Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa
File: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (raw, json)
Hash identifier: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=
Subject key identifier: D8:9C:DB:EB:0E:28:63:33:49:13:86:C6:72:B9:92:97:B9:F4:08:EE
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 01973FFC2234AD752B4D41C2386D9059EDCF
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa
Signing time: Thu 05 Jun 2025 12:06:17 +0000
ROA not before: Thu 05 Jun 2025 12:06:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213199
IP address blocks: 2a13:2200:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:fc:22:34:ad:75:2b:4d:41:c2:38:6d:90:59:ed:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Jun 5 12:06:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d89cdbeb0e286333491386c672b99297b9f408ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:b6:0e:51:f2:8a:59:a4:a3:60:2d:3d:8c:
af:9e:2b:e4:83:24:30:0c:59:48:58:76:99:ee:c6:
49:5d:28:f9:94:60:3c:b1:1e:b0:20:ce:ae:82:bd:
59:bd:63:9f:38:de:7c:fb:8c:d7:5c:42:15:73:e9:
3a:e0:82:93:06:5c:36:c8:f0:d0:55:1d:1f:52:17:
43:ea:a9:c4:3e:e1:32:7c:eb:99:c9:52:e9:70:6d:
05:74:cb:e0:14:4c:03:5e:9c:70:13:9b:35:4a:90:
f4:bc:6e:47:d0:39:16:05:4b:ba:6e:5a:72:02:0d:
6d:21:8e:df:04:7f:b2:39:6c:b9:63:8f:08:2a:88:
5a:f4:33:82:ee:fe:6f:6d:bb:20:b3:f6:d2:de:21:
62:3d:16:68:e5:49:d0:02:4a:5a:0d:98:06:23:ae:
49:3a:cb:2f:16:44:0b:5f:04:5a:c3:87:46:2d:8c:
a6:da:db:26:c5:ce:ad:6d:a5:34:83:b4:43:8b:ca:
1e:9a:3a:59:85:13:ae:c5:42:02:4e:ec:79:77:da:
e3:5a:83:e6:0b:0b:2a:20:06:65:a9:62:77:7b:e6:
70:e3:2e:8d:a1:0c:ed:b7:09:15:c1:c8:b9:f3:74:
68:86:68:d0:c7:68:e6:b9:bd:85:5d:ab:51:fb:12:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:DB:EB:0E:28:63:33:49:13:86:C6:72:B9:92:97:B9:F4:08:EE
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2200:c::/48
Signature Algorithm: sha256WithRSAEncryption
74:3f:c4:35:2a:ad:8e:5b:81:28:62:e8:bf:a3:79:b6:c3:16:
93:fe:73:60:05:65:7a:74:f2:a6:1c:f6:90:c2:c8:ab:14:2f:
22:a7:b6:d3:cd:c1:1a:8b:50:40:37:04:07:19:87:77:cc:f9:
c7:47:49:ae:2b:72:29:53:e4:74:e5:f3:c9:1a:3b:6c:eb:12:
10:ca:6c:55:c9:29:af:fb:08:9d:64:1c:b6:bf:2c:f2:62:a2:
e3:75:36:87:eb:e4:78:b9:5a:10:fc:15:12:e6:67:c2:ba:d9:
8a:4d:fb:73:80:bd:b0:a3:b3:82:75:b0:1c:1e:00:d1:fc:30:
af:70:58:5e:35:39:13:08:fd:cd:79:25:44:4b:3d:0a:37:62:
55:82:4e:eb:69:3a:a6:72:69:30:e3:12:61:57:57:0e:d6:3b:
4f:b3:56:20:bb:2b:0c:4c:b2:ec:40:30:8f:c7:19:52:0c:08:
ca:69:39:61:ea:a8:30:83:c2:f6:5e:90:26:ba:9d:f8:c7:63:
44:3e:f7:1c:e1:98:e1:8f:30:93:d6:09:1e:17:e1:1f:c3:7f:
60:c3:46:1e:69:54:2b:d9:d6:f2:42:d8:93:43:df:1c:c6:87:
fe:3e:19:40:4c:83:3e:85:88:24:56:a8:7b:39:59:0e:7a:59:
09:1c:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:39:42 2025 by rpki-client