Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/axLh119wSskz1JV2QtnEUw9jpAQ.roa
File: axLh119wSskz1JV2QtnEUw9jpAQ.roa (raw, json)
Hash identifier: dwgIsDtJ8aZopWkUHLn9gu1tKipMWjAFcwHS//T0ZLU=
Subject key identifier: 6B:12:E1:D7:5F:70:4A:C9:33:D4:95:76:42:D9:C4:53:0F:63:A4:04
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0197372149AC2A8B9180B9E833EE37A2D96C
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/axLh119wSskz1JV2QtnEUw9jpAQ.roa
Signing time: Tue 03 Jun 2025 18:50:17 +0000
ROA not before: Tue 03 Jun 2025 18:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202469
IP address blocks: 2a13:c045::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:21:49:ac:2a:8b:91:80:b9:e8:33:ee:37:a2:d9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 3 18:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b12e1d75f704ac933d4957642d9c4530f63a404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:3c:ab:00:59:ee:44:e1:63:df:44:3f:40:
4a:51:74:5b:90:45:e0:89:8d:e7:0c:e0:77:b6:8d:
41:ff:40:4a:cd:fd:38:c6:cd:6a:ec:47:ef:6f:21:
c3:90:5c:b6:9f:4a:8b:ae:26:2f:e9:46:da:8b:4e:
0f:1e:57:8f:78:a5:f9:da:26:44:3d:f1:8c:5e:01:
9b:2c:fa:74:15:19:7a:38:f7:09:19:d8:4a:ad:07:
64:1c:c3:a5:b6:72:3d:67:3e:73:e5:16:a1:fc:0e:
73:62:d6:be:5f:90:bd:84:62:8a:1e:10:d6:5c:84:
02:e5:ab:91:65:da:6d:46:aa:d8:b3:17:1b:1c:c9:
db:d3:4f:9f:5e:33:54:21:0a:d1:a4:29:77:f8:1b:
5a:00:c1:5f:4f:5a:27:81:0b:c5:46:2f:85:f2:1d:
04:1e:e9:5b:8e:a8:19:d9:30:92:36:73:ae:6f:4e:
30:3f:36:81:59:bd:14:b7:21:f5:7a:17:34:54:9a:
94:46:0c:27:f1:4e:fc:a3:4c:b3:02:2e:ee:c2:fd:
3c:0a:53:a7:68:c3:23:af:52:87:1b:6b:82:dc:d8:
6f:ca:ed:5e:82:b8:8d:e0:21:11:f0:40:34:1f:64:
2e:b2:4d:42:3c:8f:23:f2:5c:9d:45:ca:7b:95:3e:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:12:E1:D7:5F:70:4A:C9:33:D4:95:76:42:D9:C4:53:0F:63:A4:04
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/axLh119wSskz1JV2QtnEUw9jpAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c045::/32
Signature Algorithm: sha256WithRSAEncryption
3e:be:3e:19:cf:3f:45:14:63:ff:f3:42:ee:9f:6a:e1:97:42:
4c:45:c0:66:55:42:20:00:b4:37:fb:9c:0d:67:50:e5:15:17:
9b:d0:c7:de:45:ec:bf:51:9d:3b:61:9a:66:40:99:11:75:1b:
fc:db:a3:56:a4:5d:41:34:90:7e:b8:ab:50:09:bd:1b:29:b9:
a4:34:4f:f4:1f:00:c1:f5:9b:8d:65:d0:46:bd:e2:43:38:e9:
ed:af:19:f7:3b:2f:97:5e:6b:97:17:96:b7:d2:6b:45:d6:82:
4b:f7:a6:9f:e7:b8:54:c6:92:23:4c:a5:37:9b:b7:ec:3b:39:
5a:73:f2:89:d1:df:9a:c7:de:56:a0:49:fb:57:9d:8a:cd:ca:
24:1c:33:23:fe:dc:af:1f:f3:36:2e:5b:5a:41:34:55:a5:ad:
5a:09:55:c0:f8:ea:94:a6:b2:8b:c3:2f:1f:b1:6e:b4:66:2f:
fd:f6:50:80:22:67:b5:e2:e5:59:9e:06:fd:20:02:b8:0a:c8:
76:c1:eb:8e:6d:74:42:dd:dd:7f:0d:6c:e1:37:6c:cd:6d:11:
76:e0:d4:2d:ba:1d:25:56:dd:4c:0f:49:b2:05:be:32:ea:d0:
37:a9:e5:af:20:27:c6:da:25:bf:55:92:81:7f:dc:61:11:79:
7c:9c:d5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:21:30 2025 by rpki-client