Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/e0eoCvsiK7SasiyB3s3vVf_06r4.roa
File: e0eoCvsiK7SasiyB3s3vVf_06r4.roa (raw, json)
Hash identifier: hu+jMVWRtJ0t9dVnEO6X7YjTvJeeEKYO8KGJ+pPf1v0=
Subject key identifier: 7B:47:A8:0A:FB:22:2B:B4:9A:B2:2C:81:DE:CD:EF:55:FF:F4:EA:BE
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 01970BB006E7759819F243BB665ABEDBFFBC
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/e0eoCvsiK7SasiyB3s3vVf_06r4.roa
Signing time: Mon 26 May 2025 08:22:54 +0000
ROA not before: Mon 26 May 2025 08:22:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62610
IP address blocks: 2a0b:21c1:600c::/46 maxlen: 46
2a0b:21c1:6013::/48 maxlen: 48
2a0b:21c1:6014::/48 maxlen: 48
2a0b:21c1:6015::/48 maxlen: 48
2a0b:21c1:6016::/48 maxlen: 48
2a0b:21c1:6017::/48 maxlen: 48
2a0b:21c1:6018::/48 maxlen: 48
2a0b:21c1:6019::/48 maxlen: 48
2a0b:21c1:601a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:b0:06:e7:75:98:19:f2:43:bb:66:5a:be:db:ff:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: May 26 08:22:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b47a80afb222bb49ab22c81decdef55fff4eabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:4c:f4:13:76:90:c3:22:6a:d0:b9:24:9a:
e1:e7:e4:7d:25:98:52:17:d8:fa:a4:b9:79:51:03:
92:71:46:90:86:83:78:32:b7:20:37:7b:82:d1:49:
7d:93:cb:24:35:a7:fe:1d:87:6e:3c:8e:39:97:36:
06:e1:99:ad:ab:16:e2:5b:6b:34:bd:9f:17:97:88:
38:61:68:24:e1:db:7c:56:bd:ef:2f:c2:b6:e8:b2:
4b:d0:89:83:6a:3d:8c:2b:37:93:9b:1f:46:0f:4a:
09:30:bc:6d:a2:d3:39:8a:35:a3:a8:26:7c:4f:c5:
c2:7f:41:e9:bf:ee:db:63:6d:2a:6c:86:61:1d:d6:
24:5c:c7:d9:ae:d8:a1:0d:ed:ee:78:96:05:05:d2:
f9:0e:a1:aa:d3:02:13:d1:a4:a0:9c:e7:09:f2:72:
d0:f9:ac:08:57:2a:6f:b8:6f:72:9c:05:64:31:42:
20:60:b6:63:f8:e5:ad:04:f4:fe:1b:eb:0e:4b:da:
e3:c9:08:d8:0d:8c:91:ff:68:3e:78:11:dd:07:9c:
73:4c:bb:f3:63:35:a8:00:40:47:f9:c6:27:8b:03:
94:a2:fb:ec:4f:e0:63:66:56:bb:98:06:b2:d1:93:
68:24:c0:44:23:5a:26:ce:61:77:83:a3:21:21:e0:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:47:A8:0A:FB:22:2B:B4:9A:B2:2C:81:DE:CD:EF:55:FF:F4:EA:BE
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/e0eoCvsiK7SasiyB3s3vVf_06r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:21c1:600c::/46
2a0b:21c1:6013::-2a0b:21c1:601a:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:4f:ca:cc:f0:b2:52:e8:f3:e1:38:a1:1a:50:9a:9e:39:69:
1d:42:5e:58:c2:09:53:8a:5a:61:99:6d:e8:e5:97:73:14:6d:
cc:87:ae:9c:54:2d:91:41:b6:1e:ec:2f:74:8b:d6:95:78:40:
9b:b0:2e:ba:6e:8d:ee:aa:99:b1:68:08:26:9e:69:4b:c9:2c:
ab:c4:35:4d:76:9b:28:e7:a7:42:39:26:75:65:c2:14:44:39:
17:85:55:9c:35:7e:f0:fe:c8:5c:97:b9:ee:18:76:9d:26:cd:
27:fc:0d:9a:45:12:41:ba:22:c0:84:04:77:29:c4:4f:72:27:
9c:c7:35:bd:5a:05:35:ee:cc:e4:54:f8:bc:23:e3:65:76:47:
48:db:90:5b:40:b6:2f:ea:1c:cc:01:78:69:c5:0a:e9:05:e0:
36:41:e5:5f:dd:29:bb:b5:9d:a1:dd:d1:0c:9c:89:55:3b:14:
d8:c9:03:ad:b1:54:2e:fd:64:ad:e2:7e:c8:98:66:2a:eb:0c:
fd:33:c9:67:e7:fa:4b:ae:a1:ff:b1:19:24:c4:f7:55:7b:07:
71:1a:f6:6d:b6:ec:1b:1b:fe:d9:9b:37:6a:39:d9:46:d2:bd:
d2:7a:e7:8c:50:37:7a:92:33:10:19:73:97:8e:fa:b4:0e:c8:
10:45:43:38
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZcLsAbndZgZ8kO7Zlq+2/+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy
YjNhZWMwHhcNMjUwNTI2MDgyMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjQ3YTgwYWZiMjIyYmI0OWFiMjJjODFkZWNkZWY1NWZmZjRlYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA315M9BN2kMMiatC5JJrh5+R9JZhS
F9j6pLl5UQOScUaQhoN4MrcgN3uC0Ul9k8skNaf+HYduPI45lzYG4ZmtqxbiW2s0
vZ8Xl4g4YWgk4dt8Vr3vL8K26LJL0ImDaj2MKzeTmx9GD0oJMLxtotM5ijWjqCZ8
T8XCf0Hpv+7bY20qbIZhHdYkXMfZrtihDe3ueJYFBdL5DqGq0wIT0aSgnOcJ8nLQ
+awIVypvuG9ynAVkMUIgYLZj+OWtBPT+G+sOS9rjyQjYDYyR/2g+eBHdB5xzTLvz
YzWoAEBH+cYniwOUovvsT+BjZla7mAay0ZNoJMBEI1omzmF3g6MhIeCxVQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFHtHqAr7Iiu0mrIsgd7N71X/9Oq+MB8GA1UdIwQY
MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt
ZTdkYWVjMTk0YTY5LzEvZTBlb0N2c2lLN1Nhc2l5QjNzM3ZWZl8wNnI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5
LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcCKgshwWAM
MBIDBwAqCyHBYBMDBwAqCyHBYBowDQYJKoZIhvcNAQELBQADggEBAGFPyszwslLo
8+E4oRpQmp45aR1CXljCCVOKWmGZbejll3MUbcyHrpxULZFBth7sL3SL1pV4QJuw
Lrpuje6qmbFoCCaeaUvJLKvENU12myjnp0I5JnVlwhREOReFVZw1fvD+yFyXue4Y
dp0mzSf8DZpFEkG6IsCEBHcpxE9yJ5zHNb1aBTXuzORU+Lwj42V2R0jbkFtAti/q
HMwBeGnFCukF4DZB5V/dKbu1naHd0QyciVU7FNjJA62xVC79ZK3ifsiYZirrDP0z
yWfn+kuuof+xGSTE91V7B3Ea9m227Bsb/tmbN2o52UbSvdJ654xQN3qSMxAZc5eO
+rQOyBBFQzg=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:00:31 2025 by rpki-client