Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/dV2LrBjIlql28uwMDcJVQI6s6A8.roa
File: dV2LrBjIlql28uwMDcJVQI6s6A8.roa (raw, json)
Hash identifier: F8uj/t68nQ3cbE2EUpzLNyfLklCyKLVmpdDgkWw1Qw4=
Subject key identifier: 75:5D:8B:AC:18:C8:96:A9:76:F2:EC:0C:0D:C2:55:40:8E:AC:E8:0F
Certificate issuer: /CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Certificate serial: 019708A4E9C1B828BBA164BAB232E4FD2251
Authority key identifier: A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/dV2LrBjIlql28uwMDcJVQI6s6A8.roa
Signing time: Sun 25 May 2025 18:11:54 +0000
ROA not before: Sun 25 May 2025 18:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20292
IP address blocks: 2a06:6fc1::/32 maxlen: 32
2a06:6fc1:400::/38 maxlen: 38
2a06:6fc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:08:a4:e9:c1:b8:28:bb:a1:64:ba:b2:32:e4:fd:22:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Validity
Not Before: May 25 18:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=755d8bac18c896a976f2ec0c0dc255408eace80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:19:6f:0c:6c:44:cc:f0:47:dc:ec:79:42:
c0:b4:21:3d:04:71:fa:e2:dc:38:af:c3:e9:b5:d8:
d4:14:d2:8c:f7:8f:c9:66:ad:3d:78:9f:ea:45:cd:
26:3a:5e:8e:43:bb:e9:2d:33:ea:02:6d:ce:24:bb:
2a:2e:15:89:e9:1b:09:c0:0e:59:cd:0f:18:ef:73:
6a:6c:3b:f0:01:dd:fc:a1:77:42:fb:e8:77:af:d7:
f7:fe:80:42:25:3d:e1:91:dd:bf:ca:06:4d:7e:06:
d9:88:4a:96:9a:3b:59:87:fe:c4:42:c9:ea:01:c2:
1e:78:90:e3:4b:55:f7:0c:82:3a:a4:0c:a0:ad:b7:
52:41:97:23:8f:a0:3c:8d:34:f3:c6:c7:17:7e:68:
38:3d:39:f1:4d:d4:9b:98:88:5d:9a:13:8c:c9:7f:
f8:50:60:ff:92:1c:83:94:10:79:6f:6e:80:df:51:
6b:3a:6b:a8:12:71:3f:39:c7:3c:f9:a8:47:5f:73:
f2:c6:4a:9d:92:74:bd:d1:0f:b3:13:56:ee:bc:cb:
a2:b4:ce:75:41:4b:be:67:3b:7c:c1:d8:1e:2e:1f:
e6:3c:db:73:9a:e9:35:90:34:32:a1:c0:8b:56:c3:
52:46:97:e0:94:32:2c:60:86:8a:cf:9b:8e:80:3c:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5D:8B:AC:18:C8:96:A9:76:F2:EC:0C:0D:C2:55:40:8E:AC:E8:0F
X509v3 Authority Key Identifier:
keyid:A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/dV2LrBjIlql28uwMDcJVQI6s6A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6fc1::-2a06:6fc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b3:39:ee:54:e2:e9:95:b4:18:d6:9d:d5:53:53:ee:97:fb:5c:
bb:c5:66:2b:a5:55:c6:db:c1:f8:bb:5b:04:a9:6d:0a:79:b4:
98:b7:96:cc:61:ea:80:5d:f2:36:a2:ad:05:32:f6:9e:6d:4e:
27:69:e6:87:de:f9:ed:d8:19:73:a5:1e:08:87:ab:43:fa:46:
dd:05:95:88:0f:d4:89:1b:37:cf:50:56:a6:3f:56:1e:ee:89:
a3:50:e6:c3:d7:a0:3e:71:e9:2b:08:bf:93:0e:3d:eb:50:fc:
d0:1a:c2:b7:18:3f:9e:62:b2:e3:2c:08:c8:34:9d:bc:35:87:
ad:d8:3d:40:af:3c:a9:b5:f0:c6:f4:9f:c3:52:4e:eb:80:26:
bb:27:f1:9b:bd:4b:7b:94:f4:ad:ca:55:e7:e5:82:03:16:f1:
dd:c2:45:cd:3c:dd:07:2c:33:cf:e9:c1:d7:32:bc:11:bd:10:
93:cb:3a:76:82:f1:47:e9:93:48:0f:10:a8:c4:c9:b1:36:65:
9f:3e:27:da:86:c6:f4:2d:f4:3b:51:51:fa:9b:35:5d:b7:0c:
e2:d7:76:b4:95:71:1d:86:99:cb:6f:f6:23:c0:88:bc:eb:e3:
c7:76:ed:c7:f8:0f:25:49:d9:01:69:9b:c4:bb:3d:39:56:3a:
81:c5:dd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:50:15 2025 by rpki-client