Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OAlPp3JJEXaL9tkuRG07Fq9c1rg.roa
File: OAlPp3JJEXaL9tkuRG07Fq9c1rg.roa (raw, json)
Hash identifier: DjwIxcZlYsSftC/cIUkBZyjh8l1QHkeIrhCJ0Pm/98c=
Subject key identifier: 38:09:4F:A7:72:49:11:76:8B:F6:D9:2E:44:6D:3B:16:AF:5C:D6:B8
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0197640B9E1295FC09FA5F097D82C20D6D16
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OAlPp3JJEXaL9tkuRG07Fq9c1rg.roa
Signing time: Thu 12 Jun 2025 12:09:32 +0000
ROA not before: Thu 12 Jun 2025 12:09:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215819
IP address blocks: 2001:3184::/32 maxlen: 32
2a14:6ac6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:0b:9e:12:95:fc:09:fa:5f:09:7d:82:c2:0d:6d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 12:09:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38094fa7724911768bf6d92e446d3b16af5cd6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:44:e2:b5:d6:26:2a:04:74:ff:9a:14:f8:
7e:d4:80:eb:95:76:5c:02:7b:6f:89:a1:77:0f:02:
c9:17:48:4c:d2:77:3f:2f:02:22:63:8b:d5:59:3f:
5e:fa:ff:2f:f2:f1:e3:0d:bf:6e:bd:ea:bf:60:78:
55:a4:96:76:dc:e1:f9:9e:a7:6f:9d:d2:b3:42:6f:
7e:15:a1:44:8f:08:75:d8:b6:62:59:bb:87:cc:ae:
e4:c2:6e:4a:4a:9d:2e:57:13:f6:47:28:40:10:33:
f4:8c:08:a5:6b:83:33:5f:36:ca:b1:22:f7:7e:42:
05:2d:30:d6:82:cf:aa:d6:c2:8f:27:20:d9:a2:37:
4a:8f:19:39:6c:12:f7:e2:79:c8:5c:ab:9c:d5:6b:
95:55:a9:b9:9b:94:b9:19:3c:1b:40:e2:84:3d:d7:
d5:a2:1d:a8:7c:37:9c:04:ba:09:c9:64:f2:5b:83:
2a:85:c2:ed:44:4f:aa:9b:aa:27:76:86:14:ce:82:
ec:19:bd:0d:77:8d:3f:48:9f:ec:87:c7:c5:a6:69:
32:82:69:7b:a1:8e:c9:aa:45:7f:f3:89:cd:dc:a9:
1a:c4:3a:ab:f6:c4:1c:78:7c:76:1a:3e:09:da:b4:
9f:e3:02:5a:37:ee:13:4e:58:16:17:95:c2:f5:39:
98:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:09:4F:A7:72:49:11:76:8B:F6:D9:2E:44:6D:3B:16:AF:5C:D6:B8
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OAlPp3JJEXaL9tkuRG07Fq9c1rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3184::/32
2a14:6ac6::/32
Signature Algorithm: sha256WithRSAEncryption
31:45:59:7b:50:fb:48:a7:33:21:d9:1d:20:78:61:1e:bd:16:
d5:53:a0:77:a1:cd:56:41:1d:c9:ea:d2:0e:39:f9:ed:fc:c0:
fb:5c:aa:4e:7a:79:1d:58:e1:8c:7a:5f:5d:f8:b5:e4:ff:d5:
29:a6:19:fc:18:59:30:8f:87:96:59:fc:1d:b0:fa:6c:16:19:
53:84:02:73:88:53:36:60:bd:1c:86:25:a8:3f:78:45:78:f0:
d9:c0:e9:42:68:1d:25:f3:1b:d1:80:26:c0:53:be:51:79:4a:
b1:71:6e:a5:59:db:d4:0c:16:4d:f1:d5:65:ab:a9:e3:12:86:
9c:e9:b4:2e:e7:32:40:65:dd:8e:45:cd:cc:20:0a:15:40:4e:
de:4a:52:2a:1c:06:e2:a7:9f:cc:7e:ed:e2:fe:65:1f:1f:06:
d0:a3:5e:0c:e0:dc:3c:ce:ff:8d:a2:ed:44:49:9b:c5:11:28:
46:62:73:b1:a2:54:4f:b9:fa:c2:d8:05:fd:c5:a0:90:c2:55:
ec:ab:4f:43:4d:31:32:d2:e3:0c:0e:c6:97:7f:6a:47:7a:16:
09:ad:b4:e6:73:ab:c3:a8:bc:56:0f:1a:29:a6:09:02:65:b6:
2d:08:a6:b0:5f:70:6c:0d:8e:29:f6:40:e9:1b:09:16:e2:0d:
cb:e6:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:21:11 2025 by rpki-client