Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/5lfSf59AY-hC6ZBpQqdqsyBgfw4.roa
File: 5lfSf59AY-hC6ZBpQqdqsyBgfw4.roa (raw, json)
Hash identifier: hg0a1WqZnkeotSAobKNfSLW7zXmEvmKKXZqeOoYZdnY=
Subject key identifier: E6:57:D2:7F:9F:40:63:E8:42:E9:90:69:42:A7:6A:B3:20:60:7F:0E
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 01982D16CCB1D48CFD94F1482BFB80393239
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/5lfSf59AY-hC6ZBpQqdqsyBgfw4.roa
Signing time: Mon 21 Jul 2025 13:05:25 +0000
ROA not before: Mon 21 Jul 2025 13:05:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a02:3040:43:ff00::/56 maxlen: 56
2a02:3040:4d::/48 maxlen: 48
2a02:3040:4e::/48 maxlen: 48
2a02:3040:4f::/50 maxlen: 50
2a02:3040:4f:8000::/50 maxlen: 50
2a02:3040:4f:c000::/50 maxlen: 50
2a02:3040:50::/48 maxlen: 48
2a02:3040:58::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:16:cc:b1:d4:8c:fd:94:f1:48:2b:fb:80:39:32:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Jul 21 13:05:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e657d27f9f4063e842e9906942a76ab320607f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:c8:d2:75:4f:a8:18:e6:a6:fc:ef:65:54:
f4:ec:0b:dc:aa:32:68:93:41:94:e3:64:33:84:a0:
ea:9e:e2:de:ce:5f:f2:d9:e6:29:f4:e1:a5:71:46:
fe:86:d0:c0:8c:d2:83:6d:0f:a7:06:96:75:1f:74:
41:e1:9c:6b:07:2d:4d:87:d6:0a:5e:eb:e0:5b:e8:
58:10:41:cd:02:5d:7a:a5:c6:6e:c2:9e:6e:9e:4c:
47:b2:70:0c:f6:99:b0:55:67:e6:65:84:3d:83:79:
6b:5a:ee:e7:55:64:68:d0:fc:40:0f:e8:d0:05:48:
6f:60:3d:f8:83:5b:f4:9b:66:4e:3c:45:97:67:03:
1e:28:d6:dc:fb:c3:ea:f9:c7:ca:df:b7:57:3d:a2:
7a:00:6b:58:8a:d7:a6:32:c1:cf:3c:b4:d6:60:f7:
dc:07:09:3b:74:05:40:ac:24:22:43:ce:b7:c0:4e:
2b:05:69:b1:c4:c1:d6:7e:29:f7:9f:8f:d9:ca:80:
d9:b1:02:3b:99:55:aa:d6:67:b9:e0:71:7b:de:ad:
b6:84:54:a4:88:d2:56:22:c8:db:4b:07:e3:42:a1:
22:dc:93:f5:aa:49:41:b6:dc:49:59:63:f0:94:fc:
90:85:0a:37:41:2c:ff:56:29:ae:69:a7:2e:d7:05:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:D2:7F:9F:40:63:E8:42:E9:90:69:42:A7:6A:B3:20:60:7F:0E
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/5lfSf59AY-hC6ZBpQqdqsyBgfw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:3040:43:ff00::/56
2a02:3040:4d::-2a02:3040:4f:3fff:ffff:ffff:ffff:ffff
2a02:3040:4f:8000::-2a02:3040:50:ffff:ffff:ffff:ffff:ffff
2a02:3040:58::/48
Signature Algorithm: sha256WithRSAEncryption
26:96:2b:df:f4:c7:7f:92:6b:19:de:6f:e3:22:aa:e0:9c:d8:
9a:ea:07:a2:a7:43:22:57:ad:6d:c3:f7:70:0a:1d:39:65:e5:
b7:d8:61:bd:50:a7:3c:a5:7e:4f:3e:7b:3a:8c:6b:e5:1e:d3:
cc:48:0e:6c:a9:78:2e:17:39:04:03:5b:bf:79:4a:55:c3:86:
6f:f6:f3:32:bf:64:09:8a:0c:99:ee:42:da:f5:88:97:ae:46:
b7:33:50:b8:cc:1b:e3:91:3c:b9:b3:2e:7c:8b:1f:48:df:19:
de:ed:eb:c6:4c:93:6c:93:70:9d:15:c3:4e:f5:3f:e5:81:5d:
e8:a1:15:18:ef:32:c2:9a:5f:d2:c4:09:16:a1:9c:de:88:a4:
54:77:41:de:c9:dc:c3:99:c3:e0:08:23:59:bd:6b:4a:51:82:
37:de:de:6f:62:80:a9:55:19:8a:7f:c7:f7:0f:56:44:88:6a:
8d:ae:09:f1:88:6a:5a:ac:31:6f:e3:db:1b:ae:3c:31:76:72:
7a:69:c9:38:b2:26:9a:a9:70:2a:45:0d:06:95:dc:9e:b2:e1:
10:67:11:fb:16:8a:3f:4b:2d:4e:8f:6c:b7:6b:ff:86:a7:5b:
94:81:6e:d6:b9:ff:60:ef:b4:f1:12:b7:2f:49:14:46:14:33:
3f:08:3d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:10:10 2025 by rpki-client