Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LmDdBJn6r9uAtl58HOP1ulVDsss.roa
File: LmDdBJn6r9uAtl58HOP1ulVDsss.roa (raw, json)
Hash identifier: Dzq5tdy0LqnfKTo1nhzF6m3SR65aI6Kzq1Cw6GLhKYM=
Subject key identifier: 2E:60:DD:04:99:FA:AF:DB:80:B6:5E:7C:1C:E3:F5:BA:55:43:B2:CB
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0197C1822ACC4C9CB1667FB585B686C90B80
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LmDdBJn6r9uAtl58HOP1ulVDsss.roa
Signing time: Mon 30 Jun 2025 15:43:42 +0000
ROA not before: Mon 30 Jun 2025 15:43:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207530
IP address blocks: 2a12:bec4:1a90::/44 maxlen: 48
2a12:bec4:1a90::/46 maxlen: 46
2a12:bec4:1a94::/46 maxlen: 46
2a12:bec4:1a98::/46 maxlen: 46
2a12:bec4:1a9c::/46 maxlen: 46
2a12:bec4:1b20::/44 maxlen: 48
2a12:bec4:1b20::/45 maxlen: 45
2a12:bec4:1b28::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:82:2a:cc:4c:9c:b1:66:7f:b5:85:b6:86:c9:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 30 15:43:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e60dd0499faafdb80b65e7c1ce3f5ba5543b2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:a2:81:0b:cd:13:11:b8:c8:6d:a5:d4:ea:
36:30:ae:15:e6:31:3f:7e:ac:00:0a:c1:5b:9a:05:
c7:92:f1:46:df:b2:d7:4f:ca:ae:22:0e:6b:59:70:
e5:53:9e:93:a4:15:7c:3a:91:ad:59:d9:93:5d:82:
d3:f8:61:18:91:4f:a6:66:a2:c6:88:ee:29:51:76:
ef:2e:47:f8:03:0d:f5:ea:a2:cd:f3:ba:0c:51:6b:
4e:69:8b:32:fa:f4:75:97:83:84:2e:59:7b:f2:26:
11:4d:12:46:c6:0a:15:43:48:d9:fb:36:a1:13:b2:
b4:15:4f:25:60:e3:66:a9:42:dc:03:4a:75:3e:fe:
a2:76:9c:9b:a1:0c:67:0e:92:26:a1:ec:be:81:d5:
19:52:dd:84:b9:7b:ef:cc:21:f3:b4:a6:bf:f7:a7:
65:6a:8c:c1:59:7f:fa:9c:ac:b1:0c:6e:4b:54:06:
23:83:a5:e6:c7:a2:88:95:1b:19:58:c5:84:d9:85:
70:98:d7:50:fd:a9:a0:c7:16:17:5f:b2:f4:da:58:
0f:05:a6:9d:75:64:c8:7b:d4:d4:6b:cf:ae:24:60:
67:e6:67:de:6a:a8:59:75:a5:9c:c0:05:bb:a1:3a:
10:91:0e:21:51:e4:f3:5d:16:65:23:6a:55:67:87:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:60:DD:04:99:FA:AF:DB:80:B6:5E:7C:1C:E3:F5:BA:55:43:B2:CB
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LmDdBJn6r9uAtl58HOP1ulVDsss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1a90::/44
2a12:bec4:1b20::/44
Signature Algorithm: sha256WithRSAEncryption
90:f1:91:42:24:b4:36:78:b5:8c:05:b7:dd:f2:09:19:bc:c7:
1a:d6:58:a7:44:da:97:01:73:1f:f2:f9:74:e3:dd:f7:8f:4c:
73:91:60:28:08:20:7a:e1:7a:c2:27:ba:0e:37:cb:4f:e1:04:
5c:b6:fc:d5:47:e5:41:54:06:5f:5d:2c:72:bb:fb:a1:be:d6:
19:bc:1d:a8:7c:66:97:a8:e2:2d:69:2e:cd:f6:b4:1a:81:16:
94:56:d0:42:e2:ea:9b:c7:7f:3d:92:07:1f:89:6c:3c:7a:44:
b6:62:73:bc:3f:38:98:33:e6:8a:65:4b:dc:0e:b9:4d:03:ce:
d3:dd:24:4a:59:ad:83:7b:a3:3e:59:be:72:59:e7:f0:95:b7:
87:6a:17:41:bf:c0:46:d7:4d:3b:1f:ba:a4:31:07:31:c4:bc:
5f:bd:23:ff:4b:d4:75:e3:a5:f7:41:46:84:8a:97:5c:d7:b6:
7c:ba:2d:e4:81:ff:64:e0:91:d8:fa:e7:8e:08:c2:f1:df:91:
f0:9d:58:f6:ad:9c:c6:03:27:d1:09:8c:24:84:d6:ec:8f:0e:
8b:59:c9:29:1d:a7:e7:32:89:e8:c5:5a:ac:99:de:60:49:64:
74:39:03:92:f2:49:86:0f:95:f4:64:0a:42:a8:b6:b1:ec:ef:
7a:97:5f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:59:18 2025 by rpki-client