Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/efoDT2af1r3VIxCXKIZiUqYjb70.roa
File: efoDT2af1r3VIxCXKIZiUqYjb70.roa (raw, json)
Hash identifier: Satp0B+ZSfcMrrpGb8DTBT0YLETw5Fxx+fyID/mnlcA=
Subject key identifier: 79:FA:03:4F:66:9F:D6:BD:D5:23:10:97:28:86:62:52:A6:23:6F:BD
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019819556E1A8C4E81056F149C1C04E2072A
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/efoDT2af1r3VIxCXKIZiUqYjb70.roa
Signing time: Thu 17 Jul 2025 17:01:25 +0000
ROA not before: Thu 17 Jul 2025 17:01:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215585
IP address blocks: 2a13:5c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:19:55:6e:1a:8c:4e:81:05:6f:14:9c:1c:04:e2:07:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Jul 17 17:01:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79fa034f669fd6bdd523109728866252a6236fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:db:8d:08:27:41:f5:c7:07:6c:85:7b:99:
fd:26:77:30:6e:dc:fb:31:0c:d2:f8:8e:42:be:cc:
51:b9:d7:20:21:93:88:26:b3:64:8f:95:9d:79:bd:
eb:ef:da:c0:ac:80:44:b5:d2:23:ac:19:22:5d:70:
3c:ad:7b:88:55:b8:de:6e:56:7c:6c:dc:bf:91:a0:
f0:da:d6:60:34:7d:80:5c:a6:6f:59:e6:3e:52:80:
8f:0d:c9:4c:41:5a:ef:a1:0f:dd:41:00:eb:5a:7e:
79:a6:77:ef:5d:a3:ec:e8:4e:5e:ec:8c:db:4a:42:
ce:62:2c:eb:95:4b:32:d5:2f:e8:a7:7a:ee:2c:9c:
12:ba:21:16:b2:3d:24:53:e6:cc:b2:ee:90:28:52:
92:65:ec:98:c0:52:d1:d2:9e:69:e6:50:0e:d8:60:
e0:f4:cd:50:9b:39:14:b4:ed:ab:41:d0:db:d5:06:
fe:33:6c:e3:38:6c:20:89:de:d9:e1:16:ac:db:c8:
d7:92:02:62:8e:51:34:2f:4b:19:60:dd:60:bb:8b:
16:95:c1:a1:79:53:f8:2c:4c:3f:7d:fe:5e:43:9e:
5e:e7:d9:54:26:bb:04:31:a8:3e:b5:1c:15:c7:aa:
c1:75:9e:a8:0a:d2:53:87:e8:b1:07:ab:f5:a5:5e:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FA:03:4F:66:9F:D6:BD:D5:23:10:97:28:86:62:52:A6:23:6F:BD
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/efoDT2af1r3VIxCXKIZiUqYjb70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5c40::/29
Signature Algorithm: sha256WithRSAEncryption
0b:0b:3c:80:b4:0b:f6:e3:fa:5e:a4:9a:5f:77:d8:21:3b:2a:
46:fd:30:48:4f:55:a1:4a:44:a8:f8:5c:8d:32:f9:fe:dc:6c:
23:12:de:90:2a:09:17:93:e0:a9:ac:84:80:1f:09:d3:3d:b4:
20:ce:e1:49:7a:5a:8e:42:17:36:16:7c:de:f7:22:c4:ca:3f:
cb:49:bd:34:0e:77:73:c1:81:83:5d:e2:23:b0:7b:d2:a4:57:
60:cb:41:a9:22:cf:e8:b6:64:2b:d9:75:3c:80:c9:04:40:c6:
40:11:3d:b5:3f:9c:57:49:7c:04:72:ac:46:83:3d:44:00:41:
1d:cb:ec:d1:29:11:65:93:fc:3e:aa:85:bd:8c:9c:cf:b3:da:
1b:be:03:09:02:be:23:42:a7:5c:f9:d0:27:9b:20:a4:0a:98:
73:96:9f:af:43:74:4b:8e:9f:42:6f:e0:c4:bd:e9:15:32:46:
a8:06:a6:16:f7:e2:d0:50:33:8e:91:b8:99:ba:c6:5f:db:69:
88:ed:e3:de:b7:21:ed:27:5e:4f:43:20:20:22:9c:71:25:11:
03:10:da:20:57:3d:42:2f:16:35:14:0e:4a:d9:0d:97:8d:66:
23:2e:09:bf:10:e1:85:35:ff:c5:b3:5e:2d:3d:9e:7c:d5:eb:
a6:fe:5b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:27:11 2025 by rpki-client