Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EjlYOZVRzrJJUMhE_eOpGvoozPc.roa
File: EjlYOZVRzrJJUMhE_eOpGvoozPc.roa (raw, json)
Hash identifier: pOyyqQgDlXAalsra7bIa43DmDnCbH14y3kiG7+H79HE=
Subject key identifier: 12:39:58:39:95:51:CE:B2:49:50:C8:44:FD:E3:A9:1A:FA:28:CC:F7
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0196FD5D57E6A03E986BD8343E40B7CC63BA
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EjlYOZVRzrJJUMhE_eOpGvoozPc.roa
Signing time: Fri 23 May 2025 13:37:55 +0000
ROA not before: Fri 23 May 2025 13:37:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207860
IP address blocks: 2a0c:b641:490::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:5d:57:e6:a0:3e:98:6b:d8:34:3e:40:b7:cc:63:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: May 23 13:37:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=123958399551ceb24950c844fde3a91afa28ccf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:61:e8:60:04:71:86:e2:aa:8a:a4:95:67:
92:4b:e8:f4:30:e5:cf:f0:3c:fe:ce:90:2f:19:ce:
fe:3c:6f:71:fe:0b:6e:f8:63:4b:c4:60:a9:40:fb:
a5:dd:a3:5c:d4:ee:63:5b:ca:db:ff:6a:67:15:3f:
9a:27:ff:53:d9:d6:91:47:ae:7d:be:87:5a:14:d2:
b2:73:a6:c1:38:6d:ca:1b:d1:6e:cc:3d:16:83:88:
8b:0f:16:e5:81:b8:34:92:51:80:f4:68:f1:67:e3:
33:83:63:d9:df:a1:cb:de:14:c1:be:bc:63:49:61:
a1:16:bd:43:59:2b:8f:f6:87:a2:8b:7f:fc:54:d1:
81:8b:86:17:01:70:04:1a:24:85:dc:87:36:20:50:
76:1f:fb:b7:08:4c:38:fb:3a:e9:3c:2d:c6:de:88:
8d:36:a2:b9:80:df:7d:24:a6:d5:d3:7d:74:26:a2:
97:c0:16:51:f4:c3:64:04:06:58:a1:69:b0:2e:05:
7c:f0:76:cf:16:98:b9:91:de:48:cc:ea:ce:e1:66:
c2:c3:7f:54:1f:5d:33:c9:ad:d5:0f:7c:fc:f9:10:
21:22:a1:bb:4c:32:cd:51:51:dd:12:56:a6:2b:d8:
18:da:4b:e1:67:84:3c:23:00:ab:fc:86:14:7e:b2:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:39:58:39:95:51:CE:B2:49:50:C8:44:FD:E3:A9:1A:FA:28:CC:F7
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EjlYOZVRzrJJUMhE_eOpGvoozPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:490::/44
Signature Algorithm: sha256WithRSAEncryption
66:77:d6:b1:d7:b5:e2:da:b5:8c:79:f4:c2:78:58:11:e1:ec:
6e:fd:b9:ae:ee:76:7b:44:2c:af:17:c2:af:a5:49:7e:06:2c:
63:25:b4:13:03:17:20:b8:12:a0:69:65:eb:a1:35:b6:e1:09:
9f:a7:15:b0:b4:a8:7b:e0:f7:38:f0:2d:ab:1d:95:89:02:69:
4d:cb:76:3f:53:f5:60:f2:5a:a6:49:e0:cc:67:f7:78:79:1f:
7e:f7:45:cb:92:e3:cd:16:fa:00:8e:80:e3:8c:d3:36:ab:16:
c6:74:33:f3:f4:8f:14:ba:08:29:a6:62:11:88:0c:2c:e4:e6:
23:66:5a:15:c8:b3:95:f8:5e:91:34:1e:79:dc:98:df:4d:cd:
17:4a:2f:65:38:a1:5d:40:94:d2:d5:21:b1:c2:5f:b8:0c:f7:
2e:0c:18:20:5b:a3:34:d6:f6:dd:32:d4:08:ee:52:28:07:09:
65:29:65:f9:53:14:12:58:b6:6c:c5:87:99:99:cd:27:b9:f3:
d9:fd:74:a3:4f:85:98:b1:5d:69:55:ec:9e:cb:b3:5f:1e:c4:
97:43:26:37:8d:66:79:27:93:f9:3c:fc:53:91:b8:a3:fe:5b:
cf:e0:2b:b1:6e:b3:57:a8:5b:ed:6d:c5:4e:e3:84:94:ea:e6:
3d:5a:f2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:19:48 2025 by rpki-client