Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/bXnDK3FrjmreLx1RNLHjlK6yokA.roa
File: bXnDK3FrjmreLx1RNLHjlK6yokA.roa (raw, json)
Hash identifier: 9KnhQYqvA+XwDxuEoTB3PjhKHhHecpLOEmyBwf4FrSA=
Subject key identifier: 6D:79:C3:2B:71:6B:8E:6A:DE:2F:1D:51:34:B1:E3:94:AE:B2:A2:40
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 01942747C32A1FA60C028C3F88E9B582AA77
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/bXnDK3FrjmreLx1RNLHjlK6yokA.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a02:3040:43:ff00::/56 maxlen: 56
2a02:3040:4d::/48 maxlen: 48
2a02:3040:4e::/48 maxlen: 48
2a02:3040:4f::/50 maxlen: 50
2a02:3040:4f:8000::/50 maxlen: 50
2a02:3040:4f:c000::/50 maxlen: 50
2a02:3040:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c3:2a:1f:a6:0c:02:8c:3f:88:e9:b5:82:aa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d79c32b716b8e6ade2f1d5134b1e394aeb2a240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:67:4e:0c:bc:e1:e8:75:5e:53:f9:9a:98:
b0:30:ee:ba:7b:d7:ce:2c:91:09:b9:d1:a3:75:35:
85:f5:02:8a:50:95:93:ea:94:53:8d:9c:95:5d:b2:
20:52:73:38:6f:98:38:c1:a5:f4:70:ae:0c:19:f9:
e8:e8:c7:11:4f:46:88:32:00:3a:64:8f:d5:63:e3:
52:d7:a3:d4:2e:f3:01:f2:6e:46:51:e9:24:fb:9c:
51:f0:24:26:fc:88:60:e5:41:65:cf:5d:24:5e:4d:
6b:55:4c:d9:9e:c8:5b:f8:cd:f1:f2:46:21:43:c9:
48:fc:9a:b8:3e:19:e8:55:45:83:4f:38:0b:27:af:
52:be:36:f2:34:aa:8f:84:78:38:14:49:40:1e:b4:
60:8a:9a:b5:75:b0:28:ca:b2:18:75:08:b1:f2:fa:
c0:f1:7b:80:1b:03:39:e2:98:af:ce:25:26:51:5b:
2c:34:93:ff:d7:95:b2:96:ce:d6:9c:81:25:a9:a7:
b2:24:94:ec:4d:83:03:3d:a8:4d:00:c5:dc:1d:cc:
06:65:0f:cc:dd:df:63:7e:0e:7b:ca:f2:b9:8f:d5:
a7:11:3f:25:56:ab:41:72:6c:2f:89:8e:26:7f:e8:
9b:b0:5b:0a:da:a7:fd:16:ac:6e:11:ad:df:57:73:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:79:C3:2B:71:6B:8E:6A:DE:2F:1D:51:34:B1:E3:94:AE:B2:A2:40
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/bXnDK3FrjmreLx1RNLHjlK6yokA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:3040:43:ff00::/56
2a02:3040:4d::-2a02:3040:4f:3fff:ffff:ffff:ffff:ffff
2a02:3040:4f:8000::-2a02:3040:50:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:28:5a:f3:80:77:25:d7:b3:9d:76:f8:69:ba:98:c2:b2:22:
31:60:03:9a:94:50:18:c0:bf:c0:a5:69:7d:a9:87:f0:e7:9f:
eb:8e:fd:00:01:ac:e7:ca:a6:dd:64:0f:a9:ad:5d:59:6d:73:
c3:6a:34:15:17:11:e2:ac:71:e4:b0:82:7a:03:a8:92:eb:ac:
05:f8:7b:c7:bc:70:8d:8c:ed:8a:f6:ff:0c:0c:49:a6:d4:31:
f5:ac:e0:d7:e7:fa:2c:2b:49:d8:e2:59:bf:3f:2e:c7:90:d9:
05:47:dc:a5:14:2e:9b:68:b1:ba:c7:a5:88:04:58:f5:ad:1e:
fb:48:07:63:5c:27:2b:d0:4e:ae:2e:be:92:b6:eb:4a:75:65:
4f:e0:1b:dc:6b:32:de:42:0d:a8:56:ed:1e:ca:57:63:87:48:
19:86:21:9a:f3:85:2f:3e:7d:44:a8:74:0d:c0:58:8a:72:d2:
21:a0:cb:a5:81:2a:10:41:50:9d:90:a4:35:b6:ab:2a:4b:93:
99:b8:c6:59:60:f8:6d:82:5c:78:1c:fc:4f:bf:e4:52:21:9c:
bc:a9:e5:00:68:66:6f:48:dd:4a:4e:f3:26:7e:96:56:a1:05:
ef:f1:62:80:a0:65:69:be:6f:fe:e6:0d:f7:1e:d7:a3:cd:21:
f8:cc:fa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:03 2025 by rpki-client