Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/18D2iv-f9zzSJ_yl_SFgtri8b20.roa
File: 18D2iv-f9zzSJ_yl_SFgtri8b20.roa (raw, json)
Hash identifier: ZaEdvyBEqABC7jSspGzgzhnMHXd1rM3fYMa6MRv0Uo0=
Subject key identifier: D7:C0:F6:8A:FF:9F:F7:3C:D2:27:FC:A5:FD:21:60:B6:B8:BC:6F:6D
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 019731FA03516A001770A46796537CB75443
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/18D2iv-f9zzSJ_yl_SFgtri8b20.roa
Signing time: Mon 02 Jun 2025 18:49:17 +0000
ROA not before: Mon 02 Jun 2025 18:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a0d:b9c0::/32 maxlen: 32
2a0e:8843::/32 maxlen: 32
2a0f:c02::/32 maxlen: 32
2a0f:72c1::/32 maxlen: 32
2a0f:da85::/32 maxlen: 32
2a11:1846::/32 maxlen: 32
2a11:2d86::/32 maxlen: 32
2a11:3f03::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:fa:03:51:6a:00:17:70:a4:67:96:53:7c:b7:54:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Jun 2 18:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7c0f68aff9ff73cd227fca5fd2160b6b8bc6f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:bf:99:b2:41:80:e7:34:a4:cf:63:e8:a0:
d4:43:3d:75:2d:62:c1:89:c8:41:57:ff:85:f8:bb:
34:b6:16:f0:7f:63:0a:70:ce:f6:2b:14:19:48:ab:
47:d2:83:62:b7:ac:e5:3e:04:91:18:62:6f:37:21:
c0:6d:6e:fc:e8:a2:e2:63:8d:f9:f2:a4:6d:59:fe:
d7:31:63:0e:32:e0:95:1b:21:8d:06:8e:53:50:44:
ad:8f:14:cb:e7:c6:11:49:af:41:44:17:d5:2a:85:
73:c8:4d:5c:d5:51:6c:95:06:c7:4b:7f:cd:4f:c3:
96:2b:44:8e:04:44:71:bf:be:32:cc:22:81:52:03:
96:6b:d0:4f:cc:07:7e:30:83:4a:d9:02:77:03:0e:
49:9d:a0:6e:4c:44:fe:30:04:52:95:85:19:9c:c9:
57:74:0a:1f:ba:e0:0b:af:08:f6:be:94:c8:02:c4:
17:b6:b8:20:0e:bc:6f:ab:8d:a8:20:97:70:4d:7d:
2b:34:4f:33:e4:60:ad:14:41:7f:42:b6:98:e3:ef:
2e:be:db:c1:ad:fa:4b:8c:12:b1:f8:7d:7a:8d:66:
ae:69:85:93:de:70:07:81:58:2d:5b:15:83:80:f7:
98:2f:3e:16:f4:df:9b:4e:d7:22:75:74:33:11:28:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:F6:8A:FF:9F:F7:3C:D2:27:FC:A5:FD:21:60:B6:B8:BC:6F:6D
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/18D2iv-f9zzSJ_yl_SFgtri8b20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b9c0::/32
2a0e:8843::/32
2a0f:c02::/32
2a0f:72c1::/32
2a0f:da85::/32
2a11:1846::/32
2a11:2d86::/32
2a11:3f03::/32
Signature Algorithm: sha256WithRSAEncryption
62:63:d1:de:72:72:2d:90:0d:3e:70:2c:87:df:62:e9:51:2e:
f7:20:98:d5:3b:51:38:d3:9c:88:be:95:70:5f:a8:58:4a:6c:
0f:46:29:e9:ea:d6:47:5a:3a:af:bb:9e:95:d2:a8:40:35:00:
b8:13:a0:8e:54:fc:0d:ce:e3:34:12:48:26:58:18:14:7d:a7:
86:60:ab:32:53:b4:2b:3f:c7:ec:88:4d:0b:d6:4f:bf:35:28:
4b:aa:bc:18:87:98:69:e0:c7:ce:c0:5d:46:34:0a:9b:67:0e:
51:99:5d:9a:7a:16:5f:83:05:ea:5c:5c:5e:37:06:ee:73:65:
d3:d7:e0:f1:27:6e:96:e2:3b:9e:b6:b8:b6:f4:b1:79:64:c3:
ee:42:9b:f8:43:b9:5a:d5:d1:2d:0b:6e:e8:68:46:d6:cb:d7:
0a:14:6e:56:c4:f6:9a:c4:61:7c:f7:22:dc:c9:2d:a8:15:5a:
68:7d:b8:78:31:3f:bc:0b:ee:81:fa:9d:6d:7e:10:67:63:99:
96:f2:92:f4:7e:46:09:7f:18:3e:a9:0f:69:7a:4b:e2:69:15:
86:f5:d3:27:7d:e7:de:88:b4:b1:3b:9c:85:e9:b3:7f:bf:b0:
38:be:eb:bd:a0:21:d9:b5:b8:b7:9d:2f:1b:89:34:2f:5c:c8:
9b:e1:97:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:44:58 2025 by rpki-client