Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/5pcRYGreIB3DfjqEVjymy_jy2AA.roa
File: 5pcRYGreIB3DfjqEVjymy_jy2AA.roa (raw, json)
Hash identifier: voxTXrILPhaZYhYHmLouALh0jY09pDVavrTzDqpr8Iw=
Subject key identifier: E6:97:11:60:6A:DE:20:1D:C3:7E:3A:84:56:3C:A6:CB:F8:F2:D8:00
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0197371F7590BD2086234D3A13FBBD32D969
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/5pcRYGreIB3DfjqEVjymy_jy2AA.roa
Signing time: Tue 03 Jun 2025 18:48:18 +0000
ROA not before: Tue 03 Jun 2025 18:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204335
IP address blocks: 2a14:6ac2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:1f:75:90:bd:20:86:23:4d:3a:13:fb:bd:32:d9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 3 18:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e69711606ade201dc37e3a84563ca6cbf8f2d800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:98:e9:6d:00:4f:a6:88:7e:5f:02:35:01:
f2:87:f3:47:56:6c:09:32:20:98:95:40:5d:c1:aa:
c1:0d:3c:39:78:0a:54:7e:0a:5e:e4:36:f8:21:8b:
d0:f1:15:e3:c2:1e:4b:c6:53:bf:2c:34:1f:f1:6c:
95:b3:04:00:c9:d7:a9:1e:5d:07:83:47:82:93:ed:
13:d5:c4:51:1d:0f:28:ba:cc:7f:a4:f1:25:9d:2a:
1f:b2:11:36:64:04:9f:15:4c:a1:d9:d0:1e:55:21:
c7:2e:4b:0b:54:f2:5e:64:8e:79:e6:a0:59:2a:04:
90:4a:43:81:f9:6f:d3:76:86:27:fe:6c:a0:f8:18:
24:3d:f4:63:2f:42:24:ea:7c:f9:63:45:7a:85:ad:
7b:06:82:cc:99:9f:b7:a9:0e:3a:9d:ce:e0:74:fa:
2a:a3:fd:c7:38:dd:28:9f:55:ad:47:a9:bf:e2:ff:
a4:83:ec:71:b8:91:c2:28:42:82:19:c3:de:a5:95:
e6:29:e1:af:cd:53:f3:90:0b:22:6d:6d:fc:b9:5e:
fd:93:4a:a4:06:8d:1e:3e:49:73:b3:74:f2:ec:f6:
78:db:17:f7:56:0e:3a:e4:b9:d5:e5:4d:af:52:f3:
ab:c2:c9:23:59:a1:5e:4a:05:a8:24:d0:e3:ec:b5:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:97:11:60:6A:DE:20:1D:C3:7E:3A:84:56:3C:A6:CB:F8:F2:D8:00
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/5pcRYGreIB3DfjqEVjymy_jy2AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6ac2::/32
Signature Algorithm: sha256WithRSAEncryption
ae:50:4e:ce:ef:22:9c:73:2d:64:b3:37:77:56:1f:18:d0:62:
f1:be:d0:ec:fe:3c:11:fc:07:4e:f0:2d:37:e1:a7:13:ca:70:
04:40:d0:56:f5:90:b5:b2:d1:e9:24:c7:fd:39:14:e5:5c:45:
b0:41:21:49:57:6b:6a:8f:45:15:81:12:c0:49:9c:51:a7:b5:
5e:57:31:3b:23:e0:38:f6:00:45:6a:11:10:89:4b:fe:c8:61:
72:b3:88:7d:32:b6:86:ff:ad:73:9a:b8:96:46:fc:f4:7d:a5:
62:71:a8:b0:be:87:3c:0d:3c:19:dc:a2:b9:51:2b:6b:19:09:
0e:98:00:82:d5:4a:e0:39:0b:f3:b9:e2:6d:91:6b:d0:7b:12:
1a:9e:38:35:1f:13:9e:40:11:5b:b6:c3:e6:5e:47:19:32:99:
49:c8:30:93:79:09:5c:cd:ac:95:69:ce:ba:40:5f:f3:38:c8:
3f:9a:49:cd:01:3e:5a:18:0f:f7:34:84:ef:0f:36:42:f1:8c:
80:5e:37:95:56:e6:67:b2:ac:fd:e6:9d:40:0d:86:0b:ec:d8:
52:0a:10:75:e7:cd:0b:8c:95:fc:de:95:9a:81:db:e5:cc:64:
e1:a6:30:ee:c5:36:0c:74:da:b6:ac:55:dd:d8:b9:e2:25:79:
7e:a0:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:12:01 2025 by rpki-client