Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa
File: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (raw, json)
Hash identifier: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=
Subject key identifier: 2E:2F:56:4B:C8:D7:15:1D:BE:AF:89:93:3A:80:B0:80:FF:D3:B3:DA
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 01973B58092B4137EB9E674823F187EB266C
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa
Signing time: Wed 04 Jun 2025 14:28:34 +0000
ROA not before: Wed 04 Jun 2025 14:28:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207389
IP address blocks: 2a13:2200:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:58:09:2b:41:37:eb:9e:67:48:23:f1:87:eb:26:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Jun 4 14:28:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e2f564bc8d7151dbeaf89933a80b080ffd3b3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:64:4e:bb:cd:14:69:8d:cd:9a:66:a8:0b:
2b:14:30:4a:df:99:ab:cd:dc:be:e2:55:98:f3:f4:
79:45:52:64:c3:93:85:da:72:4a:a6:5c:2a:bd:5b:
14:1a:77:77:91:d5:69:62:8d:ec:12:13:ff:a5:30:
6c:ca:bd:a7:75:29:3b:f6:4c:cb:41:d2:dd:a8:b7:
0b:6e:42:08:56:a3:d3:a2:8f:83:e7:c6:23:c3:1f:
0e:d8:6c:23:f7:43:1c:93:fd:3e:68:98:35:03:c1:
05:98:85:cc:e0:82:e5:c9:00:52:1d:7f:73:83:f6:
17:13:15:ae:14:ae:d4:ee:fd:25:9b:eb:ce:a8:38:
24:b5:d0:a2:9c:f9:73:5a:e4:63:6d:fb:0a:c4:20:
a1:d4:08:7e:46:13:89:b5:a6:ea:cb:3e:6b:e3:6f:
db:59:35:e3:e3:63:da:74:1e:a9:03:2b:9b:7e:b6:
90:c3:3c:14:41:e5:e3:17:35:cd:38:fe:73:ed:f6:
df:6c:5c:81:05:2c:db:ab:c2:f9:c6:49:f1:bf:6d:
0e:f9:1f:11:f4:2a:d5:70:a3:48:6c:dc:08:2c:e7:
39:06:57:22:ed:c7:82:c9:bc:12:a9:66:b7:61:6a:
9e:f7:21:49:10:cf:50:f5:e7:c9:f0:b2:06:6e:a8:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2F:56:4B:C8:D7:15:1D:BE:AF:89:93:3A:80:B0:80:FF:D3:B3:DA
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2200:f::/48
Signature Algorithm: sha256WithRSAEncryption
73:85:7d:60:6c:68:a8:bd:54:b1:e2:06:e6:1c:50:c1:58:92:
ca:0a:0f:2a:f6:f4:c8:d1:26:8d:04:d2:aa:8b:be:a1:3e:f7:
83:b1:37:81:0a:92:74:7d:93:78:77:cf:be:fe:d2:01:b4:b0:
ea:a8:97:07:48:58:6a:28:f9:ba:d7:52:bf:d1:cf:87:ab:13:
c6:25:9b:79:61:51:dc:46:f3:32:bc:4b:b7:18:86:92:fd:91:
66:d0:2c:08:fb:52:c4:61:c3:bf:0a:bb:7b:50:2f:06:74:0d:
6c:88:b4:3f:9d:6d:73:37:00:04:79:b4:4f:8c:96:ca:cc:5c:
68:6d:81:35:bd:92:29:8f:eb:af:a6:46:b0:a0:82:00:01:4f:
7c:12:74:42:bb:6f:24:10:07:c3:f5:cd:48:91:32:92:17:70:
6d:0a:76:a8:6e:b9:fb:8d:2e:c4:31:6f:53:b0:5d:a0:5e:17:
63:02:5c:36:07:60:d8:3d:45:21:56:de:5d:fa:de:b5:4c:61:
98:00:84:12:d7:e0:59:7d:70:60:bc:17:1d:f4:16:0c:bf:76:
fe:d5:75:b2:bb:a5:56:2b:eb:3e:97:7b:43:2f:6d:d4:e1:5a:
a1:4b:94:14:43:0e:42:63:c8:35:82:76:ca:4e:99:0e:dd:54:
f0:c0:6e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:33:34 2025 by rpki-client