Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7i0hpdlksXoYg8aCvLfpECADocE.roa
File: 7i0hpdlksXoYg8aCvLfpECADocE.roa (raw, json)
Hash identifier: ZjD/fHpbcacYafWjwHFNGYJoFNE0VHQG88LTJ4iC+vU=
Subject key identifier: EE:2D:21:A5:D9:64:B1:7A:18:83:C6:82:BC:B7:E9:10:20:03:A1:C1
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019721904F2039158B2B225006DF2A8ABED0
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7i0hpdlksXoYg8aCvLfpECADocE.roa
Signing time: Fri 30 May 2025 14:19:54 +0000
ROA not before: Fri 30 May 2025 14:19:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209364
IP address blocks: 2a06:e881:6400::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:90:4f:20:39:15:8b:2b:22:50:06:df:2a:8a:be:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: May 30 14:19:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee2d21a5d964b17a1883c682bcb7e9102003a1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:db:99:ff:51:fe:02:72:fc:c7:0d:80:99:
7f:b9:93:9f:11:39:07:43:87:0e:3d:bd:2c:81:82:
53:88:bd:e4:46:d1:f2:2e:08:de:f2:36:55:8c:8e:
e8:de:39:90:06:e3:2e:ac:d5:14:ca:e8:fa:6d:07:
19:55:3e:51:b4:40:6c:d9:92:5c:2e:1f:e3:f3:1b:
40:67:a0:86:5d:1c:85:fe:17:1c:80:b4:0a:9b:aa:
61:e2:98:b3:ad:ad:11:08:26:ab:71:81:1c:36:fc:
9b:63:7d:78:f8:21:ee:26:15:87:fa:27:0d:45:ea:
9f:68:2b:e4:f6:46:d5:d1:4e:8b:d5:60:75:d1:ce:
88:ac:3b:01:a4:cb:ec:7e:9b:f0:44:c5:bd:95:47:
8a:ca:6f:20:f7:83:98:48:45:73:7f:6a:3c:99:e4:
75:93:32:ca:93:43:6e:a2:1e:45:7e:ac:9e:0f:f0:
dd:d7:0d:18:2b:93:dc:91:bd:58:c6:c4:50:ef:5c:
90:28:2c:f9:e3:fd:91:89:51:8c:b8:17:b2:e6:e6:
d1:5e:54:4d:62:c5:1a:2e:52:24:50:80:d9:4d:0a:
3c:af:2b:cf:2d:a5:1e:cb:e7:0f:02:14:0b:e1:75:
b0:68:76:31:e2:b3:0d:62:61:21:36:2e:6e:38:ab:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2D:21:A5:D9:64:B1:7A:18:83:C6:82:BC:B7:E9:10:20:03:A1:C1
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7i0hpdlksXoYg8aCvLfpECADocE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:6400::/44
Signature Algorithm: sha256WithRSAEncryption
d4:e3:7d:f6:e2:1f:07:46:c4:a2:cb:28:26:1b:cd:fd:23:14:
db:b1:ff:01:74:74:b8:05:8d:51:49:d8:27:a2:34:42:9b:e5:
d9:30:e7:40:a1:cb:8b:0c:4a:34:52:fa:7b:c6:f2:fb:03:ab:
11:28:c1:ec:cc:c7:2f:8d:d3:67:8d:16:c8:0a:06:c2:2c:7c:
89:eb:b6:9d:87:cf:8e:b1:fa:e1:58:89:2c:c0:88:47:a4:7a:
48:27:46:50:08:c3:e9:da:cc:40:fa:72:ae:45:0d:22:40:c1:
30:4a:65:cb:ca:54:98:6c:6e:a2:ca:e8:a4:92:25:68:f8:18:
93:83:a4:cb:80:8c:3c:57:34:5f:80:34:2d:99:d6:2b:a0:8f:
d5:bc:ce:d2:b7:9d:35:3d:29:cf:9a:bc:d8:12:b5:be:67:36:
ea:df:8b:35:13:ce:e9:d6:0b:d9:81:61:cd:95:2d:29:39:6d:
15:cc:c0:5b:ab:f7:93:b1:09:44:f3:1f:33:d9:60:ea:7d:07:
6d:e5:d2:9c:57:11:d4:6f:7a:cc:b9:31:cd:50:6b:04:c5:22:
0c:ca:51:2d:45:ab:d0:bf:da:f6:5f:f6:c0:de:d6:86:4c:29:
4c:48:62:32:67:14:9f:8d:6c:f3:de:0e:d3:39:34:19:80:2a:
e7:c8:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:56:46 2025 by rpki-client