Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/EF4BqSKTxflZOPA4JpZQYqM10d0.roa
File: EF4BqSKTxflZOPA4JpZQYqM10d0.roa (raw, json)
Hash identifier: rvN1vLA9FFQoxDYtGHSi89qsjoBPIE2CgdxWal1aCXw=
Subject key identifier: 10:5E:01:A9:22:93:C5:F9:59:38:F0:38:26:96:50:62:A3:35:D1:DD
Certificate issuer: /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial: 01971A676C6CAD93097B28EB0181B2123055
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/EF4BqSKTxflZOPA4JpZQYqM10d0.roa
Signing time: Thu 29 May 2025 04:57:54 +0000
ROA not before: Thu 29 May 2025 04:57:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205585
IP address blocks: 2a0d:4ac0::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1a:67:6c:6c:ad:93:09:7b:28:eb:01:81:b2:12:30:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Validity
Not Before: May 29 04:57:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=105e01a92293c5f95938f03826965062a335d1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:24:10:2c:85:90:57:4d:dd:97:7b:ac:13:
6b:72:60:dd:2e:80:08:53:2d:8e:7d:28:ab:8d:2f:
3d:d6:20:3c:97:a2:28:c4:76:b5:12:9e:43:ba:16:
a5:de:75:e7:5b:83:cf:d7:48:43:6c:54:81:35:5e:
89:78:0d:37:c5:53:c2:8c:cd:fa:a1:e7:9f:c1:30:
3c:dd:bf:76:12:03:07:50:28:db:a8:ce:60:4a:65:
fe:63:c9:63:a1:18:e6:32:17:8a:cb:6d:b0:d9:da:
41:a2:ff:26:7e:7d:b4:4f:10:e0:24:1a:16:c4:e9:
60:7a:df:d9:bc:fc:20:30:53:2b:6d:cd:b2:ff:0c:
85:83:39:41:84:98:1f:e0:11:18:d9:d1:09:ea:b7:
38:d2:a1:88:73:5a:33:98:e7:f4:ad:ab:0e:ea:e3:
f3:3c:69:3b:db:52:74:5a:3e:78:50:bf:44:ce:02:
af:9e:66:06:06:1e:e6:f8:d1:85:d0:ae:91:63:60:
7c:47:7c:c2:79:b7:73:9b:c6:83:a2:a9:4c:a8:b1:
37:6c:6a:e5:17:9c:67:5f:f6:79:57:7d:af:37:ae:
5d:28:7f:d3:cc:00:a4:64:b3:0d:c6:eb:0a:aa:ec:
38:4e:6f:fd:e1:a8:9b:42:fe:7e:e6:ad:fc:f8:98:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5E:01:A9:22:93:C5:F9:59:38:F0:38:26:96:50:62:A3:35:D1:DD
X509v3 Authority Key Identifier:
keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/EF4BqSKTxflZOPA4JpZQYqM10d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:4ac0::/40
Signature Algorithm: sha256WithRSAEncryption
c8:c0:c5:00:19:33:51:6b:bd:7c:c0:f5:63:f3:ab:56:d0:27:
30:3b:a4:07:dc:3b:23:c7:67:6f:5f:7a:92:7f:6e:45:bc:cf:
cb:d2:43:57:f1:d0:a4:b5:4a:1e:6f:8a:2b:46:11:a3:3c:0f:
6f:51:e9:3a:f0:61:15:38:b9:b1:37:39:01:de:4c:56:1c:c9:
71:25:ab:b5:e5:09:17:7a:e3:4b:8c:4a:e1:73:36:3c:f5:62:
e6:52:e8:9e:73:a1:f8:12:dc:90:48:06:01:14:78:f7:76:90:
c9:1f:b0:b0:f5:a7:d1:a9:a6:83:0f:9a:cc:5d:60:0a:48:f7:
5b:66:a0:ad:17:4d:22:78:85:d1:b1:ca:4d:72:13:9b:b4:7a:
15:1e:2d:0a:3f:4b:2c:bf:51:cd:42:ea:f8:8e:97:2d:9e:74:
0c:69:df:ab:e1:68:3e:01:91:49:df:50:43:6c:28:d0:f9:a4:
8a:53:18:93:5e:9e:c9:df:b9:4b:69:69:29:f4:3a:64:40:9e:
2b:a8:f5:55:9e:ec:50:15:18:7b:40:73:21:7d:e0:38:4d:f6:
8f:67:d9:40:d9:d7:2b:d6:a0:38:59:37:53:34:5a:7a:8b:cf:
a6:8e:49:b2:88:c9:68:1a:ab:7c:61:18:74:79:e7:d4:25:ed:
26:ee:4f:03
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZcaZ2xsrZMJeyjrAYGyEjBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDU2NWY5OWZmNWUwZmZiNWJkZjk5OTVlZDdhODA4ZDQx
NDA2ZTUwHhcNMjUwNTI5MDQ1NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDVlMDFhOTIyOTNjNWY5NTkzOGYwMzgyNjk2NTA2MmEzMzVkMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouQkECyFkFdN3Zd7rBNrcmDdLoAI
Uy2OfSirjS891iA8l6IoxHa1Ep5Duhal3nXnW4PP10hDbFSBNV6JeA03xVPCjM36
oeefwTA83b92EgMHUCjbqM5gSmX+Y8ljoRjmMheKy22w2dpBov8mfn20TxDgJBoW
xOlget/ZvPwgMFMrbc2y/wyFgzlBhJgf4BEY2dEJ6rc40qGIc1ozmOf0rasO6uPz
PGk721J0Wj54UL9EzgKvnmYGBh7m+NGF0K6RY2B8R3zCebdzm8aDoqlMqLE3bGrl
F5xnX/Z5V32vN65dKH/TzACkZLMNxusKquw4Tm/94aibQv5+5q38+Jj3YQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBBeAakik8X5WTjwOCaWUGKjNdHdMB8GA1UdIwQY
MBaAFHnVZfmf9eD/tb35mV7XqAjUFAblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRWbC1aXzE0UC0xdmZtWlh0ZW9DTlFVQnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lZTVjZDctYjMwZS00NjZiLWFhYWQt
NmMzYjg3NDQzZTA2LzEvRUY0QnFTS1R4ZmxaT1BBNEpwWlFZcU0xMGQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9lZTVjZDctYjMwZS00NjZiLWFhYWQtNmMzYjg3NDQzZTA2
LzEvZWRWbC1aXzE0UC0xdmZtWlh0ZW9DTlFVQnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg1KwAAw
DQYJKoZIhvcNAQELBQADggEBAMjAxQAZM1FrvXzA9WPzq1bQJzA7pAfcOyPHZ29f
epJ/bkW8z8vSQ1fx0KS1Sh5viitGEaM8D29R6TrwYRU4ubE3OQHeTFYcyXElq7Xl
CRd640uMSuFzNjz1YuZS6J5zofgS3JBIBgEUePd2kMkfsLD1p9GppoMPmsxdYApI
91tmoK0XTSJ4hdGxyk1yE5u0ehUeLQo/Syy/Uc1C6viOly2edAxp36vhaD4BkUnf
UENsKND5pIpTGJNensnfuUtpaSn0OmRAniuo9VWe7FAVGHtAcyF94DhN9o9n2UDZ
1yvWoDhZN1M0WnqLz6aOSbKIyWgaq3xhGHR559Ql7SbuTwM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:41:03 2025 by rpki-client