Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/LxU6tlx0NvY-QjdCp11SSrIBGxQ.roa
File: LxU6tlx0NvY-QjdCp11SSrIBGxQ.roa (raw, json)
Hash identifier: 4y0W42qWUeJANjUJDiVjV2lnQQegZOOleaVcw17TyRw=
Subject key identifier: 2F:15:3A:B6:5C:74:36:F6:3E:42:37:42:A7:5D:52:4A:B2:01:1B:14
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 01979D0BC37CFAA85326677CFB9A8F86E9B6
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/LxU6tlx0NvY-QjdCp11SSrIBGxQ.roa
Signing time: Mon 23 Jun 2025 13:48:03 +0000
ROA not before: Mon 23 Jun 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 2a10:b5c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:0b:c3:7c:fa:a8:53:26:67:7c:fb:9a:8f:86:e9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Jun 23 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f153ab65c7436f63e423742a75d524ab2011b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:6e:ee:9f:77:42:78:50:da:6b:9e:5f:fe:
b6:40:12:41:8a:b7:dc:3f:9c:23:6e:21:ad:cc:09:
72:c8:40:19:44:25:27:3a:75:d2:4b:4f:f3:f1:af:
78:81:11:e6:0c:d2:07:30:5a:34:c9:46:af:c2:ce:
b7:f8:7a:94:85:6a:26:60:39:7e:c5:36:1d:8c:20:
8c:b4:94:af:3f:8a:9c:2f:37:94:71:44:cb:da:24:
18:a2:3e:b2:6b:7f:48:e0:20:86:02:0f:57:97:97:
fa:06:e7:25:8e:0b:56:85:4e:05:49:83:e2:18:15:
d4:ca:7f:85:63:ca:63:0e:70:ff:f1:c9:c8:e5:8a:
e5:55:e7:3d:c8:3b:f8:98:dd:a9:c6:96:1c:2b:db:
5c:17:3e:b7:d4:7f:02:80:f6:6a:47:fa:70:06:73:
a6:a2:47:d3:15:fc:68:a6:ac:7b:0f:a1:29:97:b7:
a6:cc:26:f0:58:09:7c:ac:1f:bf:b1:82:0f:f1:38:
f3:f0:b3:06:b0:e5:86:71:d0:73:48:96:d4:b1:d3:
31:6c:65:07:f2:a3:c3:02:6b:ce:7f:ab:5b:90:6d:
62:0b:a2:ae:80:07:d5:2d:22:92:2e:76:5d:8b:ec:
98:3b:d6:93:b1:40:2f:79:c9:ff:45:f1:6f:cd:48:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:15:3A:B6:5C:74:36:F6:3E:42:37:42:A7:5D:52:4A:B2:01:1B:14
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/LxU6tlx0NvY-QjdCp11SSrIBGxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:b5c1::/32
Signature Algorithm: sha256WithRSAEncryption
46:ea:1b:10:e4:32:74:0d:d3:23:6d:08:e5:7f:d9:d5:30:e8:
18:31:4a:b7:f6:93:44:65:b7:32:af:5f:80:8b:1d:93:64:b8:
9d:f1:23:79:9e:a2:63:3e:17:c6:87:42:5e:b2:21:a3:42:15:
33:8e:67:bc:75:dc:cc:35:7d:c6:2f:39:55:0a:25:6f:64:e9:
d9:9b:29:cd:98:e4:3b:c1:10:11:54:e7:2f:b5:8b:3a:84:55:
87:2e:cd:dc:4c:ec:cf:21:04:ef:9b:b7:fd:7c:69:c9:a4:86:
9d:69:ca:1b:00:33:6f:3b:3f:59:1c:67:e8:6f:5b:6a:7a:64:
4e:ab:4e:93:11:1e:33:a3:20:c6:08:0c:84:5a:2f:a0:0e:ba:
ad:36:11:52:bb:0c:f1:d0:91:59:7b:11:1e:11:b7:a8:54:62:
bc:c1:f4:95:91:9f:76:35:6b:c9:03:06:e0:2f:71:4c:fd:8e:
87:3a:be:01:68:f2:63:37:f4:a0:d3:d8:10:b5:f3:29:ac:45:
eb:09:c6:68:99:af:4b:d5:20:5b:15:02:b9:48:d4:d8:52:6d:
a5:c3:67:6f:03:b1:99:83:45:22:1a:81:66:c1:85:46:15:9d:
6a:17:fe:c6:47:f2:5a:92:17:65:25:af:93:cb:16:ec:35:bc:
06:56:fe:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:29:14 2025 by rpki-client