Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/Eo0dId6A79FMWJgsJrbvuL3-EFE.roa
File: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (raw, json)
Hash identifier: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=
Subject key identifier: 12:8D:1D:21:DE:80:EF:D1:4C:58:98:2C:26:B6:EF:B8:BD:FE:10:51
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 0196F4B0452AA3C7BB4E0485AA9D8D37295D
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/Eo0dId6A79FMWJgsJrbvuL3-EFE.roa
Signing time: Wed 21 May 2025 21:11:54 +0000
ROA not before: Wed 21 May 2025 21:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205692
IP address blocks: 2a0d:7a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f4:b0:45:2a:a3:c7:bb:4e:04:85:aa:9d:8d:37:29:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: May 21 21:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=128d1d21de80efd14c58982c26b6efb8bdfe1051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:7b:95:2d:5b:75:d0:ed:58:07:e6:0d:25:
d8:a6:bb:48:9e:ed:8a:24:e3:9d:25:a0:65:34:48:
19:24:48:8f:73:63:c3:bb:bd:d9:cd:a7:dc:6d:32:
59:9b:f3:1a:55:86:e8:dd:97:f8:17:43:97:8e:7f:
55:b6:11:62:5e:a1:78:a2:3b:a2:25:ca:ca:74:6e:
72:41:49:e6:89:34:d3:0a:57:2a:0d:ef:00:2e:d5:
40:76:80:e6:89:5d:dd:51:db:84:be:1e:54:62:bb:
66:d4:b0:a0:11:f0:ab:01:bf:a7:61:c5:a5:26:01:
59:ea:14:d4:dc:25:80:dd:9d:92:12:da:08:04:37:
78:c7:95:b6:6e:0b:47:00:96:f1:91:a5:fd:c1:53:
45:c5:72:e4:3d:8f:62:3b:80:6e:7e:05:4e:6e:c7:
4a:f8:38:a4:db:de:89:f1:5a:3e:18:16:70:df:12:
b8:df:8d:98:42:78:17:54:0f:d9:7b:b2:be:c8:99:
66:12:63:19:e1:db:4c:44:18:10:f1:a3:29:21:18:
ee:bc:c9:13:e3:dd:54:11:44:39:af:26:80:60:49:
a1:02:c4:6d:53:54:be:0c:3f:29:f3:de:65:22:5a:
53:95:57:55:58:40:ab:0d:32:21:a6:9b:72:d4:db:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8D:1D:21:DE:80:EF:D1:4C:58:98:2C:26:B6:EF:B8:BD:FE:10:51
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/Eo0dId6A79FMWJgsJrbvuL3-EFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
1f:65:77:4d:f8:f9:39:41:7b:e0:3c:94:25:59:05:79:a6:73:
21:1c:6d:2e:1b:fa:ec:f4:f7:9b:90:e3:ce:d1:5c:d5:a3:78:
93:d2:c6:93:07:7c:71:7d:c1:68:cf:bc:04:25:c6:88:77:8d:
f9:5d:af:01:38:40:e1:4c:f7:bf:6c:15:a1:f3:e7:b7:56:08:
2c:15:73:72:cd:71:2c:7f:db:37:5d:aa:49:71:6f:e0:bd:e0:
77:90:08:26:e8:7f:42:16:20:aa:74:53:32:1c:74:88:4d:9c:
fc:29:8e:af:49:b4:ac:1f:0f:eb:b1:66:1f:81:97:6b:00:42:
b7:f1:c1:d8:a5:6e:46:ed:f8:51:59:c4:19:46:3b:3f:01:ff:
95:4d:06:7e:1a:0b:6e:9f:ec:b1:00:23:55:38:ff:6e:69:47:
f0:72:41:84:ea:21:7e:67:cc:9f:9f:c7:34:a6:6d:89:a4:7a:
e2:58:7d:ed:e2:95:4e:3e:e5:2e:e1:47:01:b1:0a:bb:bb:7c:
43:c3:83:2d:41:b3:c4:d5:77:37:49:6d:dc:29:d3:a3:e6:31:
9b:da:2e:2d:0f:0f:19:83:b6:33:50:37:18:4b:07:20:db:d1:
e5:ec:d5:76:83:ef:65:e1:8c:d9:af:a1:d9:d6:18:40:21:c3:
ab:f0:61:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:53 2025 by rpki-client