Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/E7FVM6cZuC5q4A5jL1ovtOGhkE8.roa
File: E7FVM6cZuC5q4A5jL1ovtOGhkE8.roa (raw, json)
Hash identifier: IuRsmWYo82blmhOWUchnTtFcH03/qFIHQT9uWCFSoNg=
Subject key identifier: 13:B1:55:33:A7:19:B8:2E:6A:E0:0E:63:2F:5A:2F:B4:E1:A1:90:4F
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01968C4147A592EFFADD9B4EF577325BD444
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/E7FVM6cZuC5q4A5jL1ovtOGhkE8.roa
Signing time: Thu 01 May 2025 14:30:10 +0000
ROA not before: Thu 01 May 2025 14:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209355
IP address blocks: 2a0c:b641:440::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:41:47:a5:92:ef:fa:dd:9b:4e:f5:77:32:5b:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: May 1 14:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13b15533a719b82e6ae00e632f5a2fb4e1a1904f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:5e:4d:32:b4:c4:f6:c4:2f:b3:d5:e7:49:
b3:1c:0a:8f:df:a2:14:af:5a:a4:7d:da:c1:42:bc:
f7:29:88:aa:40:38:50:10:82:92:39:95:fb:69:14:
38:3d:b2:2c:de:2c:81:82:5d:da:a3:07:7a:d9:de:
5f:eb:c1:0b:0e:5b:83:76:a8:a0:a0:62:4c:d5:f8:
eb:73:24:9f:b2:77:8a:b1:f3:57:a8:3f:64:e5:61:
01:bb:68:ad:89:ec:ca:98:b2:fd:fd:fa:41:59:82:
39:ee:df:44:df:43:8f:15:07:c4:dc:5e:25:fc:8c:
7d:ff:d9:ee:e3:0b:7f:c4:a0:7f:78:dd:8a:ee:b2:
47:c8:5a:df:bf:35:94:b5:e6:f8:81:7c:c5:08:2f:
f8:bc:95:ff:7e:e7:ea:1b:98:91:93:ff:8f:06:3c:
48:4f:29:77:34:ba:46:0b:f2:f7:5d:fb:9f:f0:0e:
5f:0d:ca:75:72:85:6f:59:24:46:df:05:02:e7:16:
d1:eb:0c:9c:29:32:a8:98:2a:a8:ef:0a:67:bd:8c:
3a:63:62:70:7d:e0:ab:6b:a2:98:7a:90:c8:7c:f1:
27:80:92:5e:c7:69:e1:f0:fc:06:c0:5b:ca:84:fc:
d9:f6:5c:1d:8f:7e:8a:65:8d:79:18:85:e8:79:d7:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B1:55:33:A7:19:B8:2E:6A:E0:0E:63:2F:5A:2F:B4:E1:A1:90:4F
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/E7FVM6cZuC5q4A5jL1ovtOGhkE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:440::/44
Signature Algorithm: sha256WithRSAEncryption
75:64:86:16:65:53:6f:86:b7:d5:e8:95:07:e7:42:b8:4c:e6:
ea:4a:e0:0c:a6:28:92:e0:50:b7:46:6e:80:36:ce:0e:72:3b:
7e:a9:24:89:f9:56:99:7b:5a:5f:ff:ae:b4:f5:8f:83:7b:1d:
f6:90:63:35:51:1c:6d:84:23:5e:55:2e:c0:ae:07:c1:51:71:
fe:55:31:3f:f9:83:1c:03:7f:f8:a3:14:d0:7f:b6:38:3a:72:
08:71:47:67:e7:bc:7d:cc:0e:2d:74:7d:1e:df:b7:e3:0e:42:
11:dc:56:7d:08:34:be:9a:2f:2e:f1:69:a0:d7:14:b3:22:71:
6f:92:59:0d:a6:0e:9d:fb:8f:9f:a6:cd:39:74:41:02:d5:53:
71:28:c9:5f:a4:de:bd:a7:14:dc:23:f4:17:7b:7b:b3:37:c9:
1d:05:1b:41:7d:c3:14:24:f3:10:92:d9:5d:b3:a6:07:87:48:
d6:3a:88:4c:cb:c6:99:0c:89:7f:da:48:3f:01:0b:5c:0a:20:
5c:62:9d:8c:f7:10:9f:ef:ce:cc:fa:54:2c:c2:5f:5b:b3:7e:
ef:e5:21:ff:f9:18:58:f9:39:09:2c:11:74:d8:25:54:e6:97:
51:64:1b:05:96:00:45:58:da:da:74:a8:47:34:7f:ce:c7:e4:
74:c1:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:58:01 2025 by rpki-client