Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lEI_MOdsZG2OMiuHNjhGSX3G2Ww.roa
File: lEI_MOdsZG2OMiuHNjhGSX3G2Ww.roa (raw, json)
Hash identifier: WZPve5/FqG40sOt1irS1yUXHzP/enqPHMB84PLUtsCU=
Subject key identifier: 94:42:3F:30:E7:6C:64:6D:8E:32:2B:87:36:38:46:49:7D:C6:D9:6C
Certificate issuer: /CN=9705462cbfc8764777e6da31b595d7ccbfe38243
Certificate serial: 019831F57211EEE30F1D6A484C9D0C09C15B
Authority key identifier: 97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lEI_MOdsZG2OMiuHNjhGSX3G2Ww.roa
Signing time: Tue 22 Jul 2025 11:47:05 +0000
ROA not before: Tue 22 Jul 2025 11:47:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8758
IP address blocks: 2a05:ff80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:f5:72:11:ee:e3:0f:1d:6a:48:4c:9d:0c:09:c1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9705462cbfc8764777e6da31b595d7ccbfe38243
Validity
Not Before: Jul 22 11:47:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94423f30e76c646d8e322b87363846497dc6d96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:2b:22:4e:32:20:f1:a6:6b:03:0b:c9:29:
18:66:7d:51:2b:42:9e:89:77:ef:81:eb:17:6e:b5:
74:2b:8e:ad:9f:d2:71:bf:9a:a2:24:c2:a8:b6:50:
61:3f:8b:4b:fb:3d:84:e9:a6:00:c7:ea:bf:e7:70:
40:de:4f:69:b8:80:ab:9f:79:c6:7c:2f:3d:1f:ba:
c7:ac:57:12:ae:93:b6:9e:19:8f:bb:4a:12:89:08:
8d:5f:05:37:de:70:79:3b:0f:de:48:76:d9:24:b1:
39:9f:d7:19:ef:40:2d:d9:9a:58:c6:f4:38:69:15:
3e:50:36:dd:49:b0:0d:15:5e:91:0d:00:e9:76:64:
9e:af:4c:61:84:2f:c7:8a:6e:86:52:11:5f:bd:f5:
cb:bd:b5:05:c0:30:c0:c9:86:6e:44:ed:05:de:c7:
84:60:e6:a5:94:a0:44:b7:0c:5d:cf:65:44:6f:1b:
2e:ab:d5:c2:0c:2d:4d:75:ea:37:33:63:39:dc:06:
99:27:b7:7f:fa:07:39:7c:82:a0:ad:fe:9f:55:65:
b7:a3:e8:82:2c:61:79:6c:48:78:ce:38:d7:b3:e9:
ca:59:08:09:8a:01:92:17:b4:1a:79:61:fd:49:e6:
75:e6:45:9f:5b:ac:83:c6:57:e6:cd:32:10:8d:60:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:3F:30:E7:6C:64:6D:8E:32:2B:87:36:38:46:49:7D:C6:D9:6C
X509v3 Authority Key Identifier:
keyid:97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lEI_MOdsZG2OMiuHNjhGSX3G2Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:ff80::/29
Signature Algorithm: sha256WithRSAEncryption
71:58:0a:ac:d2:4a:41:bc:aa:9c:e6:26:b8:51:96:07:ba:e3:
8d:ef:6d:5a:bb:64:82:0e:16:3a:1d:e5:9b:f1:0b:6b:75:ad:
8e:28:48:ef:d4:6d:64:f6:34:c7:b1:51:55:e3:7f:1b:43:81:
23:c3:81:91:6f:30:20:71:9f:dd:0e:9e:42:8d:d3:40:64:a0:
e6:cf:1b:23:c5:58:1e:c5:a1:22:f0:05:00:d7:74:cd:75:1f:
50:02:10:6b:f5:61:7e:dd:6f:11:41:a1:4f:8d:c5:11:61:68:
9c:bb:0c:60:b2:cd:42:09:10:45:d5:51:5d:6a:52:0b:1e:4a:
30:f5:f1:53:6a:94:6d:b5:51:5c:a0:64:9c:40:9b:14:d2:45:
d0:d3:6e:c2:bb:8a:f0:ef:7a:db:79:6e:c9:82:0e:e6:57:5c:
c5:88:93:b8:5a:39:b6:39:c0:cc:96:b5:e6:7e:96:7d:9a:0d:
6b:c4:65:30:b0:83:76:c0:31:6e:77:b0:bc:ba:84:13:d8:8b:
b8:0f:06:ab:b7:27:ba:8a:cb:7f:63:38:27:08:fc:58:5e:0a:
eb:db:e5:63:ac:19:2d:a2:0c:0e:4e:dc:27:79:a7:ad:1b:f5:
19:0d:0e:6b:a6:ac:5b:8e:a2:1c:05:9e:d4:31:5f:ce:84:25:
9d:34:f9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:42:54 2025 by rpki-client