Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/MoVlaEpeYcgapii9RQN01AK-1sk.roa
File: MoVlaEpeYcgapii9RQN01AK-1sk.roa (raw, json)
Hash identifier: YW281iIo2TPc/obI4ya1TvT4BPdmGo+hoO/NvnmnPcs=
Subject key identifier: 32:85:65:68:4A:5E:61:C8:1A:A6:28:BD:45:03:74:D4:02:BE:D6:C9
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01975DB5144A708651DA15D962EE87422047
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/MoVlaEpeYcgapii9RQN01AK-1sk.roa
Signing time: Wed 11 Jun 2025 06:37:17 +0000
ROA not before: Wed 11 Jun 2025 06:37:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a09:f1c3::/32 maxlen: 32
2a09:f9c4::/32 maxlen: 32
2a0e:5cc6::/32 maxlen: 32
2a0e:7343::/32 maxlen: 32
2a0e:b1c5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:b5:14:4a:70:86:51:da:15:d9:62:ee:87:42:20:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jun 11 06:37:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=328565684a5e61c81aa628bd450374d402bed6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:f9:0e:4d:90:89:fd:5b:45:44:a5:fe:9d:
ff:5b:a0:e6:04:07:a3:13:c2:b9:80:b4:48:1c:63:
b7:5e:4c:3c:c8:e7:6c:6a:d9:d4:20:71:13:7e:ab:
5c:5e:8c:f2:a2:0c:78:2d:01:a6:63:1c:04:1c:78:
eb:a2:e2:78:fa:d4:2a:a8:68:82:3f:4c:3e:d5:70:
b0:55:42:30:a1:7d:2d:97:c7:b9:c0:3f:47:0d:f9:
70:ad:85:f8:5b:d5:05:fe:fb:6a:d0:23:c0:b1:b1:
33:d9:dc:8c:87:27:f8:78:1d:86:f1:e7:30:da:ff:
52:19:3d:a4:c2:20:34:81:5b:0f:09:01:96:ef:6c:
16:a9:01:e7:6d:bc:f9:f2:ac:53:d2:39:fd:f9:94:
21:60:d3:56:82:74:e3:ba:28:4f:a2:a2:5e:80:c1:
42:1d:6b:9f:3e:00:b5:b5:b2:e1:96:4c:03:03:9b:
6b:6b:c1:8f:3b:4b:57:33:61:53:c8:88:39:b8:cd:
32:84:bd:a2:81:32:a7:61:b9:ed:40:18:7b:4d:24:
bb:0e:11:17:73:bc:2c:c3:97:97:37:65:a8:fe:a5:
22:df:53:93:74:a0:b2:ba:89:76:0d:1b:29:ff:f2:
a9:43:4a:a3:a7:92:2c:3e:bd:24:9f:52:3c:ff:67:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:85:65:68:4A:5E:61:C8:1A:A6:28:BD:45:03:74:D4:02:BE:D6:C9
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/MoVlaEpeYcgapii9RQN01AK-1sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:f1c3::/32
2a09:f9c4::/32
2a0e:5cc6::/32
2a0e:7343::/32
2a0e:b1c5::/32
Signature Algorithm: sha256WithRSAEncryption
14:3a:44:27:40:ff:be:ad:21:86:ff:43:3c:b4:9d:3b:6f:b0:
a2:0c:38:cc:90:f1:18:ed:29:e2:b2:b1:0e:fc:71:b2:72:95:
9d:2b:61:ea:ca:42:ac:f2:5c:07:e5:2f:27:9c:3b:87:78:17:
ac:39:98:a6:25:5c:1b:94:a9:18:0f:25:0e:7b:72:3b:0f:ac:
08:5e:54:8d:b8:ae:bf:b7:53:81:f4:1f:02:f7:50:f8:2a:a4:
95:43:e0:72:37:4a:3d:f5:98:40:e6:95:ce:a3:c8:3a:05:db:
42:b8:e4:c8:60:ce:3b:84:3d:09:cb:8f:28:56:f2:2e:9b:99:
84:a7:9b:17:40:f3:7a:19:31:85:17:7c:09:96:f0:94:34:45:
22:c1:57:69:cc:22:ac:80:46:05:44:92:17:ee:9d:12:03:a2:
fb:04:de:f9:2c:08:46:41:55:7b:d6:70:64:44:12:de:4c:f7:
d8:15:5c:bd:24:4b:3b:29:54:ba:a4:c6:71:64:b9:54:60:e8:
a4:22:8a:af:9d:9d:e6:ab:fb:e0:7b:98:3f:42:8a:40:94:c0:
3f:e7:8d:f0:2a:83:0d:cc:b5:1d:ff:29:06:c6:1b:74:62:2e:
c1:6d:28:45:8d:ba:6b:7e:1f:a5:24:f1:03:50:a1:85:43:51:
96:55:c3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:05:29 2025 by rpki-client