Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/lB6tM26XvybAjC_i9gyukbY90Gs.roa
File: lB6tM26XvybAjC_i9gyukbY90Gs.roa (raw, json)
Hash identifier: QCUB0nbnI7vfbQcfu12QO8f17dboTNQ2oQD6KvaVOOo=
Subject key identifier: 94:1E:AD:33:6E:97:BF:26:C0:8C:2F:E2:F6:0C:AE:91:B6:3D:D0:6B
Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Certificate serial: 01973770F13DE03E09577C1B1EAB602D3298
Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/lB6tM26XvybAjC_i9gyukbY90Gs.roa
Signing time: Tue 03 Jun 2025 20:17:17 +0000
ROA not before: Tue 03 Jun 2025 20:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216391
IP address blocks: 2001:67c:d0c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:70:f1:3d:e0:3e:09:57:7c:1b:1e:ab:60:2d:32:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Validity
Not Before: Jun 3 20:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=941ead336e97bf26c08c2fe2f60cae91b63dd06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:0a:e3:90:70:17:e7:b6:ad:a2:f3:3c:51:
79:b9:4c:61:e0:8f:a8:6e:37:b6:11:6e:8e:2e:1f:
af:52:3f:62:ec:bf:c2:8a:53:81:3c:57:97:94:82:
83:0d:17:3e:e7:91:88:81:7c:90:0e:ee:66:22:30:
d3:08:58:b3:94:97:17:07:34:79:4b:b2:ef:94:d9:
41:48:12:c4:09:28:8c:cc:17:41:1b:ee:54:9b:58:
eb:2e:a0:6f:2e:5b:62:8b:98:33:f8:0f:b7:a2:9b:
4e:4e:c0:c8:5c:e6:93:19:37:88:fd:9d:20:47:ae:
3f:1a:45:5d:6b:03:c2:32:ec:b6:4e:54:87:dc:9c:
a4:e3:d3:97:1c:ac:98:cb:cd:36:12:42:e3:77:3a:
77:d4:26:79:da:88:04:24:c4:7b:cf:c0:db:f8:03:
94:fc:f7:65:85:c1:76:18:15:03:4d:f2:05:a9:ce:
e9:cd:80:ff:28:e9:5f:aa:37:79:e0:6f:33:aa:92:
11:3c:06:0c:a0:7d:87:67:b0:73:30:bf:26:a4:e5:
c3:3a:60:63:74:1a:19:ad:9b:e0:b5:b5:2d:2f:a8:
29:e4:1c:55:df:b1:2a:de:ff:76:19:86:5b:ea:c0:
86:8d:33:43:d8:1e:06:a1:aa:c4:a6:5b:e3:2d:92:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:AD:33:6E:97:BF:26:C0:8C:2F:E2:F6:0C:AE:91:B6:3D:D0:6B
X509v3 Authority Key Identifier:
keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/lB6tM26XvybAjC_i9gyukbY90Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d0c::/48
Signature Algorithm: sha256WithRSAEncryption
78:29:e5:8a:9a:7d:fb:10:85:bb:cf:07:3e:c6:05:df:2a:20:
58:55:e0:69:c9:b4:03:f5:d1:7e:71:98:22:d9:1e:e0:14:d5:
41:15:7a:79:fe:01:57:0d:db:d7:cb:40:bb:bb:08:d4:b6:44:
c5:40:90:1d:38:e4:db:a1:43:e0:b4:e0:94:53:3e:9b:f1:5c:
b1:0c:f2:f4:11:88:89:a5:e0:75:f2:cc:0a:1e:aa:bd:66:b8:
40:88:bc:ca:34:fd:26:35:2c:08:b5:b4:46:5f:1b:5d:db:15:
9f:55:4a:1a:69:11:28:e3:00:fd:94:56:cc:0c:22:d3:1a:13:
8b:06:3e:5a:82:f4:ac:75:57:e8:58:af:e6:60:90:cd:f6:6f:
af:29:2b:e2:f9:cb:4d:fb:c4:9c:7b:67:4c:c9:79:8e:8a:48:
b3:ad:17:2b:bc:87:fb:57:0d:44:7b:8a:c6:a9:58:67:33:29:
fc:46:b3:78:13:f6:6c:08:fc:80:7d:8d:05:3e:e4:f1:69:46:
59:e0:06:cf:e3:8d:18:bd:7a:69:04:5c:eb:ed:02:2d:e0:6a:
ca:24:e4:3c:43:b0:02:f8:15:11:f9:31:63:0e:45:f5:9d:2d:
5f:63:d8:c4:fa:b6:6d:82:2b:5a:de:3e:d6:3d:4b:a9:de:38:
33:1b:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:10:20 2025 by rpki-client