Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/lHEeEjAFgroJTrIY5QbVeDEWoOw.roa
File: lHEeEjAFgroJTrIY5QbVeDEWoOw.roa (raw, json)
Hash identifier: G19flkrxL/ZRMKit7ghVRFp+zXGRyFjawVYgeh3VOTY=
Subject key identifier: 94:71:1E:12:30:05:82:BA:09:4E:B2:18:E5:06:D5:78:31:16:A0:EC
Certificate issuer: /CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Certificate serial: 019726F22D3E9D5C53289A1E8B00E36E4822
Authority key identifier: 54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/lHEeEjAFgroJTrIY5QbVeDEWoOw.roa
Signing time: Sat 31 May 2025 15:24:54 +0000
ROA not before: Sat 31 May 2025 15:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a02:1600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:f2:2d:3e:9d:5c:53:28:9a:1e:8b:00:e3:6e:48:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Validity
Not Before: May 31 15:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94711e12300582ba094eb218e506d5783116a0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:61:0f:6c:02:26:71:ac:7f:46:97:34:f2:
f1:1a:80:cd:45:b0:c6:7c:db:64:eb:d7:e1:32:90:
ae:39:ff:53:a2:79:c6:a1:24:53:73:81:b7:cf:cd:
53:98:15:a1:6f:5c:8c:fd:39:1e:4a:d7:36:35:1e:
5f:db:31:78:9d:5d:77:b2:06:9a:d6:28:18:2b:5d:
f9:76:d6:83:1d:f0:68:7c:78:43:7b:13:5e:d4:54:
2c:cd:a0:b5:34:bd:bf:ab:f9:10:9d:a7:65:cb:81:
99:34:84:7a:53:b8:54:6f:f7:65:21:6e:87:e3:bb:
ac:db:f0:00:3f:70:ba:7a:d3:fb:20:d9:02:d2:b0:
46:7c:9f:58:01:b3:51:19:0a:05:1f:99:13:92:da:
af:eb:25:ab:86:96:74:5d:15:1d:07:ef:95:90:e8:
f5:ba:10:b1:74:1d:de:98:b4:49:cb:aa:89:79:bb:
e4:00:ac:96:33:60:f6:b8:37:10:68:ba:40:0f:4b:
ef:6a:24:84:6f:83:7b:db:28:f1:94:e9:5d:16:c4:
19:d4:b1:33:fa:e4:24:05:b7:37:2d:8d:73:ab:7d:
a9:97:3a:97:e1:ea:97:25:f4:1c:17:70:b0:d3:5f:
09:18:e7:e2:0a:3f:d9:69:fb:ae:a3:0a:81:39:ad:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:71:1E:12:30:05:82:BA:09:4E:B2:18:E5:06:D5:78:31:16:A0:EC
X509v3 Authority Key Identifier:
keyid:54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/lHEeEjAFgroJTrIY5QbVeDEWoOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:1600::/29
Signature Algorithm: sha256WithRSAEncryption
39:a0:c3:4b:b8:b9:29:b6:0e:78:56:6c:39:24:07:3a:77:c0:
37:74:0f:a5:7b:e8:75:f9:01:f2:b8:71:56:3c:b0:fa:3d:7b:
c3:b4:bc:9b:0e:9e:74:fc:e4:2b:01:5a:f3:0d:99:f1:dd:4b:
1c:6c:20:81:7c:b5:3c:32:48:c2:55:b9:c6:32:e7:fd:28:3d:
b3:a6:d2:b4:b5:9f:c2:5b:f1:9b:ca:f1:e7:f8:c5:62:4c:d7:
8d:9e:de:cb:33:c6:57:dd:e9:84:25:a0:06:04:2c:3e:c2:4a:
6d:3f:6a:98:52:ca:59:2b:05:56:1b:af:eb:a6:40:db:5d:06:
40:0d:0a:9c:34:3d:7e:f2:40:2c:42:da:bb:b7:9d:d6:ee:43:
6a:ed:74:c1:e4:7e:51:4b:60:04:2a:fa:e6:aa:37:6a:54:0e:
79:44:c6:eb:06:c0:53:1a:1e:c5:b1:9a:96:f4:d9:4d:9d:cf:
d6:31:55:fd:54:03:13:5f:19:e3:2e:96:dc:10:97:51:2d:a4:
74:50:54:1b:ec:0b:9e:a5:2c:2d:a8:36:4e:18:b5:e5:d8:33:
d1:c1:19:83:6c:58:9a:d5:b7:f8:6b:dd:b5:f0:ba:6b:52:52:
40:ef:35:33:71:c7:4d:74:fa:99:68:3e:f1:ef:b3:85:8b:6e:
3d:bb:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:15:07 2025 by rpki-client