Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/O1F05rGLijtpkxL-0XbVIipG-xY.roa
File: O1F05rGLijtpkxL-0XbVIipG-xY.roa (raw, json)
Hash identifier: DOP/h9yHg/VCQAYBE/uv+xgRFJYWL9JK/MD3aAWo8ow=
Subject key identifier: 3B:51:74:E6:B1:8B:8A:3B:69:93:12:FE:D1:76:D5:22:2A:46:FB:16
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0196C55085A7BE5005530F601F1BC0D0C2DE
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/O1F05rGLijtpkxL-0XbVIipG-xY.roa
Signing time: Mon 12 May 2025 16:25:10 +0000
ROA not before: Mon 12 May 2025 16:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213655
IP address blocks: 2a0e:8f02:f073::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:50:85:a7:be:50:05:53:0f:60:1f:1b:c0:d0:c2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: May 12 16:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b5174e6b18b8a3b699312fed176d5222a46fb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:2c:75:45:c5:81:a2:2c:a0:2a:62:44:21:
bc:9f:6c:6c:99:63:d5:06:56:83:95:29:2a:a9:f1:
2f:07:01:f9:37:16:64:61:e6:5e:98:7a:2d:e7:71:
87:5f:44:9d:63:2e:37:dc:9c:ac:15:41:12:68:e5:
b6:fa:0d:7e:81:85:cc:a8:72:ae:e1:1a:22:51:56:
97:e4:ac:f2:e7:9a:a5:4f:92:c0:7e:6e:d2:15:b5:
5b:48:80:70:aa:14:e4:19:c0:cc:fc:c4:86:45:8f:
a1:e0:7a:ad:b0:c4:be:df:71:b4:aa:da:48:d0:46:
09:15:94:c5:fb:43:b8:a5:37:26:b7:78:bd:d9:1e:
ec:43:48:bf:74:b1:1f:45:5a:97:f9:97:e5:92:3f:
1a:c1:58:de:55:c8:66:55:f9:b0:38:0c:cb:94:59:
b7:11:c4:86:64:27:c6:9e:ad:fd:55:04:94:48:b0:
1e:11:50:c1:9d:36:83:4a:c5:ce:51:bb:96:15:c6:
b5:f1:5a:75:42:3b:d7:c0:62:5c:ed:a5:d9:50:d5:
a5:a3:3b:6a:a0:13:89:04:69:eb:8f:a3:5a:91:23:
06:42:89:5e:03:c4:e7:92:77:26:b2:17:bd:9e:5e:
ea:89:81:bc:68:6d:6c:42:06:bc:e4:8e:6a:02:1d:
42:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:51:74:E6:B1:8B:8A:3B:69:93:12:FE:D1:76:D5:22:2A:46:FB:16
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/O1F05rGLijtpkxL-0XbVIipG-xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f073::/48
Signature Algorithm: sha256WithRSAEncryption
4c:71:77:09:96:66:e8:ab:28:03:9c:0a:66:3e:74:55:8e:66:
fb:c8:76:34:89:89:bd:67:1d:ea:18:18:a0:99:47:c7:60:78:
db:e1:92:c5:2f:8e:85:9d:94:06:2d:9d:05:84:19:e4:4b:37:
9b:5f:f7:f3:97:e7:e1:d2:7c:46:df:a6:85:c9:44:cf:44:20:
09:de:f2:b1:29:b3:62:5c:3d:13:5f:d0:dc:8c:21:76:4d:e0:
c8:7f:2a:c4:ea:5d:1c:32:ad:83:43:12:31:87:bb:e5:06:6c:
34:d2:53:98:3e:a5:8e:ac:ba:a2:2a:5d:a1:a6:69:41:12:99:
29:37:ba:71:98:02:2d:47:72:08:ad:1b:76:92:fb:af:a1:b4:
b3:98:60:d1:86:58:ac:2a:43:35:20:f4:ec:7f:8b:e7:f5:de:
b8:0d:fb:18:91:d6:66:06:5c:ec:dd:a6:db:f8:1c:a0:33:12:
f8:59:da:b9:fb:82:85:9e:80:1d:96:9e:4a:be:3f:48:41:5a:
12:35:c9:ab:87:12:13:fc:d2:c2:f9:a8:9d:4d:6d:77:0e:e9:
50:e3:a7:c0:68:86:03:31:44:6b:e2:dd:c6:ce:97:c2:e5:e6:
21:ac:90:3b:c7:9b:23:1e:fd:1f:fd:a6:e5:ac:e8:3a:8c:88:
35:d0:b8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:51:27 2025 by rpki-client