Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/c7_38uRS_yDo1GsgJ3aV51Y83JI.roa
File: c7_38uRS_yDo1GsgJ3aV51Y83JI.roa (raw, json)
Hash identifier: mnpRy1c4dZlKU0Bj3MBDmjwryIt8r5CXAAk17UKgMdg=
Subject key identifier: 73:BF:F7:F2:E4:52:FF:20:E8:D4:6B:20:27:76:95:E7:56:3C:DC:92
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 01973F9103CE1C7F672E4EF8E6CF92ADF4F5
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/c7_38uRS_yDo1GsgJ3aV51Y83JI.roa
Signing time: Thu 05 Jun 2025 10:09:17 +0000
ROA not before: Thu 05 Jun 2025 10:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21100
IP address blocks: 2a01:ef40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:91:03:ce:1c:7f:67:2e:4e:f8:e6:cf:92:ad:f4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Jun 5 10:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73bff7f2e452ff20e8d46b20277695e7563cdc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:cc:09:fb:43:ec:01:ef:ea:9a:ff:d9:5e:
fd:20:0d:f7:b1:2e:f0:04:74:93:15:79:85:f4:84:
cf:be:e2:d6:33:a9:41:03:c0:8a:23:44:05:fe:90:
7a:26:d5:36:5e:f7:0b:b9:0f:d7:28:4c:da:50:a2:
7c:3c:66:41:87:78:da:f7:32:2b:6a:89:19:95:ce:
31:4b:eb:94:c7:67:76:3b:f8:c9:30:22:91:aa:0a:
f3:f2:03:7a:30:52:22:50:42:bb:a7:eb:c9:b4:9b:
0d:77:4d:36:f6:bb:59:39:10:92:9c:32:98:b2:4e:
2b:af:af:3b:48:7e:c7:d5:ad:fd:3c:6f:28:7f:41:
89:12:78:21:65:79:6b:f7:8a:30:59:75:f9:78:73:
21:66:5b:ff:7d:b2:1f:e1:f8:5c:ed:7a:d3:fb:a3:
4b:96:5c:9e:54:e8:7f:18:e0:c1:e4:6e:07:4c:62:
1f:b5:62:e9:c4:8c:3c:7d:65:af:2b:2b:ad:55:7a:
38:a0:70:57:aa:d4:f6:be:22:fc:f9:8d:57:1b:86:
b6:77:0f:9c:1a:ea:59:82:8d:a5:c4:11:f9:42:ea:
63:78:5a:48:ad:5e:79:c2:d9:32:05:10:8b:75:e4:
37:fb:8a:48:83:b3:56:6f:d1:59:06:83:2e:2b:1a:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BF:F7:F2:E4:52:FF:20:E8:D4:6B:20:27:76:95:E7:56:3C:DC:92
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/c7_38uRS_yDo1GsgJ3aV51Y83JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
80:9e:91:d5:7c:fe:b6:5d:4c:9e:97:ad:8e:9f:a5:08:7e:6d:
91:5e:e0:0a:75:a9:9a:37:2c:ac:43:26:fe:69:c2:f3:ee:ba:
bd:68:bd:63:e4:c7:bc:4e:9c:67:13:bd:99:58:30:50:a8:17:
67:38:e9:25:f5:7a:30:da:b9:9e:53:8f:6d:99:fa:cf:8e:50:
72:f9:e2:2b:4a:ee:3b:b7:10:39:61:c9:45:55:ed:ef:20:38:
1b:44:a7:6b:4e:af:82:9e:13:5f:af:50:1e:ce:c7:f2:de:dc:
29:6e:42:d8:fd:de:2f:b4:d4:2f:73:41:bc:74:57:06:a4:c7:
a4:cf:93:56:89:42:1e:28:4b:39:74:78:07:78:1a:0d:16:b4:
2a:06:fb:07:49:67:b2:fb:cb:a1:ce:c6:ff:e8:3a:55:7a:a4:
79:3b:23:f7:5d:38:bf:26:2d:fc:65:fe:28:1e:9c:66:dc:9e:
c1:de:ec:ea:a0:bc:e3:fc:ea:7a:ad:0d:ec:7f:e0:fb:d2:f5:
c8:92:b2:38:58:c3:ef:8c:eb:a1:0e:d0:6d:c1:eb:bf:04:e7:
8d:66:ea:93:ac:51:64:b2:c7:43:c8:38:2a:a2:ca:ad:22:1a:
3d:a1:5a:7f:55:d8:40:cd:72:ad:08:84:43:25:73:aa:ad:2b:
72:36:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:55:12 2025 by rpki-client