Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/C6g1ONP_vtRLZw5SWoA9vplmgJM.roa
File: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (raw, json)
Hash identifier: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=
Subject key identifier: 0B:A8:35:38:D3:FF:BE:D4:4B:67:0E:52:5A:80:3D:BE:99:66:80:93
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB679381508882720ED75EFDFA6DB5
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/C6g1ONP_vtRLZw5SWoA9vplmgJM.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214576
IP address blocks: 2a0e:4005:1002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:67:93:81:50:88:82:72:0e:d7:5e:fd:fa:6d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ba83538d3ffbed44b670e525a803dbe99668093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6a:99:29:4c:69:9c:13:99:4d:56:51:55:d1:
8a:ab:ad:d3:41:94:00:bd:c6:56:23:4f:9d:e9:69:
84:8c:a7:bb:0d:45:9f:81:0b:1c:28:0f:b2:fd:13:
5b:73:8a:72:66:ac:8b:85:e7:3b:82:ad:d5:7a:dc:
a3:dd:b5:e1:92:a0:2d:4b:e9:be:9d:c2:cf:e2:6e:
41:8d:16:c3:ac:28:6b:b4:49:4c:46:d6:a6:9d:de:
d0:ab:d3:aa:21:73:75:ed:f5:5b:a1:9b:db:4d:63:
dc:29:0a:9b:0e:81:b5:f7:f5:79:1f:11:49:6d:e5:
49:15:89:b0:76:26:77:cb:c2:95:a4:25:2f:1d:79:
64:31:80:f0:1e:23:31:d9:1e:c0:ac:99:99:0a:9f:
f9:8f:0c:09:4b:db:d4:15:35:de:7a:17:bf:21:bc:
8c:b7:39:01:5f:0c:8f:79:dc:46:16:21:0d:e1:9b:
24:8a:7a:8c:54:33:86:ce:f0:87:30:d2:41:f0:5a:
04:a4:4d:e9:5a:ca:c4:61:34:d4:ff:16:87:3b:f5:
2d:2a:8c:f3:d6:74:55:e9:6f:11:9c:3c:93:0e:f1:
4f:d9:df:d5:12:78:b6:8e:dd:74:24:5f:ed:dc:b6:
cc:75:12:28:ab:cf:dd:dd:fa:15:8c:3e:5a:75:d7:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A8:35:38:D3:FF:BE:D4:4B:67:0E:52:5A:80:3D:BE:99:66:80:93
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/C6g1ONP_vtRLZw5SWoA9vplmgJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:1002::/48
Signature Algorithm: sha256WithRSAEncryption
68:50:1e:8d:cc:6c:fa:17:2c:a3:93:49:27:55:af:30:aa:dc:
53:02:f0:ec:56:ea:9c:a1:4d:7b:94:7b:19:99:fe:b3:5c:13:
2c:7b:49:a5:96:b1:54:1a:c2:fd:58:b2:65:c9:fe:ce:07:a7:
3d:80:38:47:fa:2d:b0:61:be:bc:d2:67:41:f1:10:d4:fa:24:
24:a6:62:c6:8c:bb:cd:e7:82:88:3b:ac:9f:b3:91:20:8b:58:
27:4f:75:56:d4:79:e8:76:1a:41:a4:95:a7:ca:7b:94:40:1f:
53:14:8e:07:09:04:19:c4:22:ca:68:2d:3b:27:44:36:ed:6c:
66:49:96:91:3f:4f:52:bd:06:64:c5:84:c8:5a:e4:28:a2:d1:
a5:e2:dc:e4:e7:d5:3d:64:30:42:d3:52:6c:88:ea:17:9c:d1:
a9:9d:f3:13:5a:d8:49:f6:d4:5b:7e:a3:81:71:b9:a9:d6:ce:
43:89:cd:e2:48:46:cf:52:32:2d:30:11:b9:83:63:a5:2f:76:
dd:25:87:f5:c1:27:46:49:ea:1d:51:84:25:dc:03:55:d7:e9:
06:ac:19:a1:b3:06:14:c8:5f:3f:b5:7e:b2:7b:9c:df:5c:8d:
09:b7:3b:f2:99:b0:36:d5:d9:32:3f:95:ed:6c:b1:9a:4c:c4:
4e:69:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:52:15 2025 by rpki-client