Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/cSDgENBFff7SMicA5wSq_jA-MRY.roa
File: cSDgENBFff7SMicA5wSq_jA-MRY.roa (raw, json)
Hash identifier: L5827Cx/Cn25nVJdb2F1jPimmzkM2ZE/4b/2pEQB2wk=
Subject key identifier: 71:20:E0:10:D0:45:7D:FE:D2:32:27:00:E7:04:AA:FE:30:3E:31:16
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 0197187D9D15B65ACA27919E626DB2C35094
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/cSDgENBFff7SMicA5wSq_jA-MRY.roa
Signing time: Wed 28 May 2025 20:02:54 +0000
ROA not before: Wed 28 May 2025 20:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a01:f240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:7d:9d:15:b6:5a:ca:27:91:9e:62:6d:b2:c3:50:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: May 28 20:02:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7120e010d0457dfed2322700e704aafe303e3116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:14:a9:ba:31:7e:2c:23:70:a5:85:e1:9c:
18:c8:2c:73:b3:59:68:10:56:c0:0a:69:a1:da:70:
65:d3:7f:58:14:13:9b:93:e0:a1:d0:75:f7:e2:3b:
66:2b:cd:12:05:cc:0c:45:3f:14:0b:fe:bb:cd:aa:
a2:75:0d:61:d3:5b:cc:0d:71:d0:17:c5:e4:e9:68:
68:2e:04:1b:12:f0:2e:ba:5b:93:b3:5c:c3:7e:de:
8f:d6:55:9e:aa:e2:63:93:cc:fd:66:c1:47:af:99:
db:24:b5:a4:18:87:46:32:fb:3e:6a:52:fb:61:63:
82:26:ff:e3:46:93:4f:2f:f0:e4:b8:02:94:6d:1e:
98:26:ed:2a:96:f3:f6:44:db:ad:e2:14:03:c7:5e:
3c:d2:06:02:c5:87:5a:60:c3:c6:00:42:8c:86:10:
d1:3d:ac:9b:a5:c5:37:e8:bd:2b:da:cb:0a:e8:d5:
17:18:a9:17:9d:3c:67:f5:cb:22:21:56:cd:0f:f0:
3b:d4:2b:0b:3c:b0:26:bb:e6:6c:e0:8d:aa:c1:84:
3c:9c:b9:b2:11:c0:b9:1d:31:04:74:4c:92:1f:ab:
2c:8b:13:53:9e:a4:f8:d3:99:9b:6d:93:2c:e0:ff:
ed:43:4f:ab:9f:91:d1:66:ff:34:78:da:25:fa:c9:
cb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:E0:10:D0:45:7D:FE:D2:32:27:00:E7:04:AA:FE:30:3E:31:16
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/cSDgENBFff7SMicA5wSq_jA-MRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f240::/29
Signature Algorithm: sha256WithRSAEncryption
43:76:40:eb:c7:d4:a0:e1:48:9c:c3:5b:ed:b7:fc:12:f0:9c:
a1:eb:c8:99:c6:80:f6:2b:aa:96:77:bd:a7:21:9a:b9:95:fe:
34:cf:0e:65:04:30:b2:41:79:6e:81:3d:e9:cb:a7:e6:c2:4e:
61:6c:c0:16:04:9c:98:64:bf:03:ad:fa:1b:f9:3e:25:a2:87:
c7:70:e1:7b:ea:ef:bb:54:bf:c9:81:3c:75:06:c1:2c:b0:60:
7f:a0:83:53:54:4d:7d:da:a6:30:f7:b8:15:b2:85:82:bf:d5:
a8:71:5a:ff:9a:7e:93:77:2d:1f:37:7a:29:c0:8a:c1:18:9e:
80:ed:c4:6b:f1:83:e1:2b:de:69:1c:18:13:8f:ed:06:08:ef:
d8:56:90:ff:3d:e8:ef:0a:f1:5c:f0:49:e8:53:40:62:38:db:
40:37:f9:d2:2c:89:25:ce:87:06:e0:61:86:3f:14:ff:ff:b8:
cd:d0:93:56:56:31:0a:d6:7b:5b:32:85:0f:92:07:bc:ef:54:
3c:7c:a6:23:32:51:8c:d2:b9:28:13:13:d4:fb:1c:b0:de:b8:
63:30:e3:6f:11:64:34:29:31:0e:ec:9d:cf:4f:fe:4e:b9:ef:
f2:8e:ef:ce:40:7b:08:d6:d2:62:48:42:64:31:57:65:4a:4d:
88:84:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:44:24 2025 by rpki-client