Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/f1diLnQD2XBsHaCLPQlu4Ghb9lI.roa
File: f1diLnQD2XBsHaCLPQlu4Ghb9lI.roa (raw, json)
Hash identifier: Negs7yjGpbKKaniFKMM4baCmXIeWULdXQPRR2z/ZTUc=
Subject key identifier: 7F:57:62:2E:74:03:D9:70:6C:1D:A0:8B:3D:09:6E:E0:68:5B:F6:52
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 01975DB42AB727D2D3BF4BAA5EDBA2F667BF
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/f1diLnQD2XBsHaCLPQlu4Ghb9lI.roa
Signing time: Wed 11 Jun 2025 06:36:17 +0000
ROA not before: Wed 11 Jun 2025 06:36:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a14:e606::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:b4:2a:b7:27:d2:d3:bf:4b:aa:5e:db:a2:f6:67:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Jun 11 06:36:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f57622e7403d9706c1da08b3d096ee0685bf652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:6c:38:44:c9:87:c0:45:b7:a5:9a:75:3a:
20:94:97:bb:3f:5f:c4:86:98:f7:d2:28:ce:a6:47:
9b:75:ed:07:3a:fd:d5:54:c0:5c:d3:79:78:61:c5:
95:aa:d6:93:d4:e0:0e:3d:ed:86:14:b5:19:8c:27:
4e:a7:43:af:4b:42:67:94:fc:86:c0:7d:9b:e5:86:
5c:14:bf:22:ff:92:c1:e7:f6:37:6a:98:2a:f2:0e:
a6:72:f0:79:e7:82:2a:8e:56:82:ce:34:b5:62:1c:
c4:5d:1e:3f:87:6f:28:49:10:a5:95:f2:ab:47:c5:
47:eb:de:05:e5:af:7e:e9:46:2c:14:bd:00:1c:0b:
56:35:74:14:58:8e:8b:63:fd:61:f8:9b:af:6c:9d:
8b:2f:1c:b3:bb:6c:31:77:57:c2:17:1b:0d:e4:a7:
88:b9:ef:89:87:88:25:88:83:64:bb:33:23:a7:c0:
07:bd:e2:09:f9:13:f2:64:38:78:2a:da:ff:2d:f8:
cb:a7:4b:df:85:87:64:76:dd:79:79:ff:9d:f0:35:
89:08:60:9e:64:a1:7d:16:9b:80:44:22:d7:f4:f4:
d4:04:38:e7:78:22:0a:20:19:5b:24:59:43:01:79:
8e:ce:d3:25:ba:76:1a:85:9e:24:48:6e:d6:3e:5a:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:57:62:2E:74:03:D9:70:6C:1D:A0:8B:3D:09:6E:E0:68:5B:F6:52
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/f1diLnQD2XBsHaCLPQlu4Ghb9lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e606::/32
Signature Algorithm: sha256WithRSAEncryption
92:22:c7:3c:07:27:df:76:ae:e5:fd:3e:fa:35:b1:1d:eb:20:
58:da:ef:18:ea:83:8f:57:1d:26:f5:9b:85:02:76:5a:a9:57:
b6:b1:53:e2:b8:1c:f4:ef:a8:ab:dd:cc:d5:57:2d:9c:dc:cb:
93:de:5a:cd:de:7f:33:4d:0d:30:ff:cf:96:e7:b4:69:b8:18:
09:81:30:46:25:31:44:51:95:c8:bb:6b:e2:fd:19:85:f8:b6:
50:82:24:4d:6a:92:0f:1d:0a:0b:d7:15:22:66:07:15:ee:9f:
be:69:2e:27:5f:64:41:be:c7:f0:ad:89:55:71:40:d9:16:59:
96:5a:71:23:56:3e:6b:90:7c:9f:81:85:60:08:56:c0:fa:48:
7a:61:5b:8e:9d:b3:89:4b:4c:7e:e7:2d:9a:37:d5:f6:d2:59:
a0:fa:a8:e6:c1:3e:58:50:f0:54:68:49:0c:ee:84:70:35:9d:
a5:b0:81:0c:a9:c7:c1:d5:7a:7d:a3:f3:fc:e4:0c:5b:d9:78:
d9:eb:f4:4d:ea:93:df:c3:2a:6c:2c:8e:25:2e:94:0b:f4:0b:
9c:9b:da:16:67:35:7f:3d:19:d1:05:b1:aa:37:6a:c2:7c:90:
bd:2c:7f:3e:4e:4c:6a:38:3e:31:84:fd:4a:09:09:e2:32:dd:
cf:74:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:42:50 2025 by rpki-client