Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/DW8SHbVlL8Myb-p7QtpBtdE4Fug.roa
File: DW8SHbVlL8Myb-p7QtpBtdE4Fug.roa (raw, json)
Hash identifier: yUyTh7meErNXbMRoAKGZB1yTrhp9xLOBqyMiqtl/XxA=
Subject key identifier: 0D:6F:12:1D:B5:65:2F:C3:32:6F:EA:7B:42:DA:41:B5:D1:38:16:E8
Certificate issuer: /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial: 01942143C43243F3D98D8A908C7F5A66D475
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/DW8SHbVlL8Myb-p7QtpBtdE4Fug.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134521
IP address blocks: 2a05:e580:fa00::/40 maxlen: 40
2a05:e580:fb00::/40 maxlen: 40
2a05:e580:fc00::/40 maxlen: 40
2a05:e580:fd00::/40 maxlen: 40
2a05:e580:fe00::/40 maxlen: 40
2a05:e580:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c4:32:43:f3:d9:8d:8a:90:8c:7f:5a:66:d4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d6f121db5652fc3326fea7b42da41b5d13816e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:6c:46:ba:21:a8:6e:de:04:f6:6c:ab:9f:
d9:8a:6d:e1:b1:78:cc:8d:e1:fe:f7:05:ec:39:a8:
f1:df:5b:28:e0:86:5e:e7:34:85:d0:1d:f1:19:a5:
8d:90:bf:99:13:e8:91:30:06:f3:39:a0:54:0a:66:
11:81:42:3f:d5:d1:fe:a0:b1:97:76:31:68:76:a6:
2d:ff:be:55:89:7e:e0:26:d5:02:c4:6e:7b:4d:02:
2b:41:b1:63:70:a2:21:b0:b1:59:e0:a7:27:be:27:
02:4b:bb:91:7b:35:9a:1c:14:34:db:1b:fb:78:1f:
55:91:87:43:d2:a0:5f:fd:27:8e:5b:99:66:2a:51:
19:60:e4:1f:82:66:df:34:f9:d9:3c:8d:91:02:05:
44:e6:b7:67:a6:c3:4c:bb:36:d6:05:77:b9:2e:e8:
db:9b:16:5d:50:01:f6:31:3a:70:82:18:ba:1c:e6:
c4:df:48:aa:7c:5c:7c:46:c7:e7:48:b6:94:bf:c3:
b7:aa:a4:bd:a1:94:ca:53:28:de:4a:2a:41:c7:a0:
af:45:3d:ea:f9:f1:12:67:16:ee:76:4b:15:55:c5:
74:2e:bc:6f:0f:4b:f8:0c:fb:07:27:b8:f0:01:47:
db:e5:16:57:56:e1:b0:2b:46:fe:a0:be:7c:6e:dc:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:12:1D:B5:65:2F:C3:32:6F:EA:7B:42:DA:41:B5:D1:38:16:E8
X509v3 Authority Key Identifier:
keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/DW8SHbVlL8Myb-p7QtpBtdE4Fug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e580:fa00::-2a05:e580:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4a:b4:44:b5:c5:8d:52:52:8d:da:fc:8a:87:49:ec:5b:b0:59:
bd:3a:4a:53:3c:d7:d3:d8:86:1d:0d:c9:95:39:f2:fd:24:1b:
cf:de:60:25:a2:39:17:43:58:0c:11:6d:5c:6f:12:71:0a:cc:
96:77:3e:5b:3e:a9:40:34:5b:1c:6b:04:bc:9d:66:55:8a:65:
9a:06:10:68:c8:d7:18:2a:28:c1:4d:d4:e7:34:69:74:17:58:
d1:b5:0f:af:06:72:24:42:23:a4:a1:15:c7:99:db:14:c5:d8:
ba:6f:61:c7:1a:82:c6:12:5a:e7:b6:bd:b4:3e:10:e1:4b:a1:
f0:c0:f1:5d:d5:4f:7b:2f:95:7b:a7:e6:c4:a3:8a:21:77:4d:
43:d9:6b:2d:15:b9:16:b6:e4:0a:10:09:2c:01:e4:e0:90:2b:
50:44:2d:a7:60:1e:f8:dc:00:3d:07:d2:79:fe:9f:be:ac:de:
b6:fd:9e:08:a5:56:60:ef:9c:cf:da:a1:24:84:e6:73:9b:c1:
90:f2:2a:28:a5:57:79:73:13:2b:45:4e:c5:55:94:e6:b5:68:
36:47:0a:d4:87:36:f4:bd:be:d4:47:1d:99:ce:63:8c:80:60:
ef:69:3e:2f:9a:bc:2a:18:70:54:a1:b4:21:27:22:00:47:79:
a6:73:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:16:44 2025 by rpki-client