Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/D_H0PSB3aOn6eEyxWJYYONlxkIU.roa
File: D_H0PSB3aOn6eEyxWJYYONlxkIU.roa (raw, json)
Hash identifier: G2fg1d0EHADuXIvJb596AGd38xjwuKGkimroCPXyu6A=
Subject key identifier: 0F:F1:F4:3D:20:77:68:E9:FA:78:4C:B1:58:96:18:38:D9:71:90:85
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0196433ECBF78592BCB4E965057FFC61C8DF
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/D_H0PSB3aOn6eEyxWJYYONlxkIU.roa
Signing time: Thu 17 Apr 2025 10:15:10 +0000
ROA not before: Thu 17 Apr 2025 10:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 2a13:ba83::/32 maxlen: 32
2a13:ba87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:3e:cb:f7:85:92:bc:b4:e9:65:05:7f:fc:61:c8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Apr 17 10:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ff1f43d207768e9fa784cb158961838d9719085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:48:25:e6:60:a4:76:34:a4:23:45:33:65:
14:a8:f5:92:db:c8:d8:aa:35:aa:67:87:a2:26:9f:
3e:35:52:c8:46:80:12:e2:b9:b5:07:7a:65:d2:b3:
95:30:7e:d6:ac:52:0c:a8:ef:f2:be:42:29:df:13:
e6:1a:92:22:9d:d3:32:92:81:78:53:aa:c5:4b:e5:
1e:63:8d:6a:82:ca:a6:3c:d7:b4:d5:47:cf:b7:56:
eb:59:7d:29:26:d3:51:8a:db:13:81:4e:80:cd:10:
5e:5a:0d:fe:ee:fa:f5:86:b9:6d:c1:07:89:0c:98:
6b:20:4d:11:73:a0:5e:43:c9:21:df:fa:ea:89:0a:
51:9f:44:27:db:4b:e0:dc:8a:09:bf:16:12:2a:7a:
b5:02:a0:85:c8:c2:84:9d:4a:8e:4e:68:06:5c:82:
a5:de:3a:3c:0a:49:64:9b:34:89:7f:e1:55:bc:7d:
48:21:b3:e1:6f:f1:fa:2d:cb:e3:35:5a:b6:cd:91:
5e:4f:82:26:d4:b8:53:fe:1e:d7:0d:b8:e2:a4:63:
f2:3f:55:32:cc:74:8c:01:d3:a4:6f:be:61:70:54:
c5:01:25:a1:4b:6d:c2:a7:a7:b3:c8:80:74:0a:d2:
c2:e1:ab:59:73:01:07:75:23:df:0c:1d:6f:2c:fe:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:F4:3D:20:77:68:E9:FA:78:4C:B1:58:96:18:38:D9:71:90:85
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/D_H0PSB3aOn6eEyxWJYYONlxkIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ba83::/32
2a13:ba87::/32
Signature Algorithm: sha256WithRSAEncryption
6e:78:41:7f:a6:12:00:58:7d:9e:55:ef:e3:0f:18:f2:5f:b6:
5c:a9:91:c2:65:3a:3d:a9:3d:55:f5:08:98:9e:08:36:08:14:
be:65:8a:61:50:53:bd:eb:e3:e6:c4:6c:ca:79:6b:f9:65:24:
e5:2a:cd:de:c9:80:36:a7:7a:75:61:35:1c:68:15:1c:71:6c:
d7:ec:ff:73:a5:0e:ca:ec:bb:cd:7a:b1:2a:2c:fa:3d:03:a6:
23:a1:c3:fe:07:63:1a:ff:5b:51:f3:9b:01:4a:72:40:df:74:
be:80:e4:59:c8:8a:fb:dd:13:9f:fd:de:80:ff:3a:3f:10:52:
f0:ce:96:bd:8b:25:b0:67:25:b5:39:70:05:c0:80:e0:c8:7c:
3e:da:f2:35:3a:d3:8e:c5:73:20:e1:a3:9e:75:f5:7d:d3:8f:
05:15:76:22:14:9c:f7:57:38:6c:7d:6b:64:90:e7:d7:c9:a1:
f8:dd:bc:bc:42:d3:d4:39:d9:06:13:03:4c:f1:e4:24:20:c5:
bb:7d:85:b3:e0:c2:4d:75:0c:9a:66:fe:eb:0f:02:b5:38:47:
8d:84:be:9f:81:ee:88:1f:c3:5b:c3:5a:6b:6b:a9:c2:16:cf:
ca:a8:9d:a7:2f:26:ac:01:26:00:a8:a3:42:61:9c:72:a5:ed:
58:74:21:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:19:36 2025 by rpki-client