Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Nx_LlHukO6YVT2BEBxBXRcLN_po.roa
File: Nx_LlHukO6YVT2BEBxBXRcLN_po.roa (raw, json)
Hash identifier: KT5voOJbr5oTRoQ5gvpwOS1NktXBmDgt7n2ImgfHYoM=
Subject key identifier: 37:1F:CB:94:7B:A4:3B:A6:15:4F:60:44:07:10:57:45:C2:CD:FE:9A
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 019723432FF4D58A178535855581A59CDB50
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Nx_LlHukO6YVT2BEBxBXRcLN_po.roa
Signing time: Fri 30 May 2025 22:14:55 +0000
ROA not before: Fri 30 May 2025 22:14:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203062
IP address blocks: 2a01:e281:b400::/40 maxlen: 48
2a01:e286::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:23:43:2f:f4:d5:8a:17:85:35:85:55:81:a5:9c:db:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: May 30 22:14:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=371fcb947ba43ba6154f604407105745c2cdfe9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:46:49:6d:e5:e9:75:e4:73:6e:34:39:88:8c:
86:02:50:2a:f1:19:a1:f4:2a:e8:09:8f:87:4b:77:
80:3f:cd:03:b5:81:c1:dd:97:ec:28:a4:3d:a0:38:
4a:dd:70:b6:e0:d5:98:0d:01:9c:af:5f:f0:90:ba:
d6:91:88:91:8a:58:da:5d:f2:cd:11:f8:dd:dd:c8:
0b:0d:78:07:83:82:4a:ef:75:1a:01:8c:dc:56:a0:
07:e7:0f:c2:5a:63:89:38:4d:22:cf:66:64:47:ff:
b0:ee:d8:a9:02:5c:6c:ba:67:02:11:be:4d:56:43:
fa:bd:fb:20:e5:c2:da:9c:ad:38:aa:69:58:1f:2d:
5e:c6:51:cb:94:7d:dc:f4:83:3e:ae:05:e5:ac:77:
ff:f2:bc:0c:20:84:35:03:9f:5b:17:a0:8c:a8:22:
03:c3:a2:ca:a2:e8:79:75:11:db:4f:81:24:78:bc:
f7:70:a2:da:16:9c:c1:78:75:41:38:e4:f9:39:d5:
68:71:a0:5b:95:33:6d:ba:68:23:e1:b7:ae:a9:ae:
f6:f0:80:d6:36:d8:e0:ae:28:c8:96:b4:54:a3:9a:
97:5b:fe:f7:fd:1a:fe:8c:c1:14:33:ac:7f:6b:63:
d6:a4:9b:4f:e4:1d:05:5c:2b:57:4e:f8:9e:64:8a:
2c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1F:CB:94:7B:A4:3B:A6:15:4F:60:44:07:10:57:45:C2:CD:FE:9A
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/Nx_LlHukO6YVT2BEBxBXRcLN_po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:b400::/40
2a01:e286::/32
Signature Algorithm: sha256WithRSAEncryption
68:df:18:4a:b0:9f:14:02:65:c9:50:1e:9c:3c:28:c8:d5:6d:
9e:2d:ad:62:9c:4a:ee:3b:3d:82:de:90:ab:fa:82:08:fc:ea:
5d:91:1d:a3:30:43:f0:02:23:23:38:53:59:e4:c8:d4:57:2b:
bb:16:2f:f4:74:be:37:bd:e6:43:44:b5:03:ba:2a:e1:89:92:
d2:e5:66:1d:aa:fa:c6:2e:19:a6:4b:69:3e:c5:52:7b:9c:08:
55:d1:ce:d6:79:1c:7e:80:5c:41:fc:14:a2:f3:28:f7:85:6c:
2b:81:0e:ed:e9:b1:5a:40:a1:b5:95:25:8c:30:1f:65:23:9d:
43:d8:ed:fa:06:8c:71:8c:56:71:2f:5f:3b:3c:61:54:cb:04:
b5:5b:62:dc:7a:35:c0:75:ca:f6:f3:6f:38:e7:31:9a:98:5d:
72:ee:d6:9c:21:df:ad:5c:0c:46:0c:04:a1:38:67:e0:36:46:
1d:98:e3:19:b3:d8:c9:73:e7:17:55:b1:39:d1:a7:f9:72:2d:
46:d4:d3:74:07:14:3b:e7:64:d1:2c:2c:a1:46:2d:f0:95:53:
09:86:ce:28:b9:31:3c:07:5a:6a:28:8d:d8:67:1a:26:16:cb:
b9:e1:54:2e:ff:5b:22:b3:bc:7b:8c:b5:31:76:0d:45:81:12:
c9:da:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:43 2025 by rpki-client