Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/2vOYyPowPGDAjCDGyDu76jBcr4k.roa
File: 2vOYyPowPGDAjCDGyDu76jBcr4k.roa (raw, json)
Hash identifier: W3hMyPkf9PD2zaqS2CdHGve7g5m13jJhn0hvyERilSw=
Subject key identifier: DA:F3:98:C8:FA:30:3C:60:C0:8C:20:C6:C8:3B:BB:EA:30:5C:AF:89
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0197321AC01DFB19FA7B52527E231DD1637B
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/2vOYyPowPGDAjCDGyDu76jBcr4k.roa
Signing time: Mon 02 Jun 2025 19:25:03 +0000
ROA not before: Mon 02 Jun 2025 19:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207907
IP address blocks: 2a0e:8f02:2060::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:32:1a:c0:1d:fb:19:fa:7b:52:52:7e:23:1d:d1:63:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jun 2 19:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daf398c8fa303c60c08c20c6c83bbbea305caf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:2b:32:8d:8e:8a:e1:7a:65:40:df:da:c5:
e1:16:62:bb:9b:3a:da:a9:2c:d6:da:24:1d:2b:e7:
73:98:ab:bd:54:5c:29:e1:00:c6:b8:18:96:97:d7:
66:55:ca:ef:72:d6:96:a3:1c:e4:ce:60:85:6e:41:
dd:2a:20:a1:15:94:d8:22:88:d6:81:b9:e0:51:18:
68:6c:1b:a0:d4:c6:fa:a3:1c:17:69:76:cc:b0:8e:
f1:6d:2a:0d:fa:93:5d:b2:21:94:c8:07:a9:49:fc:
04:a0:ff:54:bf:dc:0b:5b:e2:f2:6e:89:5b:cb:a6:
59:ef:7f:26:06:4f:e8:2b:a8:d8:22:6a:da:8c:38:
29:b7:bf:c1:3f:6f:43:9b:0f:e9:a7:ab:ed:88:90:
73:18:7c:d5:95:87:62:ef:05:56:78:79:42:30:67:
0d:12:2c:50:46:f1:73:e9:08:90:11:bb:1e:a4:61:
ab:3b:d9:e8:77:a5:75:f4:a4:d5:3c:77:09:13:9a:
f3:ec:6b:a8:41:f1:9b:c9:4a:0c:b1:5c:f2:58:b7:
5e:80:fb:88:ba:09:d2:94:5e:a1:ae:be:59:ba:51:
1d:4d:a5:4b:9c:bf:20:a7:13:72:85:85:3d:0d:2d:
8d:79:1d:08:a1:6a:17:1b:c1:6b:42:0b:79:4c:81:
63:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F3:98:C8:FA:30:3C:60:C0:8C:20:C6:C8:3B:BB:EA:30:5C:AF:89
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/2vOYyPowPGDAjCDGyDu76jBcr4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2060::/44
Signature Algorithm: sha256WithRSAEncryption
88:3b:f7:3b:28:0b:b3:36:f3:4d:2f:44:dc:70:b9:db:53:1a:
9a:6b:fe:52:bf:fd:90:dd:f4:6e:ad:ff:93:70:a3:29:41:56:
b3:56:67:7f:b5:ca:ad:bb:60:80:88:ab:b3:de:63:7e:a5:70:
24:eb:95:3e:3c:2a:c1:d1:99:5d:74:64:fd:11:34:b6:51:11:
e2:22:74:50:c7:37:62:da:08:90:05:69:1f:77:40:bc:c2:2b:
40:12:fe:1d:c6:20:44:49:5d:b1:a8:a5:6c:90:9a:e0:c0:fb:
e3:37:aa:42:30:74:b6:b9:42:0c:d4:bd:29:76:f0:38:c3:44:
1d:80:cd:e7:35:96:17:0d:e7:41:f2:b9:0b:86:df:08:a9:8e:
08:5d:5e:dc:a5:0d:92:f2:e8:43:54:6e:7f:45:d2:08:2f:35:
e8:5c:a2:19:e7:1d:0a:2a:f4:91:17:51:de:10:15:f4:f6:5c:
9c:36:c4:57:55:23:72:07:99:c7:23:27:b2:4f:da:86:16:9a:
44:d5:f7:2b:c8:39:aa:24:ed:cd:44:c5:51:9a:14:f1:52:b5:
f0:c6:54:2d:a5:94:22:c2:85:d1:1b:a5:1b:39:d0:d1:7f:49:
11:e5:21:2d:70:3c:c3:e3:34:d3:cf:e4:c6:5f:5b:a5:0c:c7:
6c:4f:bf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:33 2025 by rpki-client