:53:a6:92:a3:2e:1a:ca:5c:34:40:73:e0:1c:
bf:de:6d:b4:34:10:77:a7:9b:a4:1e:bf:80:3b:cf:4a:e9:ff:
de:b0:36:5e:83:f7:5c:91:cc:8f:33:01:13:39:9b:c9:c5:ec:
a3:db:d0:c1:55:90:31:69:b2:31:95:16:f6:54:48:2c:74:13:
f6:14:f1:78:17:b5:f5:c3:66:18:02:e9:b1:01:73:da:64:9d:
e2:6c:54:00:85:1d:9a:13:9d:98:da:e1:70:db:18:76:59:e9:
de:36:9c:45:3d:9d:67:8c:7a:09:50:11:b2:50:e0:b0:be:51:
b9:36:98:1e:a4:70:bd:57:ea:0b:90:8f:71:b1:b2:74:3c:04:
d9:e4:b2:a5:ab:ca:32:72:67:25:b5:71:02:64:17:e1:8a:ec:
90:e6:b1:b9:9a:f2:13:a5:ef:df:58:2e:31:f2:3d:55:29:60:
99:a9:31:f5:6f:16:80:be:74:d1:5f:74:2b:1b:dc:32:a3:86:
b5:35:b7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:46 2025 by rpki-client