Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/BSK1K69J3TkTyBl6IbpBE-cZifE.roa
File: BSK1K69J3TkTyBl6IbpBE-cZifE.roa (raw, json)
Hash identifier: l0XJM88UXO7kvswhcnsVGiFK9WZcVumCwivqOuFibGk=
Subject key identifier: 05:22:B5:2B:AF:49:DD:39:13:C8:19:7A:21:BA:41:13:E7:19:89:F1
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B675DBB9D209F13BDBFEA9B4AD651F
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/BSK1K69J3TkTyBl6IbpBE-cZifE.roa
Signing time: Thu 02 Jan 2025 15:50:56 +0000
ROA not before: Thu 02 Jan 2025 15:50:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7545
IP address blocks: 2a02:26f0:700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:75:db:b9:d2:09:f1:3b:db:fe:a9:b4:ad:65:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0522b52baf49dd3913c8197a21ba4113e71989f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:bf:59:1c:6b:c1:89:eb:1e:63:35:70:90:
ed:72:ee:b5:1d:1c:c4:ab:57:b4:c4:9c:0b:7f:2c:
60:11:d7:63:2d:a3:14:79:96:da:9f:dc:f5:63:9e:
3d:f2:9b:21:e5:12:2b:6f:44:2e:a6:da:bc:44:3d:
06:7d:48:95:20:04:be:17:50:15:5b:8f:94:20:1f:
66:56:eb:73:25:0d:01:f2:df:78:d0:7f:3d:51:5a:
2b:91:1a:b9:fb:01:3e:0f:db:91:fc:84:91:af:f4:
34:e2:9c:fa:e4:c5:59:4b:9a:ea:8d:71:88:d8:c0:
5b:aa:cf:ba:07:81:c0:af:31:5f:ba:22:54:ee:61:
6d:f6:9d:af:02:a9:50:a6:e5:d8:ed:4a:73:b5:e6:
6e:a1:d2:fd:f1:4b:4b:68:b6:29:94:b4:a3:a2:f0:
a2:88:6c:53:48:bd:4b:99:42:e0:37:b7:f8:9f:e6:
91:3c:87:64:02:94:c7:fe:d9:e9:ce:3c:d7:7d:de:
2d:50:c8:a4:9e:ef:16:21:0e:23:51:fc:3d:b8:42:
cf:20:e6:ab:83:9c:29:84:95:a8:56:d3:30:92:d3:
05:6f:fb:4e:aa:f2:9b:12:4a:1c:4c:2b:9a:fc:db:
cd:15:aa:66:7c:c7:c9:44:80:0b:68:78:63:8b:04:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:B5:2B:AF:49:DD:39:13:C8:19:7A:21:BA:41:13:E7:19:89:F1
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/BSK1K69J3TkTyBl6IbpBE-cZifE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:26f0:700::/48
Signature Algorithm: sha256WithRSAEncryption
a1:74:dc:be:49:79:73:bc:d7:d7:61:17:93:8e:c7:ef:ee:ab:
e3:d7:1b:26:bd:00:d3:92:a3:02:8a:d6:56:14:f3:e6:40:55:
16:0e:6d:93:b2:c6:4b:e8:2b:c0:d1:d5:70:d8:58:87:64:e8:
6c:18:cd:f9:a4:6d:1f:0b:4b:8d:4e:a5:81:8b:b8:6b:84:41:
4a:ff:8f:ec:57:1e:0f:5d:da:62:98:ed:8a:f5:46:86:db:9c:
bc:05:f2:f5:92:dc:f3:b4:88:3f:8d:95:8e:97:2a:00:33:bc:
c5:fa:43:5d:2d:b9:c5:8b:bd:72:55:28:77:25:6a:96:ba:f8:
27:58:ef:5d:ae:6f:b1:97:c8:59:a0:15:b8:ff:f5:c8:d6:25:
7d:71:fe:58:bc:75:44:b3:c7:0e:6b:3d:a6:03:4a:81:2e:ae:
0f:e6:db:b2:5f:74:80:83:fa:fd:bf:d0:1e:70:ca:c5:9e:0c:
b1:ae:9e:91:76:5d:82:75:bc:8d:39:75:71:f4:65:dc:b4:32:
d4:7f:94:0c:0a:13:eb:4e:0d:e3:6d:03:25:5c:5d:b2:af:22:
2e:21:f5:d4:76:db:d1:5c:43:ff:51:98:0f:2e:75:b4:97:e0:
ab:67:dd:fc:f7:1c:bb:b1:c4:98:c5:f0:ad:75:49:cb:ca:2d:
20:3e:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:32:58 2025 by rpki-client