Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/TOkxEOih0AWVPHi1e8WKWrt7QXA.roa
File: TOkxEOih0AWVPHi1e8WKWrt7QXA.roa (raw, json)
Hash identifier: dzQs5/UcI04rskBqMhv8VF3TcibwTWfajt/YKT8d1pQ=
Subject key identifier: 4C:E9:31:10:E8:A1:D0:05:95:3C:78:B5:7B:C5:8A:5A:BB:7B:41:70
Certificate issuer: /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial: 019777262635FE3245F6A50B7A99A6E1BD83
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/TOkxEOih0AWVPHi1e8WKWrt7QXA.roa
Signing time: Mon 16 Jun 2025 05:11:18 +0000
ROA not before: Mon 16 Jun 2025 05:11:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202175
IP address blocks: 2a05:45c7::/48 maxlen: 48
2a05:45c7:1::/48 maxlen: 48
2a05:45c7:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:26:26:35:fe:32:45:f6:a5:0b:7a:99:a6:e1:bd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Validity
Not Before: Jun 16 05:11:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ce93110e8a1d005953c78b57bc58a5abb7b4170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:36:59:9b:a8:38:5a:12:9f:0b:a5:57:98:
55:48:08:ab:d0:5c:fc:fe:f5:db:b3:e1:77:a8:39:
8c:05:37:ca:d1:e3:99:a4:ff:06:2b:3d:11:76:33:
aa:5b:69:de:45:64:b4:11:21:49:e6:a0:42:29:7a:
ce:78:de:56:fd:76:ee:e3:0e:8a:51:10:1c:df:b7:
b2:e1:ec:a5:88:73:5f:af:13:7f:ac:aa:46:0a:16:
e0:81:5d:da:84:7a:b4:75:43:1e:5c:11:b1:32:3c:
52:b6:e8:24:f6:b6:fd:f9:69:75:85:51:b2:d9:50:
8a:ce:97:84:29:ba:d2:24:f5:b3:fc:9d:6a:3e:98:
f8:b9:81:9e:5a:b0:51:c8:85:eb:0d:a5:a3:ba:21:
43:ce:bf:0e:fd:72:77:5d:5b:cd:d8:95:dc:fa:07:
0d:70:68:45:58:54:b9:1e:35:7c:74:cf:02:52:12:
09:46:45:40:34:ed:bb:a7:1c:38:36:5e:a7:02:b8:
57:d8:fb:3e:5a:08:13:45:c3:38:38:d5:cf:23:a7:
6a:07:98:cc:c7:f0:3c:ab:6f:b7:da:95:8b:6f:5f:
29:1e:65:fc:73:fd:fe:bc:4e:d9:ab:c3:88:3d:a1:
2d:83:ce:e1:1a:8d:52:90:f1:d8:cc:df:bc:9a:f3:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E9:31:10:E8:A1:D0:05:95:3C:78:B5:7B:C5:8A:5A:BB:7B:41:70
X509v3 Authority Key Identifier:
keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/TOkxEOih0AWVPHi1e8WKWrt7QXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:45c7::/47
2a05:45c7:10::/48
Signature Algorithm: sha256WithRSAEncryption
93:64:2e:15:61:7a:ba:20:57:dd:d9:b4:05:3c:7f:0c:c3:89:
37:ba:a7:9d:d9:65:55:72:32:7a:54:eb:a9:f8:0c:ee:b8:4d:
e9:5c:6b:19:e0:1f:34:9f:93:d6:33:12:c1:44:94:fb:4b:15:
8c:e1:b9:19:9b:84:a2:fc:f0:22:01:11:45:a3:b7:9f:db:22:
c7:69:d1:d0:9d:49:05:22:af:20:2e:81:68:ed:9d:ec:27:27:
f0:88:02:c4:31:5d:8c:44:79:91:36:21:2b:32:dd:8f:17:3e:
53:6c:70:34:6c:c0:73:99:4f:d2:66:f3:bf:9d:e5:7f:fc:fc:
4a:8e:dd:c8:5e:48:4f:df:e9:d9:a3:2c:bd:ac:f1:85:f4:a8:
84:f4:20:fa:89:d4:3e:63:e8:20:57:c6:30:a4:a9:15:37:80:
57:07:de:3b:d2:86:80:cf:01:62:0a:74:2a:f8:64:1e:2c:4a:
0c:ac:22:2c:45:d9:a6:b8:3e:9d:63:43:47:48:4e:eb:c2:cd:
96:59:33:91:dc:79:ad:ee:8b:05:20:6d:30:2d:9a:e6:63:34:
61:1f:0b:1a:e8:bf:94:39:fe:ac:16:64:09:b3:b5:17:52:34:
d7:c2:39:fb:4f:52:dd:1b:aa:d5:7b:be:6f:da:e4:5f:5f:93:
4a:8a:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:09:27 2025 by rpki-client