Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/IPDPeJ10DQMwIsMz_sD2WeYSwYE.roa
File: IPDPeJ10DQMwIsMz_sD2WeYSwYE.roa (raw, json)
Hash identifier: wTIepSPgGidqU5cNzr9eZrfTjZ1oyNxZVW4BihLovnM=
Subject key identifier: 20:F0:CF:78:9D:74:0D:03:30:22:C3:33:FE:C0:F6:59:E6:12:C1:81
Certificate issuer: /CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Certificate serial: 01968FD126402A8CD82BB743367E57EC5384
Authority key identifier: BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/IPDPeJ10DQMwIsMz_sD2WeYSwYE.roa
Signing time: Fri 02 May 2025 07:06:10 +0000
ROA not before: Fri 02 May 2025 07:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2001:67c:24b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:d1:26:40:2a:8c:d8:2b:b7:43:36:7e:57:ec:53:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Validity
Not Before: May 2 07:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f0cf789d740d033022c333fec0f659e612c181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:e9:f6:ca:73:22:39:28:ef:4c:0a:db:38:
ec:7d:80:e8:cb:60:f6:5a:56:98:b2:62:fe:e9:9b:
cb:ba:12:f0:df:d0:e5:16:67:da:9f:29:e7:9d:78:
e6:68:4c:da:2e:f7:47:27:05:01:66:8d:c6:d6:03:
92:32:a6:4f:92:64:31:62:57:b2:cf:b1:d0:fe:16:
9e:cb:e5:32:c6:79:1c:52:7e:c3:4a:7a:25:48:f8:
d4:05:09:41:bf:f7:d6:36:37:c4:19:5c:66:df:64:
80:f2:38:4c:35:cc:4c:f4:74:62:8f:4c:7c:9f:8c:
f0:fa:4f:5a:5a:34:08:6b:3f:71:1d:e5:5a:d4:6f:
6c:04:6d:7a:57:90:ee:2d:ff:b6:9a:55:8f:71:9f:
20:13:84:cd:e0:ca:02:4b:e5:eb:9f:2c:c5:71:e8:
71:3e:fa:ac:cf:2a:86:14:e8:d6:7d:a1:8f:6f:d1:
94:52:3a:0a:4f:1d:9c:1c:f2:5c:d1:49:75:48:d5:
d3:62:b2:bd:9a:39:9e:f7:dc:ce:52:16:c9:e6:a4:
28:3b:d0:b7:84:43:f2:74:77:27:c7:ef:f8:fb:f9:
6e:7a:2a:da:9a:0e:7f:a1:03:81:71:59:c6:aa:11:
94:03:48:af:d5:c4:b6:cd:6b:25:a9:17:8a:54:1c:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:CF:78:9D:74:0D:03:30:22:C3:33:FE:C0:F6:59:E6:12:C1:81
X509v3 Authority Key Identifier:
keyid:BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/IPDPeJ10DQMwIsMz_sD2WeYSwYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:24b4::/48
Signature Algorithm: sha256WithRSAEncryption
28:2a:a3:5d:2e:51:91:75:7b:9e:3a:fe:33:c7:58:a4:3a:1e:
3f:f1:dd:e5:e8:58:ee:c9:3b:96:03:7e:ed:f5:ef:dc:a0:0d:
c1:81:6a:53:9a:8a:d3:3e:56:fd:0c:b4:7a:f8:c1:38:5f:21:
d9:19:6c:d3:20:37:c1:f7:f0:c5:bd:e0:f2:54:32:57:ba:3b:
3d:8a:fb:6a:9a:ff:f0:18:08:17:b0:cc:a2:a9:0e:35:a8:9a:
73:e6:99:14:8f:28:8b:67:d7:7c:cf:df:e2:d2:8e:78:5e:83:
af:d8:c5:83:11:84:bb:b9:71:32:75:0f:d1:2d:2e:25:fa:98:
06:2f:e2:d3:cd:2c:46:84:23:36:09:fe:c5:fd:23:05:a8:aa:
cf:36:f4:48:ac:29:97:df:68:f6:14:33:32:0a:0d:ba:fe:42:
a6:c7:0f:f7:ca:9e:95:26:fc:04:49:57:5a:46:c5:a3:2d:b8:
5b:a8:97:90:b4:1f:64:30:90:60:cd:56:86:93:28:a3:0d:56:
e2:5f:e7:57:c8:b4:0b:94:08:b1:13:bf:4f:19:fd:fb:bf:fe:
45:ab:ca:ee:1e:f6:4d:06:d6:b3:60:08:70:8c:3b:e0:ef:c7:
4e:17:d8:63:78:42:64:c2:1b:7d:1b:3b:16:c6:55:08:00:f8:
b0:b7:98:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:26:56 2025 by rpki-client