Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/73FScvVGvMlaAHflY1GfRR2KhR8.roa
File: 73FScvVGvMlaAHflY1GfRR2KhR8.roa (raw, json)
Hash identifier: Mg64mKQMTwKK6KukU7WA0wSoSu+Er1Z0C550ThiCdiE=
Subject key identifier: EF:71:52:72:F5:46:BC:C9:5A:00:77:E5:63:51:9F:45:1D:8A:85:1F
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 0196F29E2A9119EC5C78DB12D9C81AA7F483
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/73FScvVGvMlaAHflY1GfRR2KhR8.roa
Signing time: Wed 21 May 2025 11:32:53 +0000
ROA not before: Wed 21 May 2025 11:32:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 2a07:3500:11e0::/48 maxlen: 48
2a07:3501:1032::/47 maxlen: 48
2a07:3501:1050::/48 maxlen: 48
2a07:3501:1060::/48 maxlen: 48
2a07:3502:10e0::/48 maxlen: 48
2a07:3502:11c0::/48 maxlen: 48
2a07:3502:1210::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:9e:2a:91:19:ec:5c:78:db:12:d9:c8:1a:a7:f4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: May 21 11:32:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef715272f546bcc95a0077e563519f451d8a851f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:63:83:c8:e6:a1:55:1f:2b:e5:88:b6:2c:
90:03:da:2c:e4:5d:63:22:8d:4f:45:d6:71:78:2f:
2a:da:cb:50:73:56:cb:4e:84:45:91:24:3e:91:3e:
a8:eb:41:8b:45:bb:02:f3:79:e9:b2:c2:9d:1d:72:
f4:34:44:a0:b2:e2:5d:a4:50:4c:d7:41:3f:da:e3:
51:67:19:85:d8:e6:85:78:a0:76:68:25:7f:39:91:
a4:38:9c:07:c1:59:74:5d:46:a8:fb:96:72:9a:3a:
a3:cc:67:07:56:b7:ac:38:17:8b:43:11:e3:0e:5b:
4a:a4:d0:2c:8f:60:a6:26:70:04:4f:56:c0:bd:22:
ae:5b:da:90:72:86:8f:6d:ed:22:95:ea:bf:b9:96:
ff:cf:03:cb:d9:ba:2b:c0:85:a1:de:e6:12:88:1a:
97:83:d7:03:65:bf:d8:46:e6:e8:d9:9b:62:15:06:
ee:5a:97:e0:3b:06:fc:a7:59:fd:02:27:82:df:a6:
f3:23:0f:bb:2b:df:cb:dd:c2:ac:93:4d:3d:d0:8e:
cb:8d:43:5d:23:a6:43:46:d8:59:dd:d2:00:87:2d:
70:88:2d:0e:9a:06:3b:6f:47:bf:98:84:7d:84:0e:
b2:88:c0:58:0e:41:8d:03:44:23:bd:ef:4c:43:28:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:71:52:72:F5:46:BC:C9:5A:00:77:E5:63:51:9F:45:1D:8A:85:1F
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/73FScvVGvMlaAHflY1GfRR2KhR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:11e0::/48
2a07:3501:1032::/47
2a07:3501:1050::/48
2a07:3501:1060::/48
2a07:3502:10e0::/48
2a07:3502:11c0::/48
2a07:3502:1210::/46
Signature Algorithm: sha256WithRSAEncryption
6b:8b:27:64:86:3e:5e:e7:4d:0f:e7:0c:d0:0a:3f:89:46:0d:
03:a7:90:9b:4b:2a:2c:ff:0e:63:8a:30:42:3d:73:f5:f6:1d:
bf:58:52:a2:6e:23:dc:62:83:b7:72:39:94:6c:91:14:37:b7:
0a:6e:0c:5a:64:ba:89:b4:61:16:1b:34:18:16:ca:f3:d6:6a:
0f:f2:eb:79:a5:6e:ed:79:e6:83:c5:ff:ef:72:9a:0a:0b:ad:
5f:e5:ce:d7:fd:26:da:ba:db:62:c3:d6:00:63:d0:bb:8b:29:
2f:6c:24:7f:d8:85:c5:5f:36:0e:fc:6b:21:48:9f:82:71:c5:
09:21:54:f5:2c:a5:83:1e:60:8a:78:c1:65:61:a1:c3:3f:14:
6d:5d:99:e2:e7:c1:91:eb:ec:02:e5:af:6d:cc:8a:c8:60:74:
40:34:cf:98:3b:11:49:86:b1:2d:9b:fd:bd:eb:3c:7e:d6:73:
39:97:f3:93:fe:ff:74:ba:68:f7:f5:78:0a:77:97:cb:ab:4e:
45:e5:c6:c4:8c:68:d4:35:01:f4:4a:2e:90:69:ba:26:b6:7a:
ec:43:fe:1b:e2:00:4e:00:dd:a0:0a:86:cd:74:d3:8c:32:ac:
14:72:28:28:6d:52:46:1a:79:2a:54:50:a6:4d:95:95:f4:db:
80:22:c1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:48:37 2025 by rpki-client