Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa
File: 1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa (raw, json)
Hash identifier: /fbcJU0cKGryVcZvtSX4RD7kNCeOfa1xibBR/Nj3P7Q=
Subject key identifier: F9:6B:11:74:B4:DF:75:3B:15:2A:B2:F6:08:84:4C:9A:B8:1B:A2:93
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 0196EB5927452FC7FF70D26AED82D59E20F4
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa
Signing time: Tue 20 May 2025 01:40:10 +0000
ROA not before: Tue 20 May 2025 01:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211967
IP address blocks: 2001:67c:26c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:eb:59:27:45:2f:c7:ff:70:d2:6a:ed:82:d5:9e:20:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: May 20 01:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f96b1174b4df753b152ab2f608844c9ab81ba293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:0c:22:ac:22:a7:fe:36:2c:29:f3:8c:f4:
69:58:1e:04:da:66:e4:f7:ec:7d:74:71:67:2f:a1:
8d:61:bc:90:ea:38:c0:9f:39:d2:1e:36:37:a0:a3:
4c:c9:d0:d5:30:31:cc:b3:e8:58:de:1d:3b:de:ce:
38:e3:c6:1c:3b:73:e7:ab:84:0f:00:95:0b:10:28:
02:54:e3:01:aa:f1:98:8c:cc:02:e0:d1:76:cd:3f:
e3:25:d9:7b:65:ce:31:45:7d:5c:09:0c:7b:39:4e:
79:9c:27:9b:da:2d:25:3a:9f:fa:1f:17:f7:17:fa:
c2:d2:43:17:8d:b4:77:59:91:7c:78:79:89:ed:87:
09:a4:5f:97:eb:56:93:9b:33:b1:ad:6f:2f:b8:1d:
f6:f9:88:98:46:42:c0:dd:58:7e:0b:fe:96:b0:ea:
31:d0:c1:8e:19:44:66:3d:ed:c8:e7:be:52:d7:ca:
34:40:31:3d:61:85:3d:fa:8c:58:ed:d5:be:03:17:
72:94:e9:86:57:8d:e3:c8:3b:b0:5a:6a:41:20:b1:
a1:38:fd:37:36:61:b9:5e:43:c5:fd:20:9e:f3:56:
1a:7b:31:59:d7:b1:2b:42:af:f7:b2:a7:e3:c8:a1:
2d:c5:55:1f:a0:1d:ce:c4:be:d4:02:24:b3:d7:01:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6B:11:74:B4:DF:75:3B:15:2A:B2:F6:08:84:4C:9A:B8:1B:A2:93
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26c8::/48
Signature Algorithm: sha256WithRSAEncryption
6e:30:2f:5f:c1:42:39:6f:3a:6a:db:8c:a6:0f:cb:4a:59:20:
da:c2:41:ea:0f:d4:29:ee:3c:d5:5a:a8:a5:32:ba:34:10:f8:
e3:bf:a4:c5:4f:9e:f0:d3:a4:39:ec:c1:1f:6d:7b:70:0d:46:
e2:27:cc:19:3e:1e:3d:24:6b:e4:7e:dd:6d:b6:fc:2c:48:24:
a5:90:72:d4:79:94:93:a2:53:77:28:27:e6:ee:b5:4b:74:a4:
61:c2:5a:6a:84:06:43:dc:a6:15:24:79:05:8a:53:38:df:66:
bc:d1:dc:a0:cb:bc:32:fd:7f:17:16:36:b7:86:ac:39:1f:d1:
32:f1:3b:55:4c:8b:38:58:6d:c7:5c:91:3f:51:2b:7c:f8:f3:
f8:f0:8c:b4:52:7a:07:f0:de:34:d7:66:14:50:a3:83:cc:f8:
84:0e:2c:86:c0:08:7f:d5:8c:9d:29:9b:91:f0:68:c6:2e:23:
e4:e8:47:65:9f:7f:ae:fc:0f:de:bd:7d:ec:c0:16:1c:42:94:
38:be:62:72:ae:00:e5:0e:50:59:9e:18:5b:d8:32:28:2a:11:
77:bb:4e:0e:5b:3b:3a:71:ae:28:39:3e:54:26:a9:5b:bb:6f:
16:88:d7:9c:4c:5c:8c:93:21:11:05:5b:5a:bd:5f:55:b5:86:
ca:fc:e1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:49:39 2025 by rpki-client