Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa
File: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (raw, json)
Hash identifier: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=
Subject key identifier: 60:96:4D:81:12:65:13:2D:D1:75:6B:37:46:3C:1A:2C:EE:1B:BC:90
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 01973FDD0186AE5A125CA8CC3A0DA66C4B66
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa
Signing time: Thu 05 Jun 2025 11:32:17 +0000
ROA not before: Thu 05 Jun 2025 11:32:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207344
IP address blocks: 2a13:2200:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:dd:01:86:ae:5a:12:5c:a8:cc:3a:0d:a6:6c:4b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Jun 5 11:32:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60964d811265132dd1756b37463c1a2cee1bbc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:81:60:9d:4f:ad:6d:b7:89:3a:b2:ca:0d:
ca:5c:61:ae:01:b5:e5:73:fe:53:93:92:b0:6c:09:
1a:a4:44:62:80:b4:b9:c1:08:c6:94:9f:59:dc:ac:
a4:59:0f:d7:3e:4d:5d:e2:7d:6a:f4:ac:f9:bc:9c:
32:6a:9c:36:b4:92:9e:bb:5b:73:c3:c8:63:f8:54:
aa:01:dd:4a:10:0a:68:87:ec:50:6c:8d:68:39:87:
3f:a2:a8:dd:b5:5d:df:63:c5:df:e5:63:4b:9f:04:
c7:4c:77:2d:d8:7f:0e:40:c6:be:1e:06:9b:30:bf:
33:42:68:45:0f:5a:97:cb:6d:db:31:94:f1:f3:cc:
0f:4f:0a:be:30:c5:b9:d6:c5:3f:a1:20:4f:93:6f:
91:b4:19:c3:1f:5e:54:3b:2d:53:24:ba:3a:bd:54:
46:d1:94:52:00:e2:99:be:5b:ad:f3:51:2f:a1:d5:
2b:34:18:f2:99:62:26:36:9b:a8:d9:b2:4d:a3:38:
18:e3:b5:67:79:91:3d:fb:41:09:64:85:1f:33:7d:
1c:93:ad:a9:67:c5:b8:63:c4:63:64:cf:fc:f4:7e:
e5:22:85:09:17:5b:8b:cb:00:22:32:f4:ec:20:85:
b4:6f:05:11:7b:00:8c:88:a1:84:45:9a:14:bf:c1:
43:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:4D:81:12:65:13:2D:D1:75:6B:37:46:3C:1A:2C:EE:1B:BC:90
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2200:10::/48
Signature Algorithm: sha256WithRSAEncryption
56:9a:95:e8:8a:84:a2:a9:61:7b:f3:f3:99:bb:24:fe:20:10:
f1:eb:23:e3:6e:fc:52:c8:81:ff:59:d9:78:3f:c6:d0:5b:ab:
27:89:8b:75:55:c7:dd:e1:95:29:2e:92:26:36:f9:6a:4c:30:
a9:0e:89:44:d2:c3:d8:85:43:8d:66:0c:74:a4:d4:48:ed:ce:
c6:ca:59:7a:ed:07:ac:54:b1:4b:09:86:3f:65:4c:e4:77:78:
3e:7f:7c:ad:a5:b7:5c:b7:c4:3c:40:5c:bd:bd:f9:a1:80:61:
46:63:fa:f1:a8:14:b0:4e:f3:64:a5:85:4e:d7:df:88:48:78:
b7:9e:9d:0d:6e:2b:08:3e:9d:5f:e2:2c:e3:73:60:41:c9:3b:
e6:d1:59:87:2f:92:5a:dc:82:eb:3b:4f:86:4b:5e:a6:82:8e:
cd:80:cb:94:97:f5:99:55:12:65:f6:08:37:86:9b:07:9e:7d:
2a:72:8b:36:06:1b:e7:21:65:b4:1e:39:d6:c5:db:44:09:f2:
96:0c:7d:5e:d3:1f:93:6a:55:94:23:50:9d:53:83:db:df:4e:
50:f7:c8:08:af:3b:04:d6:29:83:ef:73:7d:a8:8b:c5:ca:8a:
19:94:e5:3c:ea:f9:5a:2b:ec:ad:6c:5a:77:6a:eb:2d:51:35:
62:03:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:00:12 2025 by rpki-client