Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/5Bs7s2hMUk5okIwnH9_6NmpdROs.roa
File: 5Bs7s2hMUk5okIwnH9_6NmpdROs.roa (raw, json)
Hash identifier: o2DAPVOVte9ZiZJsxUltnpbHI6j6XbmRUrV+d3RHQW0=
Subject key identifier: E4:1B:3B:B3:68:4C:52:4E:68:90:8C:27:1F:DF:FA:36:6A:5D:44:EB
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01976319B2A61F53FE1CE33ECF2FCDF7E492
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/5Bs7s2hMUk5okIwnH9_6NmpdROs.roa
Signing time: Thu 12 Jun 2025 07:45:17 +0000
ROA not before: Thu 12 Jun 2025 07:45:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29290
IP address blocks: 2a00:f10:141::/48 maxlen: 48
2a0b:8f80:100::/40 maxlen: 48
2a0b:8f80:101::/48 maxlen: 48
2a0b:8f80:103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:19:b2:a6:1f:53:fe:1c:e3:3e:cf:2f:cd:f7:e4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jun 12 07:45:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e41b3bb3684c524e68908c271fdffa366a5d44eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:e9:91:88:0e:c9:11:1c:6b:f8:98:d5:6c:
cd:fc:a5:ad:00:f3:ce:48:ed:f3:89:de:d0:c8:b9:
2d:74:e5:b6:a0:b3:ee:71:06:9e:0a:ff:6a:32:3a:
a6:77:9b:39:09:42:e6:76:2a:7d:9d:83:e0:8a:e0:
b8:85:b6:3b:57:d8:cd:28:31:e7:d6:93:c3:b1:90:
d1:7a:3c:95:a7:0e:34:9d:00:3e:3e:8a:23:b1:4a:
87:56:0f:e6:45:ce:5c:8f:5a:15:c1:8d:f1:6c:9a:
51:b5:81:cb:55:fb:35:7e:39:00:d1:5c:b2:d6:fa:
95:0e:c3:22:ff:10:bb:e8:3b:04:2b:a7:f6:d0:40:
5b:08:c8:23:18:72:00:76:d4:16:f5:5d:4e:3b:1e:
f7:a9:0d:51:37:56:28:d8:bd:66:20:af:ae:47:1f:
11:fb:ae:1b:5e:47:a5:4a:62:6f:e4:e4:f9:99:49:
85:55:83:25:80:94:6e:f3:13:76:dd:87:21:ee:0e:
b4:df:f6:77:53:fa:3d:0c:b2:59:41:c0:47:18:f6:
0d:c6:22:2d:87:1f:cf:a8:df:69:32:85:b0:9d:ef:
cc:36:e1:88:92:aa:f3:4e:9c:d6:1f:bf:77:f1:6e:
75:ec:b8:70:bc:fe:cb:e1:16:ae:f1:da:5b:ad:54:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1B:3B:B3:68:4C:52:4E:68:90:8C:27:1F:DF:FA:36:6A:5D:44:EB
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/5Bs7s2hMUk5okIwnH9_6NmpdROs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f10:141::/48
2a0b:8f80:100::/40
Signature Algorithm: sha256WithRSAEncryption
38:36:63:99:79:e9:2f:f0:a5:48:db:12:7b:0b:b7:e0:5e:0d:
a0:7a:89:bf:9a:8c:54:4c:42:22:13:a5:55:98:8c:31:ed:dc:
89:b0:be:8c:f9:67:08:ed:2b:67:4d:a8:07:64:3f:69:1e:26:
fb:53:0e:46:ec:71:a2:10:ea:70:5d:f7:af:9d:0d:f9:b7:b8:
b2:e2:cd:24:fe:5e:55:23:87:8c:53:d6:d3:31:5b:94:c0:84:
d1:7f:71:27:f1:f6:c9:98:ca:cb:4e:f7:fe:1c:fe:d8:bb:39:
4f:16:8a:02:11:94:11:f9:4e:27:52:66:16:8c:c9:52:49:9a:
d1:14:61:30:d4:dd:09:9a:2f:e2:10:eb:e0:f5:80:7b:34:c3:
0f:41:d3:35:32:c2:0e:98:fd:29:55:e7:05:d6:4a:ce:72:4e:
a8:91:ed:1f:ed:c6:28:1c:11:13:69:d4:3c:b6:95:a2:17:ee:
ae:49:ac:34:2d:1f:a9:19:c7:13:03:c8:82:0d:8b:17:df:b9:
7f:7b:45:38:1c:f7:49:cc:be:f2:6f:ae:9b:9f:87:76:13:14:
5d:ca:f0:21:cc:6c:7c:50:1f:2d:8f:c0:2d:8d:0e:5b:9e:43:
b6:17:96:85:44:2f:24:d8:82:f6:96:1b:e6:a3:41:7f:8f:a3:
ae:35:88:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:38:16 2025 by rpki-client