Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/sWJaYxR8QxeFykRG1T7Dyn5LRfw.roa
File: sWJaYxR8QxeFykRG1T7Dyn5LRfw.roa (raw, json)
Hash identifier: gT5e4Ztf/S3QhI6J9gtGfZQnZoP1YRQUOZiUmNVTEo4=
Subject key identifier: B1:62:5A:63:14:7C:43:17:85:CA:44:46:D5:3E:C3:CA:7E:4B:45:FC
Certificate issuer: /CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Certificate serial: 0197589B899D43EB7EA8D3890EB1CAD1BC66
Authority key identifier: 3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/sWJaYxR8QxeFykRG1T7Dyn5LRfw.roa
Signing time: Tue 10 Jun 2025 06:51:17 +0000
ROA not before: Tue 10 Jun 2025 06:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207214
IP address blocks: 2a09:6f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:9b:89:9d:43:eb:7e:a8:d3:89:0e:b1:ca:d1:bc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Validity
Not Before: Jun 10 06:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1625a63147c431785ca4446d53ec3ca7e4b45fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:83:32:db:1b:e8:37:61:ba:a0:a2:9f:a1:
74:b1:01:90:93:65:44:bf:c7:fe:f3:a5:37:5e:32:
59:79:36:1a:ff:52:c8:22:ae:0d:80:d8:18:d1:85:
a1:49:d3:a4:0a:de:18:0b:af:4f:35:72:00:7a:84:
c9:3d:a7:36:17:b5:95:0f:57:5e:eb:8c:f9:10:c4:
10:c5:e3:f6:ad:82:8b:b8:91:d8:ad:61:e9:28:f3:
22:5f:f1:81:96:7c:bf:37:0e:e5:f7:19:07:b1:24:
ab:3b:15:ae:98:39:26:ce:b0:7c:cc:ce:ed:b9:d5:
3e:c4:72:ae:6d:54:c2:65:ee:58:03:40:d7:e9:3c:
df:bf:1d:bc:72:af:ec:cd:d8:05:ea:0f:2a:30:94:
32:22:2a:4a:10:95:d9:0d:d4:fb:a8:16:7d:ac:f6:
1f:de:4c:42:41:cc:5c:c5:2a:25:a7:0e:66:7e:fb:
d9:85:e7:44:25:fc:03:56:ac:85:ea:fc:2d:4b:ac:
45:4b:88:e9:b5:ce:82:72:62:b4:6a:97:6a:a6:a8:
75:0c:65:4b:1e:8f:23:d0:8a:ac:d4:48:dd:30:c5:
86:13:ee:61:52:da:78:19:3a:e4:9e:56:11:d7:3b:
1c:39:1c:5b:3b:68:90:f4:81:e0:3f:3c:9f:2a:4c:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:62:5A:63:14:7C:43:17:85:CA:44:46:D5:3E:C3:CA:7E:4B:45:FC
X509v3 Authority Key Identifier:
keyid:3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/sWJaYxR8QxeFykRG1T7Dyn5LRfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6f40::/29
Signature Algorithm: sha256WithRSAEncryption
9f:82:c8:24:89:6c:de:69:57:ee:b8:c3:8a:4b:76:5f:4d:fd:
ab:d4:c8:2b:27:b5:6f:e5:af:72:8f:29:98:1c:44:95:a5:83:
93:06:5b:6f:56:75:ae:ce:84:44:6c:31:0e:86:4f:8a:f8:de:
dc:67:e7:be:3f:1b:b7:98:6d:a5:2a:1c:84:00:f1:95:15:3f:
47:29:b5:6a:93:14:7b:98:02:c6:e9:67:0e:69:d0:3f:93:81:
f6:56:4e:32:b2:53:d4:55:7c:f4:43:eb:ab:69:a1:2c:19:28:
54:8a:73:44:e6:07:1c:a3:4b:fa:9b:a1:50:84:34:72:46:75:
ba:38:d7:f5:58:f3:46:a1:66:7a:3b:cd:ac:75:45:7b:08:74:
14:a3:32:32:3a:a0:e0:e6:22:e8:93:c4:d3:4a:72:dd:cd:9b:
e1:28:a7:13:f7:10:db:21:e7:31:40:af:a8:92:18:d4:31:b2:
8f:6d:ca:c5:ed:4f:57:95:6a:77:d5:1b:06:4f:5e:32:f3:02:
5e:73:69:20:6e:65:c7:8d:c2:2b:50:c6:41:24:c5:09:cf:bc:
cb:d9:2e:10:1c:62:37:a3:59:07:38:d7:39:e1:d2:76:75:7f:
4e:78:f7:86:df:2f:ec:92:84:ec:24:01:8c:22:16:c8:55:22:
d6:f3:21:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:26:01 2025 by rpki-client