Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/ij-O7AdiYdBUQgOhr854Jg9r6xA.roa
File: ij-O7AdiYdBUQgOhr854Jg9r6xA.roa (raw, json)
Hash identifier: 8QQHxWCaPsLceWMr2Zl437NuUFHDph6KXoLneDzaOuU=
Subject key identifier: 8A:3F:8E:EC:07:62:61:D0:54:42:03:A1:AF:CE:78:26:0F:6B:EB:10
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0197560A30C06CC735664D13415AF944B660
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/ij-O7AdiYdBUQgOhr854Jg9r6xA.roa
Signing time: Mon 09 Jun 2025 18:53:17 +0000
ROA not before: Mon 09 Jun 2025 18:53:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 2a14:e603::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:0a:30:c0:6c:c7:35:66:4d:13:41:5a:f9:44:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Jun 9 18:53:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a3f8eec076261d0544203a1afce78260f6beb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:f2:ec:8e:24:1a:22:63:bf:54:9a:bc:10:
5f:13:a2:2c:c9:ac:44:c9:80:e9:7b:5f:b9:6a:7f:
a8:b7:85:41:ca:10:eb:ea:0e:ff:75:ef:66:5b:8a:
5a:c2:8f:f6:bc:45:48:ae:a1:41:8c:45:0a:01:f8:
77:01:62:b2:14:bd:ce:23:ca:cb:25:74:9f:7b:e8:
82:fa:fc:c9:07:ca:65:54:de:27:39:af:f1:16:eb:
1d:0f:b3:85:ec:0a:8f:d2:6c:36:b0:f6:21:3e:0e:
6f:a9:03:c7:e1:ff:d2:ca:fb:2c:7e:76:10:7b:90:
5d:1c:eb:27:56:26:44:1a:70:4c:ae:4c:fa:89:3e:
e7:50:c4:89:19:06:2e:c4:03:db:43:08:60:3d:cb:
e9:b2:a5:d6:6c:b0:66:df:c9:bf:d8:60:e7:90:28:
b9:e6:6d:6b:32:f5:f1:d6:3b:ee:1e:79:9f:88:03:
3f:3e:34:01:3c:55:b5:84:0f:7f:36:d4:a7:7a:62:
2f:5e:0d:e3:4d:8b:6c:ff:88:87:aa:ee:f1:53:8a:
a1:db:10:b3:9d:e2:e2:83:79:c4:ec:c7:b2:b7:cc:
57:0c:85:00:0f:e9:bb:0e:b6:e1:ef:79:0c:38:33:
17:b1:32:70:40:a9:45:a0:07:e6:ec:a5:da:9c:62:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3F:8E:EC:07:62:61:D0:54:42:03:A1:AF:CE:78:26:0F:6B:EB:10
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/ij-O7AdiYdBUQgOhr854Jg9r6xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e603::/32
Signature Algorithm: sha256WithRSAEncryption
9c:c8:bf:f6:ad:72:e3:0e:3a:32:8a:1a:5c:4d:c4:50:f0:28:
2f:fb:84:1f:6c:5b:6a:fe:ef:05:ed:9f:d2:1b:44:cf:40:1f:
9e:9a:3c:f3:7f:02:f8:cd:07:bb:27:27:2f:77:02:39:4d:a6:
86:72:55:59:a8:de:67:99:d8:7f:27:4f:3c:3f:8d:e2:ea:02:
a5:f1:d9:98:68:28:62:e7:39:b3:0e:42:c9:c3:72:a3:e1:5f:
bd:79:2b:ac:ba:aa:15:54:16:e2:7d:93:4a:42:bb:9b:01:a1:
16:97:2e:d7:b9:b6:1a:0b:99:ef:7a:3b:28:63:c0:48:85:3d:
d3:0c:6a:74:11:02:ba:6f:9d:5d:7b:b5:4f:b4:56:b3:3f:bb:
62:3b:e0:36:85:1b:c2:54:08:be:6e:56:00:3b:31:20:05:24:
d1:46:02:69:79:1b:2f:4b:93:ee:6e:b5:75:d4:f9:e2:7b:4f:
c4:1c:ff:88:94:a4:c3:29:12:a0:ad:d2:41:b4:f3:83:63:5c:
71:50:3f:0f:51:eb:fd:c5:27:4e:9f:85:17:24:43:95:e6:33:
6f:ef:0b:60:c3:bc:34:fd:d5:e5:02:b6:b2:93:8a:77:f7:90:
ce:0a:dd:23:ad:ca:5a:fb:b6:94:6d:13:32:c6:7a:f8:c7:7c:
87:43:c4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:57:13 2025 by rpki-client