Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/SlPSzJLSqLldpHANrLpV_AWe7pQ.roa
File: SlPSzJLSqLldpHANrLpV_AWe7pQ.roa (raw, json)
Hash identifier: d6qRFjDfiO2ypdJTYqM1meZYiyL4RuK2vrauyRg7dG8=
Subject key identifier: 4A:53:D2:CC:92:D2:A8:B9:5D:A4:70:0D:AC:BA:55:FC:05:9E:EE:94
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0198AD22EED90013732C8BB1989DB5BD406C
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/SlPSzJLSqLldpHANrLpV_AWe7pQ.roa
Signing time: Fri 15 Aug 2025 09:50:04 +0000
ROA not before: Fri 15 Aug 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60707
IP address blocks: 2a0b:a280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:22:ee:d9:00:13:73:2c:8b:b1:98:9d:b5:bd:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 15 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a53d2cc92d2a8b95da4700dacba55fc059eee94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:64:10:f0:46:58:1a:94:4a:59:76:48:ec:
26:3b:c1:5f:14:05:b7:16:b9:2f:8c:5c:86:44:31:
11:6d:e6:1f:9c:e3:34:78:cc:19:bb:e2:0e:f0:4e:
99:14:53:c5:c6:6a:e7:0c:8e:b5:ba:6a:c9:e5:10:
77:0c:c6:f9:ea:42:da:76:7e:87:f9:90:a0:86:46:
77:e8:e9:48:31:67:f8:0a:34:db:be:c4:6a:f0:14:
77:7c:df:c1:ea:25:f8:e8:90:1e:6a:01:c5:2a:8e:
c0:bf:8e:ec:e0:f7:96:a5:cb:c0:82:74:55:46:e9:
30:86:68:2a:fa:01:13:8f:25:d7:36:dc:55:af:11:
ee:6a:27:7d:11:ba:a9:a1:fd:d0:3e:02:20:07:f7:
11:16:6d:52:93:41:c6:9b:ca:d8:84:d2:bd:2a:a4:
a1:a1:ed:35:be:ce:88:81:06:b1:35:5a:9a:c4:02:
f6:4a:5f:ce:99:9c:3a:d2:42:55:61:07:93:c7:79:
ff:97:c7:dd:35:ce:23:3f:80:d4:a6:d3:24:83:b4:
a5:07:8a:66:75:db:85:dc:ea:49:3e:58:bc:a0:81:
e9:c3:e1:14:7c:95:17:b6:66:ca:df:08:38:92:29:
08:f2:dc:46:07:04:67:15:60:99:fa:bf:24:9f:87:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:53:D2:CC:92:D2:A8:B9:5D:A4:70:0D:AC:BA:55:FC:05:9E:EE:94
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/SlPSzJLSqLldpHANrLpV_AWe7pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a280::/32
Signature Algorithm: sha256WithRSAEncryption
24:97:96:c8:d2:68:15:a7:b3:f2:7a:ee:83:c9:85:4e:44:14:
1d:e5:1d:60:db:52:c3:76:21:f3:03:29:f4:65:3f:aa:38:93:
35:d1:23:56:17:d0:5b:41:23:2b:16:e5:e5:b3:f1:6d:60:eb:
54:b2:a3:87:4c:3d:39:f3:34:53:2c:e7:c4:a6:5c:2f:1e:f7:
3c:2c:39:33:32:ba:30:0b:ba:9e:89:28:ee:a8:c9:25:a7:ee:
9c:5d:d8:39:4b:24:24:99:8a:aa:d8:47:a0:01:82:1f:e1:23:
7b:d5:19:49:01:9b:19:c6:f7:8e:16:21:a8:56:af:8c:b8:5b:
e2:95:13:48:32:44:40:ff:34:f9:22:99:32:4c:a2:9a:e7:64:
cb:f3:7d:29:f1:62:5e:b1:4f:d2:7b:98:2b:2d:e1:c9:24:2e:
8c:a8:68:26:58:0f:f8:80:5c:94:30:a0:ac:4c:49:f7:01:68:
92:64:3e:68:f6:9e:1d:4b:89:9e:a3:96:c8:10:1f:1f:63:48:
f9:88:81:c0:94:33:47:d6:8d:87:e2:32:55:ae:17:3d:33:58:
b8:0c:ab:73:85:00:8c:01:5f:ab:ac:ef:ac:05:31:ae:3f:fe:
b7:ef:09:5d:0c:3b:62:23:16:b1:17:b1:b0:67:f1:87:24:d0:
72:0f:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:04 2025 by rpki-client