Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2ivwdlO6NCnABRC9kvr6gLpW3_c.roa
File: 2ivwdlO6NCnABRC9kvr6gLpW3_c.roa (raw, json)
Hash identifier: pNmKWv8L1NuyZyxU5cRcvqYqmxpaVqyNi8Y/MELNu7M=
Subject key identifier: DA:2B:F0:76:53:BA:34:29:C0:05:10:BD:92:FA:FA:80:BA:56:DF:F7
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 0197187F720697281D0240916B309E3310D0
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2ivwdlO6NCnABRC9kvr6gLpW3_c.roa
Signing time: Wed 28 May 2025 20:04:54 +0000
ROA not before: Wed 28 May 2025 20:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a01:f4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:7f:72:06:97:28:1d:02:40:91:6b:30:9e:33:10:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: May 28 20:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da2bf07653ba3429c00510bd92fafa80ba56dff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:19:59:ab:14:f7:c0:6d:23:10:f9:84:32:
3c:23:6c:fc:62:5e:d7:4f:20:ef:87:a3:82:fa:f9:
81:8e:78:8f:46:e4:e9:9f:5e:c3:a3:74:ee:1d:ba:
c7:0b:1f:f2:39:85:71:16:5c:a8:c5:51:4b:29:d4:
7c:38:8b:1c:be:66:ab:b0:0c:00:c7:bd:2d:c6:b0:
03:49:23:8d:6e:92:58:21:da:f7:4d:13:ba:3b:1d:
8b:5e:b8:5c:a9:7b:7f:64:c4:ff:8a:16:94:f3:ba:
f4:8d:44:8c:2e:0e:cc:33:05:c4:1e:54:48:9b:6d:
3f:42:7a:91:33:b1:b2:86:d8:cd:2a:0f:38:9b:42:
d0:05:8b:d4:31:1b:19:67:4f:d4:cf:47:f2:09:49:
67:32:5d:89:f6:7f:ae:5d:03:f8:42:07:e7:2d:e2:
60:a0:52:80:03:89:a5:67:2d:82:01:4d:78:1f:18:
cb:4b:21:fa:30:d3:c5:d8:86:74:09:e5:5d:cd:dd:
5e:3a:8d:65:97:d1:00:e7:71:5f:25:c9:43:b1:89:
46:ce:18:6c:ef:cc:16:fd:4c:a8:1e:29:41:56:4e:
4a:32:ef:ff:5a:0a:a2:61:2b:ab:21:eb:62:b0:19:
b9:ef:60:a4:17:da:3c:9c:09:be:ee:e7:7f:e2:99:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2B:F0:76:53:BA:34:29:C0:05:10:BD:92:FA:FA:80:BA:56:DF:F7
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2ivwdlO6NCnABRC9kvr6gLpW3_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f4c0::/29
Signature Algorithm: sha256WithRSAEncryption
26:75:7b:15:8a:98:9b:3e:7c:17:b1:cc:bb:f0:b3:9a:fd:39:
6b:88:b1:9a:53:5c:35:47:ff:ae:2b:da:7b:5b:3a:c3:6a:a8:
8a:8d:65:05:da:70:77:04:68:26:fd:df:7a:7d:d8:17:c8:53:
65:18:b6:2b:9e:75:7b:5e:41:ca:bc:89:e5:33:0a:7e:0f:e6:
2d:2c:98:c6:0b:4e:bd:87:c0:22:73:5d:f3:d3:1b:1a:40:8b:
73:2c:18:4a:54:4a:ae:62:36:d2:56:67:aa:8e:d5:d7:11:4a:
1a:4c:63:b9:e9:4c:62:56:3f:1e:b2:47:4f:60:b9:ef:dc:c3:
45:37:06:11:60:61:fc:03:05:63:ec:ae:32:70:80:17:ca:81:
57:e0:27:9b:cc:19:71:bd:ca:f6:e8:4c:d7:fd:98:32:74:bd:
f0:70:02:7e:ca:ae:3f:db:f0:27:62:33:a7:b5:79:77:82:5e:
98:26:8f:e2:85:ab:7e:53:6a:49:35:75:83:fd:82:c1:0e:e1:
6c:56:ff:f9:41:7c:e1:00:dd:d6:fc:41:3a:b8:bc:ad:a9:6f:
cf:e2:ce:d9:e1:a7:ee:f8:0d:66:91:06:9f:b1:d4:71:a8:ed:
6a:63:b7:63:22:85:6c:cb:45:c0:83:10:6a:a5:48:69:c6:7f:
18:67:01:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:20:34 2025 by rpki-client