Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/6vUhZWGddxVPIIeeH6-Dbc9jpk4.roa
File: 6vUhZWGddxVPIIeeH6-Dbc9jpk4.roa (raw, json)
Hash identifier: WfzTHJzN03ulxZw9x6atlyLctl8HtDch71VvQgIPbKM=
Subject key identifier: EA:F5:21:65:61:9D:77:15:4F:20:87:9E:1F:AF:83:6D:CF:63:A6:4E
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0197420C649FFE8F39B4E2A2D56D333723A0
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/6vUhZWGddxVPIIeeH6-Dbc9jpk4.roa
Signing time: Thu 05 Jun 2025 21:43:17 +0000
ROA not before: Thu 05 Jun 2025 21:43:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207416
IP address blocks: 2a0d:d940:1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:0c:64:9f:fe:8f:39:b4:e2:a2:d5:6d:33:37:23:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 5 21:43:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf52165619d77154f20879e1faf836dcf63a64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:91:55:62:2a:66:4c:8c:4e:40:63:98:84:3b:
97:24:36:c4:15:93:bd:19:b0:2b:0e:76:61:8d:2e:
99:0c:19:a1:2a:ff:4b:57:fe:1c:f7:a7:9a:a4:14:
4e:a4:52:cd:44:2b:22:7e:15:b6:83:76:6d:2d:2d:
dc:ec:0e:56:a3:d4:97:48:f9:d6:47:99:15:94:c2:
a1:63:41:d9:a8:01:ec:47:0a:28:6a:ee:92:1e:59:
c1:2f:f9:cc:f8:15:00:31:68:92:94:15:f0:7c:cb:
36:6f:7a:64:8f:e1:c5:8d:c1:6d:dc:ff:6f:57:d1:
8c:0e:d2:22:bd:c1:c8:46:e4:11:bd:59:47:56:35:
cf:18:2f:8b:a3:f2:8b:53:f5:d9:1b:b2:c4:38:2d:
28:80:84:39:07:1b:be:d3:42:ff:19:19:1e:30:d0:
74:af:e5:bc:c8:e9:eb:45:66:94:ef:2e:f0:69:9a:
2b:86:9a:55:d3:d8:46:2c:60:eb:37:21:96:92:c0:
dd:4f:ab:c1:4b:29:ec:ee:c0:26:2b:c7:7d:4f:f0:
be:4c:3b:54:b5:fd:79:ea:b6:60:91:a4:84:aa:2c:
a3:4c:bd:1d:e6:32:bb:42:40:87:95:9c:5d:56:c0:
9e:05:75:0b:6e:de:15:ed:59:77:44:45:ec:38:c0:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F5:21:65:61:9D:77:15:4F:20:87:9E:1F:AF:83:6D:CF:63:A6:4E
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/6vUhZWGddxVPIIeeH6-Dbc9jpk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:1a::/48
Signature Algorithm: sha256WithRSAEncryption
96:fd:b2:68:cc:5a:2b:0b:b0:52:a3:22:4a:6e:ca:60:1c:1f:
72:04:09:b1:49:f9:17:74:de:fd:da:fe:9b:f1:04:88:16:ea:
14:ee:61:b0:b9:c8:49:8b:c2:6e:84:17:3a:f0:68:e5:84:6f:
15:9e:6e:96:54:17:b3:58:0d:e6:96:da:48:09:44:7a:02:e1:
2f:a0:94:92:2b:7b:e3:ce:ad:63:68:d0:4d:0e:f8:e2:60:03:
57:15:02:8a:2a:e8:08:62:c1:8c:32:83:54:02:da:3c:f7:c9:
14:cc:f2:0c:07:2f:c8:60:e9:ca:80:2d:c5:02:15:cd:8a:f7:
34:86:25:e1:d7:40:eb:95:ac:5b:90:5b:92:15:64:09:3b:b8:
d8:5d:12:0a:f7:fc:56:a1:73:5e:57:3f:0c:d9:f7:0a:20:25:
31:df:c4:dc:2c:03:8a:b7:cc:03:e9:d5:5d:9b:c6:29:76:56:
b8:b5:cd:ca:4d:2c:5a:e9:d1:82:79:a9:0a:75:fa:86:00:ef:
cb:1f:88:de:a7:a6:fd:57:f4:5d:89:77:79:22:95:2c:0e:ec:
41:4b:3e:ea:1e:c6:50:bb:ac:64:9a:e0:96:e8:c6:c3:1a:14:
16:fe:7c:79:2d:91:ee:ad:ee:ee:e4:96:d7:58:3e:6c:8a:64:
49:c2:19:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:44:22 2025 by rpki-client