Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/di50dG8fVad1agSTGMuT9J1W0JE.roa
File: di50dG8fVad1agSTGMuT9J1W0JE.roa (raw, json)
Hash identifier: lxqFlw/zmFfDcOxDPIDa6NPhRc0oq0limAVvB0o8inY=
Subject key identifier: 76:2E:74:74:6F:1F:55:A7:75:6A:04:93:18:CB:93:F4:9D:56:D0:91
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 019759756F0CDA55E45D693CBF559CD1DF70
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/di50dG8fVad1agSTGMuT9J1W0JE.roa
Signing time: Tue 10 Jun 2025 10:49:17 +0000
ROA not before: Tue 10 Jun 2025 10:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200291
IP address blocks: 2a00:fe00:a000::/36 maxlen: 36
2a00:fe00:a000::/38 maxlen: 38
2a00:fe00:a400::/38 maxlen: 38
2a00:fe00:a800::/38 maxlen: 38
2a00:fe00:ac00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:75:6f:0c:da:55:e4:5d:69:3c:bf:55:9c:d1:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jun 10 10:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=762e74746f1f55a7756a049318cb93f49d56d091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d5:99:20:d7:e5:b5:1d:85:f4:88:33:a1:c9:
b2:14:9a:11:23:72:25:ba:6e:b5:b0:11:4f:ea:d7:
2e:19:1a:d6:af:c2:3c:8d:cc:77:a6:dd:b6:80:2c:
42:9a:b0:53:21:0a:42:ec:54:47:eb:a7:38:64:19:
ba:e5:59:9d:c0:7c:23:39:86:c1:13:f5:9a:dd:06:
92:7f:ef:47:9a:9e:75:eb:6f:45:55:7f:41:40:78:
db:ad:d9:72:59:fd:e6:f1:9c:a0:9d:cb:9f:cb:22:
8a:31:a5:34:50:ee:b1:2c:d4:aa:7c:f8:71:f5:53:
53:89:32:97:04:d2:71:38:61:eb:e7:cf:34:e8:2b:
27:56:b4:84:f7:5e:26:5e:3b:45:81:21:b5:96:a8:
35:d5:3b:e3:53:0a:ef:36:03:e2:e8:1c:38:49:36:
30:ea:53:03:97:cf:17:69:5a:40:1f:fc:b8:32:58:
5e:08:21:b2:5e:43:ff:92:75:e5:19:c3:b6:41:50:
bf:18:6f:be:35:1f:e7:44:9e:1a:71:2e:dc:2f:bd:
cc:07:29:36:66:3b:81:d2:93:fe:c0:5a:a3:97:36:
76:88:8a:61:16:b5:03:7e:dc:62:d8:5a:ca:b6:1f:
c9:90:57:93:d6:80:bc:e2:ae:e2:61:9a:3f:28:ae:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2E:74:74:6F:1F:55:A7:75:6A:04:93:18:CB:93:F4:9D:56:D0:91
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/di50dG8fVad1agSTGMuT9J1W0JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fe00:a000::/36
Signature Algorithm: sha256WithRSAEncryption
64:6c:10:61:c0:90:97:c9:33:43:9e:82:8a:df:1b:5e:39:88:
2b:62:c3:24:8c:7f:d7:62:c8:08:27:52:a8:4c:2c:3b:49:5f:
7c:95:15:e1:ca:25:73:93:26:ea:a9:fb:8b:3a:4d:f5:bd:2a:
3c:18:c8:1d:a8:45:8c:54:ba:76:b5:e2:47:d7:f8:05:e7:3d:
2b:48:89:ff:2e:c6:f3:4b:61:93:ad:d1:5c:06:79:53:e8:10:
83:a8:62:63:57:e1:3e:cd:06:d7:76:f2:72:b1:30:2c:14:ce:
ca:e4:ff:03:1d:6f:25:6e:05:4e:d9:95:1b:ee:4e:cd:3b:5c:
b9:6e:eb:d1:9d:3b:e1:ba:23:98:70:c3:31:5d:f0:84:e9:5c:
83:70:7b:36:f6:0a:c1:92:b1:b9:be:94:34:d7:08:c3:58:d2:
05:a5:85:1c:22:ce:33:0c:4e:c7:fe:71:e8:b5:42:a8:2e:90:
75:96:65:e1:50:1c:29:e0:f7:f4:d2:6b:5a:07:b1:6c:d4:b7:
e5:44:42:43:03:8c:73:25:6a:ba:61:25:db:94:c8:12:23:0c:
45:2f:8f:73:82:34:5d:3c:48:02:2f:c1:fc:7b:21:be:30:70:
6b:13:27:9d:2e:1a:90:1c:0e:66:4f:16:fa:5c:5b:a3:45:d3:
b1:5f:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:42:40 2025 by rpki-client