Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/AF4umlxpodxfUYcflJsK8xOOPvc.roa
File: AF4umlxpodxfUYcflJsK8xOOPvc.roa (raw, json)
Hash identifier: h6ZT1Xj2HoW6T1BM9+3KLrI7XGShfMvSe65xEZ1pN+8=
Subject key identifier: 00:5E:2E:9A:5C:69:A1:DC:5F:51:87:1F:94:9B:0A:F3:13:8E:3E:F7
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 0197539BA259177570A5E764AEE2DBC4A2BD
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/AF4umlxpodxfUYcflJsK8xOOPvc.roa
Signing time: Mon 09 Jun 2025 07:33:17 +0000
ROA not before: Mon 09 Jun 2025 07:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36040
IP address blocks: 2a0f:f4c1:2::/48 maxlen: 48
2a0f:f4c1:2::/64 maxlen: 64
2a0f:f4c1:3::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:9b:a2:59:17:75:70:a5:e7:64:ae:e2:db:c4:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Jun 9 07:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=005e2e9a5c69a1dc5f51871f949b0af3138e3ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d9:40:4a:21:60:35:1b:d1:ed:4c:92:06:8c:
fe:c0:3d:0f:e9:6a:98:bf:6a:25:ef:46:a3:33:b6:
78:10:b7:a8:08:c9:02:c8:e0:64:a9:1a:6f:28:52:
b5:25:a4:19:0d:31:09:ba:f0:c2:eb:87:44:f2:89:
10:6a:92:e7:02:2f:87:35:e6:1d:be:c6:50:30:3d:
b6:a5:fe:06:50:b0:ba:e3:c8:d6:5f:41:b9:a4:5f:
17:4d:d9:7f:e0:52:b0:c7:f4:ad:c6:68:32:ea:29:
d1:77:20:f7:a5:05:e8:fb:23:72:b5:29:cc:f4:ba:
6f:1c:f2:65:6e:68:8a:3e:29:a4:c1:0b:b3:07:fa:
1a:b3:ae:0b:1f:e5:00:5a:29:0a:75:b6:b9:28:eb:
a6:9b:78:1c:96:c0:64:51:dd:12:7d:9d:2a:fb:81:
af:66:b6:60:7a:f9:99:6a:a8:96:f4:57:9b:6c:be:
45:1d:2c:b4:08:73:17:22:42:93:2b:6c:a0:d3:ef:
84:31:95:5f:dd:4b:35:d0:03:f4:21:1a:f5:02:d6:
6e:66:fe:9c:e3:53:49:6e:56:04:a2:96:a4:49:24:
81:0e:a7:71:99:a7:d8:c0:26:14:7d:fa:81:6d:58:
e6:ff:92:82:d0:3d:ac:8a:de:07:10:b1:dc:21:16:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:2E:9A:5C:69:A1:DC:5F:51:87:1F:94:9B:0A:F3:13:8E:3E:F7
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/AF4umlxpodxfUYcflJsK8xOOPvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:f4c1:2::/47
Signature Algorithm: sha256WithRSAEncryption
55:10:68:ed:93:20:41:94:9e:19:03:73:fb:8a:d5:67:8b:fe:
b2:e5:3a:1c:57:fd:c3:9e:8c:87:f4:d1:b9:f5:85:bc:86:63:
52:53:47:11:d0:7c:3a:59:2d:09:d1:ae:ca:50:43:66:f3:83:
f8:8c:e6:27:22:d6:93:ab:11:b8:66:00:d0:26:34:d6:98:e9:
87:c3:d2:ad:d4:45:2b:d3:ed:fd:41:83:62:df:a2:c6:6b:73:
fc:aa:94:55:e6:86:5a:73:1a:52:ea:6e:6e:7e:91:eb:3c:83:
c9:5d:08:5b:e9:20:e3:31:10:f7:76:f3:fd:ec:91:30:3c:4c:
32:3c:1b:b6:4e:4e:4c:70:b5:57:ed:f4:c2:ff:3a:a4:92:39:
eb:23:62:40:bb:29:7f:04:7c:5b:ac:36:ae:b0:93:d2:d7:27:
d2:f4:14:0d:e1:3b:68:59:c3:61:fd:7f:8a:65:44:8d:eb:4c:
b3:8a:ed:87:d6:2c:59:3d:0c:86:56:f2:28:48:7f:ce:62:bd:
64:99:d4:73:89:19:2b:00:cd:e4:7c:61:e7:ca:85:c4:ef:63:
e4:b3:5c:1b:4a:31:b1:44:31:59:26:9b:8c:7d:07:55:de:a9:
86:61:35:59:74:65:ee:73:02:5a:6b:30:11:8e:ca:b6:37:03:
65:66:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:30 2025 by rpki-client