Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/azsVCZodPvQks2cJirF9OguO-UE.roa
File: azsVCZodPvQks2cJirF9OguO-UE.roa (raw, json)
Hash identifier: gcDVml9yFQM3d1/BMfdB1mPXRo9oQV2wliLWImdjxTI=
Subject key identifier: 6B:3B:15:09:9A:1D:3E:F4:24:B3:67:09:8A:B1:7D:3A:0B:8E:F9:41
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0197418DD653E7C860D66C85A0FA4F882A48
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/azsVCZodPvQks2cJirF9OguO-UE.roa
Signing time: Thu 05 Jun 2025 19:25:03 +0000
ROA not before: Thu 05 Jun 2025 19:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205227
IP address blocks: 2a13:bfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:8d:d6:53:e7:c8:60:d6:6c:85:a0:fa:4f:88:2a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 5 19:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b3b15099a1d3ef424b367098ab17d3a0b8ef941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:59:53:b4:4c:eb:1b:83:ce:8a:36:80:ea:15:
c2:81:4d:07:ac:78:36:dd:59:cb:21:d7:98:04:dc:
9f:7e:19:94:15:89:bf:8c:fb:26:4f:15:2b:e2:5d:
61:af:b2:70:e7:00:90:c7:88:b3:e0:4c:42:0f:ca:
cb:a3:c5:a1:b6:5f:cf:df:1e:41:a5:66:8d:e2:37:
61:f7:b0:65:7e:7a:d3:1f:8c:88:c9:ab:b0:a7:5e:
5f:41:fe:ba:fe:e9:f3:2b:5e:61:21:3a:c3:3c:f4:
3c:9f:13:67:0d:21:35:f3:cb:05:fe:26:3c:b5:ce:
54:4e:dd:30:39:1c:3b:64:af:a0:69:6a:dc:06:83:
6e:23:77:80:e0:74:4f:51:d9:ec:7c:46:06:73:a7:
6b:51:86:a6:4b:fa:b7:33:26:67:13:aa:19:19:be:
62:c3:e4:14:2f:ef:27:62:70:df:ad:e3:2a:c8:02:
ba:4a:ce:bf:56:fb:96:0c:07:25:af:ed:e1:7b:be:
d2:9c:22:79:85:39:a1:28:06:5c:97:ca:c3:d6:83:
a0:22:9a:e9:cb:43:8a:bc:e7:d6:5d:fa:8f:d0:34:
5e:c6:61:6e:57:d9:95:38:17:eb:31:d0:89:82:ab:
58:19:90:d0:99:d3:47:47:ec:14:9b:73:73:3e:06:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3B:15:09:9A:1D:3E:F4:24:B3:67:09:8A:B1:7D:3A:0B:8E:F9:41
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/azsVCZodPvQks2cJirF9OguO-UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bfc0::/29
Signature Algorithm: sha256WithRSAEncryption
96:c7:04:dd:71:dc:72:dd:12:7d:e0:07:b9:3e:a5:a8:1e:55:
7a:de:c4:0e:16:76:78:37:d8:30:93:4b:84:81:a7:44:ac:63:
72:76:ac:16:1e:dc:7f:74:0d:c8:84:d7:9c:0d:75:eb:7b:39:
7a:0f:e9:87:c5:89:d4:02:8a:6c:64:a8:36:7f:dc:8a:57:97:
b2:64:b4:8b:f1:d9:02:73:da:43:5e:22:40:53:73:7d:97:6f:
26:85:55:1d:e6:0f:75:f2:78:dd:d0:0c:e5:71:6d:93:3d:f8:
02:9e:dd:4f:ee:21:f5:98:17:cc:5a:83:5f:81:2d:af:8b:58:
1b:c7:95:a5:b2:b7:58:39:b2:75:24:36:11:86:f8:ba:1a:de:
78:7a:63:6e:cc:b2:8b:b2:c4:56:21:6d:83:4e:44:fe:64:c3:
79:4d:40:53:82:99:15:45:5a:1f:ec:68:4a:f1:4d:16:2e:47:
81:bd:4d:72:55:5d:74:6a:06:d2:a0:26:6a:c1:13:42:bc:58:
22:6f:55:be:2e:f7:45:72:be:b6:b5:0f:47:dc:7a:cb:b8:4d:
a4:4d:d0:f5:a9:eb:94:a4:7d:86:85:74:c9:f2:f2:b5:0e:8b:
3d:a2:b6:44:e3:d1:01:22:33:a8:6f:5f:58:e1:ae:29:9b:86:
19:02:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:49:42 2025 by rpki-client