Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/5nNDQu4_gAfVvBH40kcs1z_TMFk.roa
File: 5nNDQu4_gAfVvBH40kcs1z_TMFk.roa (raw, json)
Hash identifier: AJ166bpC2OZYT+dllTVPy8ffMLqjuUEZOsg/KZ13944=
Subject key identifier: E6:73:43:42:EE:3F:80:07:D5:BC:11:F8:D2:47:2C:D7:3F:D3:30:59
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0196A172436E91F6E240750710855590C584
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/5nNDQu4_gAfVvBH40kcs1z_TMFk.roa
Signing time: Mon 05 May 2025 17:15:42 +0000
ROA not before: Mon 05 May 2025 17:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44050
IP address blocks: 2a0d:1ac3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:72:43:6e:91:f6:e2:40:75:07:10:85:55:90:c5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: May 5 17:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6734342ee3f8007d5bc11f8d2472cd73fd33059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:c0:a3:5c:77:7c:e7:8e:1f:a0:4a:2c:11:
96:9c:9e:87:3e:c8:6d:35:83:fc:29:d3:37:5e:88:
bd:80:f3:c4:ce:f7:2c:f5:46:22:5c:3d:b4:d0:b1:
a9:d9:02:3a:8d:39:2a:84:18:dd:9d:bf:cc:be:76:
92:f0:1c:7c:1f:a8:07:3e:c1:51:ea:5f:43:c1:58:
18:df:5d:fa:f1:f3:16:63:f3:32:02:9c:34:c7:61:
16:8a:2e:9d:ec:d7:7c:e9:87:e8:9c:18:fe:93:81:
fd:8e:bb:6d:47:99:98:ca:ac:ba:f7:04:10:95:5e:
39:32:0a:b1:bb:4e:43:53:cc:c0:3e:ed:83:93:32:
47:47:ee:cf:88:2b:85:cb:57:3f:d6:ed:46:63:73:
3b:29:35:30:4d:d8:6b:5a:8d:a6:73:42:d8:e3:01:
25:f8:98:4b:9e:5a:22:bc:16:91:02:f6:09:47:93:
8b:40:bf:ce:bb:a9:02:91:83:4f:8d:d4:d2:29:dc:
4d:24:7b:3e:0f:61:46:bc:37:0f:0f:ec:a8:4a:4b:
51:1e:fe:e2:29:ad:f5:40:3f:8f:46:fa:da:36:5c:
b3:2d:35:44:9f:83:30:47:31:b0:50:7d:9f:bc:95:
38:d5:36:d2:a2:60:06:21:9d:f1:a7:ac:49:e4:3f:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:73:43:42:EE:3F:80:07:D5:BC:11:F8:D2:47:2C:D7:3F:D3:30:59
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/5nNDQu4_gAfVvBH40kcs1z_TMFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1ac3::/32
Signature Algorithm: sha256WithRSAEncryption
6d:9b:49:28:4c:67:88:b0:65:98:02:d1:c8:aa:d7:84:55:79:
c0:3d:29:8c:24:d5:a9:d1:52:a8:01:a4:53:b8:07:71:f9:ec:
30:85:6a:76:25:87:09:57:de:cb:19:84:a0:09:3d:45:de:c0:
f3:60:8a:6c:ef:e4:4d:37:9f:92:db:2e:4e:0d:23:1d:91:ba:
a7:14:9c:9d:b2:92:64:6c:34:a9:80:9a:a8:6c:ab:3b:2b:04:
2e:d8:65:56:8e:66:6c:eb:7e:0f:e9:62:71:43:da:7f:e5:94:
ee:4a:b0:f5:03:90:17:9d:44:e7:bb:c4:c4:80:68:a0:12:7c:
3d:8b:24:99:0d:65:10:9f:e7:70:e7:c6:05:e1:ad:e2:29:1d:
c0:ed:79:fa:6d:73:dc:3e:34:f5:be:05:81:c0:da:62:f9:92:
87:65:c1:3f:fd:0d:62:a2:e0:85:42:71:0b:c0:8c:b3:61:64:
8d:ae:20:2a:d1:97:77:da:a8:1b:43:c9:e9:91:75:93:08:14:
82:3a:75:4e:1e:79:f6:2e:09:ad:4d:3d:57:96:5d:35:4e:a6:
ed:9e:2f:87:fe:8f:36:b4:a5:d5:4f:d9:36:45:9e:f2:56:2b:
d7:c6:64:bc:50:7a:06:29:06:62:e4:5b:c7:44:29:d8:27:42:
2a:0c:3b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:01:49 2025 by rpki-client