Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/M5OG91JsCAL60eSIC9Ad8J1tKCQ.roa
File: M5OG91JsCAL60eSIC9Ad8J1tKCQ.roa (raw, json)
Hash identifier: 1YIYjfLNUonn/y5DvRwWqNtN3UGauHay3fPvlHRKB78=
Subject key identifier: 33:93:86:F7:52:6C:08:02:FA:D1:E4:88:0B:D0:1D:F0:9D:6D:28:24
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 01971FD44661CD7F631617713227E25BDCFA
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/M5OG91JsCAL60eSIC9Ad8J1tKCQ.roa
Signing time: Fri 30 May 2025 06:14:54 +0000
ROA not before: Fri 30 May 2025 06:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201096
IP address blocks: 2a0d:1580:40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1f:d4:46:61:cd:7f:63:16:17:71:32:27:e2:5b:dc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: May 30 06:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=339386f7526c0802fad1e4880bd01df09d6d2824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:10:c4:8b:29:79:f5:a9:84:d4:f0:45:73:
a4:12:4b:5b:6c:61:f5:08:61:16:17:c1:72:f3:ea:
17:c9:94:1a:8d:d9:f2:e6:77:84:fd:22:f1:72:64:
26:71:17:ab:86:a5:83:9a:53:e2:e2:e9:6c:1a:c3:
29:d5:e1:54:5c:76:05:7a:8d:0d:ae:48:08:3c:7d:
04:db:f7:4a:60:da:00:33:8c:77:50:e7:70:98:d7:
48:00:8f:65:41:75:90:4b:b8:84:b5:bd:3e:9c:f9:
ee:d8:e1:bf:ac:fd:72:b7:b7:b5:8a:88:a2:42:f8:
0f:c2:9a:01:f8:eb:4d:43:9a:4f:45:00:09:10:c1:
94:75:94:59:bc:7e:97:3a:5e:20:57:de:61:bf:41:
6d:da:c4:8d:e3:f0:01:57:67:26:90:b7:ea:79:48:
e1:91:51:0a:9e:26:26:64:72:a5:88:6a:d3:fd:d5:
31:21:46:e9:4c:34:30:bd:f2:03:b5:dd:21:5e:cb:
49:72:8a:51:f3:1b:20:f8:89:ad:00:33:6e:74:3e:
07:b0:f9:b1:dc:8b:77:36:57:65:09:d6:ce:3d:3a:
2a:58:3e:a2:fd:95:53:6a:52:b8:bb:2c:cd:86:8b:
5c:e1:3a:9a:84:99:ee:2b:95:80:ae:9d:07:59:3c:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:93:86:F7:52:6C:08:02:FA:D1:E4:88:0B:D0:1D:F0:9D:6D:28:24
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/M5OG91JsCAL60eSIC9Ad8J1tKCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1580:40::/48
Signature Algorithm: sha256WithRSAEncryption
62:3f:90:71:a4:1a:6c:99:86:e0:3d:a2:98:07:0e:23:df:86:
58:ac:67:e1:e9:c9:48:44:98:0e:49:f7:13:f7:9d:07:9d:71:
f2:bf:6c:91:80:cb:94:ba:c9:1a:a1:cc:12:02:be:7f:6a:a1:
35:3a:fe:93:71:d8:1f:e6:60:89:93:5b:e7:73:f4:9d:ea:25:
64:7d:83:c3:8f:ef:03:03:42:c3:c5:f9:6d:06:15:ad:c0:ee:
56:c8:76:03:b5:90:df:02:e5:54:e5:2a:8c:91:f5:4d:b7:76:
ce:a9:bb:3e:bc:e6:77:c4:bb:85:ed:af:dc:47:20:2c:78:71:
fb:a5:2e:a3:1e:ea:85:9a:1e:0e:46:7e:df:1a:cc:98:1c:06:
f1:a3:70:54:dd:b3:77:7e:de:ed:ac:be:fb:24:3c:c5:61:15:
e3:c8:c9:0e:0d:b9:0d:3c:74:90:46:e3:f1:c8:83:85:b1:af:
fe:99:a7:7d:50:b2:85:71:ed:08:53:1c:cc:78:dc:61:8e:cc:
1e:9d:d2:2d:3b:73:01:21:79:2b:5d:33:89:af:99:88:71:d5:
92:e6:4a:1d:f6:32:29:39:b2:8f:2f:82:74:07:3a:7e:84:7b:
40:a9:88:bb:71:2f:d9:7f:2e:33:23:ed:e7:64:7a:20:1f:17:
56:b0:f8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:01:04 2025 by rpki-client