Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/UdN6GQS6nMB84Y7mxOEvW5F7VLw.roa
File: UdN6GQS6nMB84Y7mxOEvW5F7VLw.roa (raw, json)
Hash identifier: D7bSo9vOpouIOxO1RTZm5IioqQd+GVhKEwyeWJ2daI0=
Subject key identifier: 51:D3:7A:19:04:BA:9C:C0:7C:E1:8E:E6:C4:E1:2F:5B:91:7B:54:BC
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0197640C4F8E46FCBC20B4F8B0A4B1AD75D9
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/UdN6GQS6nMB84Y7mxOEvW5F7VLw.roa
Signing time: Thu 12 Jun 2025 12:10:17 +0000
ROA not before: Thu 12 Jun 2025 12:10:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215434
IP address blocks: 2001:3186::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:0c:4f:8e:46:fc:bc:20:b4:f8:b0:a4:b1:ad:75:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 12:10:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51d37a1904ba9cc07ce18ee6c4e12f5b917b54bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:99:6c:e8:8c:ed:b0:21:4e:20:e8:2d:0f:b7:
85:be:80:16:00:7a:c7:3d:c2:fd:9e:3c:c7:4b:88:
66:18:67:54:6f:4f:90:13:bc:ba:c7:bc:42:ff:49:
46:8f:59:f8:f8:aa:ea:71:f3:f6:92:ac:e9:ab:07:
3e:fd:7b:54:a8:08:cb:ad:b5:b7:62:9a:38:c4:36:
0b:7f:03:3f:37:38:60:bf:6b:d0:03:d0:12:5d:5a:
bb:33:50:1d:22:91:b4:6f:73:a1:b5:23:0c:e2:dd:
15:90:eb:47:06:62:b1:f8:a5:cb:5e:b8:3c:07:00:
35:cd:b9:8a:67:c4:18:e7:ef:28:3f:c2:8b:1c:04:
ce:fd:78:34:8a:5d:4e:5d:3e:aa:38:cc:cb:7c:af:
c6:ee:b8:8e:7c:7b:a5:21:fa:8f:cc:80:a2:3d:dc:
54:4a:2e:76:a5:cd:c3:e5:f3:4b:21:f8:7e:f3:37:
95:7f:ba:31:56:d8:e6:73:0f:f2:2d:ce:11:46:2f:
7a:18:5f:7a:3d:24:dd:18:1e:88:70:4f:05:59:31:
9a:d9:65:3a:9d:19:7f:7e:8f:ba:d8:4f:2f:d5:a1:
19:a5:d7:08:95:f8:ce:a8:83:17:28:e9:6d:9a:91:
28:ec:f0:7e:b2:58:25:c0:9b:c0:de:6f:7f:35:79:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D3:7A:19:04:BA:9C:C0:7C:E1:8E:E6:C4:E1:2F:5B:91:7B:54:BC
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/UdN6GQS6nMB84Y7mxOEvW5F7VLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3186::/32
Signature Algorithm: sha256WithRSAEncryption
a8:e9:ef:13:e4:dc:c7:3b:68:3c:2f:d0:d0:c7:db:09:fd:b7:
b3:b8:27:cf:ee:72:b6:61:8a:5b:59:77:5a:e0:7a:60:83:40:
48:4d:05:81:e2:74:d5:bb:b9:35:90:c0:c7:29:14:36:62:0b:
bf:79:71:ac:dd:72:66:7a:37:7b:2c:30:2a:65:ab:8c:cd:d2:
8c:37:08:a7:54:09:c7:ec:7a:2e:69:da:6e:a0:8b:e9:87:14:
fb:9f:03:a5:7c:ef:bd:35:d9:2b:11:bb:cc:29:3e:03:03:4f:
4e:6a:f0:aa:fe:39:65:4b:23:c9:47:19:04:1b:e2:9d:3a:44:
6e:5d:81:39:95:c5:53:93:65:34:46:f5:37:cd:71:9a:3c:6f:
25:61:f8:f4:47:e9:fa:a0:48:0a:da:ec:fc:81:db:dd:ef:1b:
1a:1d:aa:84:25:a6:42:57:06:21:ea:03:0f:eb:e3:9d:bd:8c:
20:b5:7f:dd:11:ac:ab:17:5b:ed:77:fb:9c:19:04:ee:e8:2d:
aa:10:7b:fa:ca:81:7b:4d:d9:8b:05:26:fc:c2:0d:07:b1:d7:
85:55:98:a1:eb:59:ed:b8:27:f2:e6:9f:8d:70:cd:cd:62:5d:
5f:de:c1:8f:12:55:7d:f0:7f:57:43:2d:c4:ab:be:7e:4e:95:
7c:d0:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:16:08 2025 by rpki-client