Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/SXtyu-lARAK6mFr8dcsc3AO10aM.roa
File: SXtyu-lARAK6mFr8dcsc3AO10aM.roa (raw, json)
Hash identifier: WtowmT836SKvl3mx5ccU5OfbLe/aMlHE6wFpFFcNAek=
Subject key identifier: 49:7B:72:BB:E9:40:44:02:BA:98:5A:FC:75:CB:1C:DC:03:B5:D1:A3
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019709225843B006CB62CE3DCCED551B43CC
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/SXtyu-lARAK6mFr8dcsc3AO10aM.roa
Signing time: Sun 25 May 2025 20:28:55 +0000
ROA not before: Sun 25 May 2025 20:28:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206127
IP address blocks: 2a0b:a4c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 10:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:09:22:58:43:b0:06:cb:62:ce:3d:cc:ed:55:1b:43:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: May 25 20:28:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=497b72bbe9404402ba985afc75cb1cdc03b5d1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:92:2b:e2:27:b4:e2:8f:f5:2f:8b:db:1f:
a6:51:b2:ed:43:30:a5:fe:14:40:dc:4b:71:ad:a8:
b7:e1:df:d3:34:9e:79:6f:11:e0:e9:4d:46:87:da:
29:18:05:09:24:1b:84:ac:3e:2f:3d:64:32:92:67:
e4:71:e1:bd:e3:02:6e:19:ee:97:80:e9:f9:e8:47:
66:1c:38:9e:9c:cb:8e:c6:25:ec:60:8b:94:bc:2f:
f2:62:63:38:26:31:77:53:58:23:28:90:c6:7d:c1:
2a:e9:8f:77:2e:51:15:d4:48:1b:3f:96:81:1d:98:
c1:18:33:55:60:93:78:68:38:1c:0c:13:48:36:88:
63:f0:5f:63:a5:05:d8:8b:e1:2d:cd:92:b4:a4:b0:
1e:7b:7b:cd:2f:2c:ff:a5:58:7e:32:69:0a:e3:83:
9f:5c:1a:cd:11:95:34:78:65:5e:30:03:ee:3a:f6:
04:93:86:a8:f7:a0:04:71:27:2d:29:10:ef:7a:45:
5e:78:bf:69:53:b0:11:d2:29:e4:ef:e8:e7:17:63:
a7:2a:b4:9d:76:e6:0f:a4:49:2e:58:af:bc:e0:40:
db:a6:8c:32:ee:33:8b:ee:77:ac:fa:48:12:c5:39:
4a:61:5f:88:3b:6d:bd:27:be:b6:28:99:34:ae:c2:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7B:72:BB:E9:40:44:02:BA:98:5A:FC:75:CB:1C:DC:03:B5:D1:A3
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/SXtyu-lARAK6mFr8dcsc3AO10aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a4c7::/32
Signature Algorithm: sha256WithRSAEncryption
b0:c2:17:1d:aa:ce:bf:1c:c9:59:e7:99:ac:df:af:52:bc:0f:
71:30:20:56:e6:53:bd:d1:32:8e:c7:8a:88:98:1d:4d:09:55:
cb:97:04:7c:16:07:29:fd:e1:9a:5a:9f:b4:90:3d:3f:21:87:
cb:9f:f0:29:8b:a1:46:88:92:d9:ab:c4:7b:e4:ca:19:02:54:
ee:78:51:31:48:a1:fe:15:79:ad:9a:29:80:d4:54:aa:fa:2f:
4c:39:76:57:37:a8:c2:57:54:2f:18:ff:19:fc:f5:89:3c:52:
da:59:4d:68:d2:d4:b8:1c:2a:42:53:1c:ec:db:ae:eb:94:2c:
71:4d:87:4c:47:38:be:aa:83:0a:17:2c:56:05:a3:58:d9:e1:
cf:c3:b8:a7:1d:df:0f:73:99:2f:14:1f:8e:f6:cb:02:12:61:
a0:28:b8:20:3b:a1:56:03:49:01:d8:88:52:0a:e2:06:64:7c:
d8:eb:fb:25:93:4a:22:53:9b:49:78:eb:fa:77:35:88:2e:dd:
1d:f5:9f:31:a6:c4:ae:14:44:0a:6c:f3:e8:af:11:9d:73:51:
5a:97:02:d7:c1:17:51:58:0d:1b:71:e3:ca:39:15:33:9d:36:
59:6a:83:77:c1:5d:17:ec:ab:c0:71:90:9c:98:4c:a2:55:ea:
a2:3b:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:44:20 2025 by rpki-client