Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/AMeFJYEOsq8eDF0JklVrrKO_x-w.roa
File: AMeFJYEOsq8eDF0JklVrrKO_x-w.roa (raw, json)
Hash identifier: BUSoz6NuItfjL6psERkejscD0G0Lwnx4YN1Y5CF1al8=
Subject key identifier: 00:C7:85:25:81:0E:B2:AF:1E:0C:5D:09:92:55:6B:AC:A3:BF:C7:EC
Certificate issuer: /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial: 0197598D3C8B6DDCEA83B8A6BBD743169B05
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/AMeFJYEOsq8eDF0JklVrrKO_x-w.roa
Signing time: Tue 10 Jun 2025 11:15:17 +0000
ROA not before: Tue 10 Jun 2025 11:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206442
IP address blocks: 2001:678:38c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:8d:3c:8b:6d:dc:ea:83:b8:a6:bb:d7:43:16:9b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Validity
Not Before: Jun 10 11:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00c78525810eb2af1e0c5d0992556baca3bfc7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:1f:97:2c:c9:c7:e9:a5:3d:97:39:aa:9b:
14:d4:10:18:e6:2e:f6:fa:78:71:1e:6f:aa:f5:cf:
a7:58:32:f1:22:37:3e:81:7f:ed:10:8a:19:06:a2:
9c:30:41:41:18:f1:2a:f6:d9:45:4c:00:95:af:13:
0b:81:8a:78:bf:7f:42:42:0b:5c:07:9c:4a:52:7e:
75:9e:39:5c:c8:36:3c:64:49:65:3d:f6:90:d4:ea:
d1:32:00:38:77:8b:e3:f5:d3:26:7b:82:1d:28:7b:
ad:0c:e6:eb:b0:b6:8e:40:a4:2b:a1:6e:75:9e:db:
0c:29:38:38:ad:71:cb:1d:ec:98:5f:b8:e3:1d:de:
d9:7b:3f:20:01:94:1d:ea:f7:be:3d:db:ee:ca:84:
1b:60:37:03:ca:b4:2c:59:41:ba:96:dc:d3:0e:75:
ac:53:c4:cc:e3:95:89:6e:94:8d:e4:20:97:ce:7b:
e3:45:41:e5:8a:e6:1d:37:b3:f0:58:42:6f:86:08:
3d:f9:87:02:e5:f1:0e:77:16:bf:34:44:b7:d5:81:
22:a6:69:39:b0:18:a2:3f:b6:76:d0:cc:28:87:49:
02:f5:0d:6a:80:2c:e7:c5:a7:2e:f8:08:5d:b3:bc:
46:40:46:c3:21:e8:4c:f2:54:46:f5:b9:c4:b3:0d:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C7:85:25:81:0E:B2:AF:1E:0C:5D:09:92:55:6B:AC:A3:BF:C7:EC
X509v3 Authority Key Identifier:
keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/AMeFJYEOsq8eDF0JklVrrKO_x-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:38c::/48
Signature Algorithm: sha256WithRSAEncryption
27:7d:48:8d:98:f2:71:c0:cb:15:0f:b5:01:df:16:54:c0:f9:
03:fe:51:9f:c2:9d:8a:00:8f:31:d5:dc:09:b3:49:d8:3f:8a:
1b:1b:b6:2a:91:7b:95:11:14:84:cf:9f:3b:f2:a0:72:81:c7:
03:51:8c:1f:c2:f5:77:98:a7:d1:b2:0f:6e:13:ac:54:86:b7:
e3:6e:21:e7:dd:a8:eb:ff:63:bb:e7:5a:66:79:70:9b:d6:4e:
ea:17:4d:0c:b5:21:c4:be:20:cb:f7:fb:3f:5d:99:4c:5e:72:
99:b4:66:17:3a:06:49:11:aa:12:5f:25:d6:02:64:68:de:9d:
08:80:36:36:ab:90:d6:ce:2b:1b:58:07:54:cb:f5:55:a7:53:
b4:d1:0c:f0:d1:ce:28:1a:bb:1a:2a:3e:af:82:5f:37:e3:71:
78:b9:54:93:40:59:a7:ce:3a:34:a9:3b:e5:a4:eb:bd:d3:00:
cd:93:ac:56:3a:76:db:93:0e:35:8f:64:6f:75:bc:65:b3:f2:
4a:2e:35:25:2c:f3:86:61:93:9e:1d:cd:32:c9:56:5b:d8:56:
45:bc:3c:e0:34:1e:04:b0:2f:b4:16:ff:1e:38:f6:8f:f1:50:
a8:a0:1d:d9:60:33:85:e2:80:59:0e:94:e1:a5:c0:1b:08:69:
83:f3:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:16:41 2025 by rpki-client