Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/b06bjU-BH5Qs1lSnCdZLssQhUHk.roa
File: b06bjU-BH5Qs1lSnCdZLssQhUHk.roa (raw, json)
Hash identifier: LA7H5ZcO7su/ROcsDuLEVhMzHxqepRgi58H743VMs7k=
Subject key identifier: 6F:4E:9B:8D:4F:81:1F:94:2C:D6:54:A7:09:D6:4B:B2:C4:21:50:79
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EF240D4244AFA466A0B7584C6660E
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/b06bjU-BH5Qs1lSnCdZLssQhUHk.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216368
IP address blocks: 2a0e:aa07:e110::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f2:40:d4:24:4a:fa:46:6a:0b:75:84:c6:66:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f4e9b8d4f811f942cd654a709d64bb2c4215079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:76:9c:40:aa:d6:c0:ce:a1:b8:dd:72:bd:
6d:db:36:15:7a:e3:3d:2e:05:be:ce:77:c4:49:f4:
56:1e:12:34:fe:a9:62:94:e3:3e:02:3b:56:88:46:
23:b4:6e:ea:81:99:b3:02:7c:23:10:68:86:2c:cb:
bf:84:24:db:13:6e:4e:53:7b:a4:b7:17:5b:11:3b:
57:56:7a:36:09:93:78:f8:83:be:2d:9a:11:69:1c:
cc:0e:cf:98:5a:cc:ed:cc:a3:1d:78:c9:e5:2b:a4:
d5:78:5e:b0:20:aa:4a:0f:cb:7e:5a:60:12:cf:96:
92:b8:86:2d:51:24:94:ce:ea:61:a2:7a:02:dc:e9:
33:9b:fe:0d:6c:fd:c5:91:83:bd:5f:3a:ff:35:9c:
aa:39:c2:3e:4a:30:4d:27:27:84:e2:5a:d4:6f:6d:
b2:e3:ce:dc:43:07:0d:41:2f:0b:4d:df:04:aa:08:
93:77:49:89:71:af:3c:2b:ec:e9:fd:9c:a5:03:a2:
7c:f9:cb:2a:0d:08:9c:47:ad:1c:8d:db:47:d4:d1:
6f:69:6d:82:17:38:65:23:dc:83:37:e5:49:94:9b:
a3:77:0f:a5:ac:07:bd:4d:14:da:0a:bd:77:76:68:
fe:57:fe:3d:8b:de:6c:5c:f2:8f:39:72:33:1c:16:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4E:9B:8D:4F:81:1F:94:2C:D6:54:A7:09:D6:4B:B2:C4:21:50:79
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/b06bjU-BH5Qs1lSnCdZLssQhUHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e110::/44
Signature Algorithm: sha256WithRSAEncryption
32:ce:4d:bb:02:5e:6d:fe:e5:73:a4:f9:b2:63:f8:1e:6e:fc:
fb:d5:1f:51:11:ac:9b:80:71:02:a8:9a:ee:57:ba:08:fb:bb:
94:1d:2d:08:49:af:bc:38:12:7a:63:b4:95:c0:4f:c7:49:0c:
28:24:15:2b:e8:e1:d4:c8:79:b4:32:af:78:cf:23:1b:99:c4:
c7:91:22:cf:63:1b:dc:88:3a:51:da:9d:0d:1e:67:90:a3:3c:
6c:9a:8d:7f:02:b2:6e:5c:fe:1c:e8:4b:77:f7:cc:ff:2e:0b:
9d:46:96:87:44:a8:13:16:31:bc:a0:85:7c:ab:64:f1:21:08:
cc:d9:8b:8b:1e:c9:1f:90:1b:0c:e9:b9:e8:cf:fb:b4:56:e9:
e0:35:80:3e:24:e2:0e:43:6f:00:14:5b:bc:41:c4:0b:e0:e4:
74:63:75:b4:de:e2:16:34:80:5f:c0:b4:5d:21:dd:6c:ec:5b:
b9:8c:ab:f3:0c:2d:ba:8a:fb:7b:b8:4b:46:a5:2c:4a:d2:8d:
f2:88:32:c7:f7:de:49:d5:4f:ad:21:ce:ae:97:ce:a2:96:e5:
52:64:ac:a8:51:38:f9:83:ef:7f:f6:b0:b0:b2:e8:87:9d:cc:
8c:66:bc:6b:38:8a:32:e6:61:90:5e:e9:18:9b:08:4a:e0:ae:
b9:4b:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:12:44 2025 by rpki-client