Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/BjqTHtTtBtZx2Y5CozNWD3CEBt0.roa
File: BjqTHtTtBtZx2Y5CozNWD3CEBt0.roa (raw, json)
Hash identifier: eW/XcbSH0tDYIAlNaQxhj837cfdUxkfKds65F/54mgM=
Subject key identifier: 06:3A:93:1E:D4:ED:06:D6:71:D9:8E:42:A3:33:56:0F:70:84:06:DD
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0196459CDE057DB49474CF72FC2F52FA060B
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/BjqTHtTtBtZx2Y5CozNWD3CEBt0.roa
Signing time: Thu 17 Apr 2025 21:17:10 +0000
ROA not before: Thu 17 Apr 2025 21:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213911
IP address blocks: 2a0d:d940:17::/48 maxlen: 48
2a0d:d940:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:9c:de:05:7d:b4:94:74:cf:72:fc:2f:52:fa:06:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Apr 17 21:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=063a931ed4ed06d671d98e42a333560f708406dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:c3:a6:1f:c4:dc:40:8a:54:7b:92:d0:bc:
bb:47:d1:0c:2d:06:14:2f:7d:be:ee:36:0b:59:14:
af:a9:16:55:3c:c0:45:6d:83:13:5e:48:a1:f5:66:
ab:d7:f6:6b:cb:9e:50:ee:fe:9b:2e:d1:d6:b3:2d:
b0:62:3d:f8:df:45:59:45:52:54:01:cf:d0:1f:5e:
d5:ef:9c:95:52:d2:54:f0:a1:76:90:b4:eb:4e:a7:
c1:05:e6:c9:5c:84:b2:fe:ad:57:e3:42:65:fc:16:
67:a3:05:1e:e9:d1:3a:42:4d:b3:07:ca:f9:64:8b:
d4:3e:11:02:be:d8:3e:f0:26:e7:4c:79:67:bb:c8:
5c:2d:b2:bd:2b:6d:4f:1d:d3:45:c3:c2:30:c3:85:
de:1b:af:62:8f:b1:6b:bc:a6:8e:b8:d4:f2:e4:93:
1a:3a:e9:00:ff:57:52:0e:89:cf:13:6d:a4:c5:49:
5c:7b:0c:ef:18:38:62:d4:67:d0:7d:15:a7:8a:d3:
0e:5f:e9:da:77:91:0e:b1:68:6e:6c:f2:3e:10:b7:
f3:3e:fd:f3:70:af:79:f2:1e:97:1e:a8:35:7c:e7:
34:7b:5d:d0:85:c2:2a:48:17:2d:7d:fd:4d:18:41:
c0:96:fb:e7:8e:b2:32:6f:59:b6:66:17:3d:75:f2:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3A:93:1E:D4:ED:06:D6:71:D9:8E:42:A3:33:56:0F:70:84:06:DD
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/BjqTHtTtBtZx2Y5CozNWD3CEBt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:17::/48
2a0d:d940:200::/48
Signature Algorithm: sha256WithRSAEncryption
35:70:ea:26:5f:84:37:6e:69:f5:13:a2:91:ff:72:f7:f5:b3:
ef:ba:0d:87:a4:76:19:7b:34:4e:ee:03:b5:f5:0f:50:2f:54:
50:e0:d7:d9:94:71:d7:1d:1f:2a:12:93:c4:87:bc:3e:14:a3:
d1:43:ef:16:8d:5d:86:ac:e2:ca:f2:9a:6c:fe:75:04:7f:2d:
03:57:7a:b5:69:af:bc:bd:61:83:31:d4:17:aa:d4:be:ea:f1:
69:f6:81:34:42:fb:74:42:6f:e4:31:6b:a7:75:cc:87:55:eb:
ae:02:50:cf:ec:90:ea:ce:4a:22:d6:19:f9:8e:be:0a:8d:98:
c0:5d:aa:a6:d7:6c:74:6b:f0:5b:04:f8:5f:f8:d6:db:9c:17:
1c:5b:44:25:b0:a6:47:d2:36:2c:29:c6:ee:17:b2:eb:e6:54:
2c:f8:01:90:93:ff:20:c5:d8:86:6b:3e:a9:45:c7:ed:bb:c2:
b0:0c:2c:46:77:3f:63:82:b5:d5:df:89:5c:c8:19:fe:5b:cf:
51:93:3d:f1:a9:65:79:79:df:6b:43:88:b7:4a:52:9f:37:b9:
bf:e2:3c:9e:85:be:e1:3b:4d:f6:71:cc:62:e9:39:43:43:fd:
33:09:67:bb:6a:a9:42:fd:1f:82:eb:e5:39:53:8d:c5:54:7a:
d3:b7:39:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:37:57 2025 by rpki-client