Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BjUAlonCB1CjmbTY52apZdHRGFk.roa
File: BjUAlonCB1CjmbTY52apZdHRGFk.roa (raw, json)
Hash identifier: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=
Subject key identifier: 06:35:00:96:89:C2:07:50:A3:99:B4:D8:E7:66:A9:65:D1:D1:18:59
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426D9FB6DE82F198B422AA1EADA9E0B57
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BjUAlonCB1CjmbTY52apZdHRGFk.roa
Signing time: Thu 02 Jan 2025 11:50:07 +0000
ROA not before: Thu 02 Jan 2025 11:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25560
IP address blocks: 2a03:f85::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:fb:6d:e8:2f:19:8b:42:2a:a1:ea:da:9e:0b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0635009689c20750a399b4d8e766a965d1d11859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:64:13:11:52:25:c7:4e:3f:c0:95:c7:50:
aa:3d:11:06:ad:9d:c3:43:32:a6:fb:c9:03:d7:9b:
58:c0:6a:5b:22:32:10:cb:04:9c:0b:a7:1f:ff:fe:
82:4f:b1:38:f2:03:7a:4e:a7:d4:ef:23:a7:96:2c:
a8:0d:d6:fc:90:cc:66:ae:00:06:84:ef:9e:04:b1:
2e:31:d2:4d:77:cc:e7:dc:f4:b9:d9:48:98:52:53:
b1:bc:8a:97:bc:e5:84:19:71:31:17:bd:6a:04:b8:
b4:ce:e7:1b:7c:25:f3:ff:45:a2:ac:29:1b:d1:47:
0c:b0:ee:fe:ff:f7:07:06:22:5c:b4:59:aa:c8:bf:
10:93:05:70:88:63:17:5c:c1:2e:78:de:ab:1e:19:
89:6c:68:d6:c7:f0:1a:c6:94:c5:7c:b1:27:20:69:
ae:a3:d9:93:8b:6b:71:d6:7e:fe:5f:77:a9:6a:47:
8b:db:c2:88:94:6a:74:e2:17:71:9a:d4:a7:7b:20:
9a:3e:5b:62:2f:2d:91:19:a5:fd:f8:2a:5d:69:79:
02:dd:77:3a:e7:c2:56:5d:e9:83:58:5c:6e:22:c9:
77:70:c8:24:ef:f1:e6:13:e9:b0:45:86:4e:79:2e:
6d:d0:5f:cb:44:70:85:f3:ad:d4:c4:59:13:ac:9e:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:35:00:96:89:C2:07:50:A3:99:B4:D8:E7:66:A9:65:D1:D1:18:59
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BjUAlonCB1CjmbTY52apZdHRGFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f85::/48
Signature Algorithm: sha256WithRSAEncryption
19:12:1b:37:bb:a2:1d:41:34:e9:ea:85:48:6a:c6:c6:3f:97:
8b:87:b9:7c:a8:55:72:9c:a1:6d:7f:7b:cf:a5:7e:3e:2e:72:
42:8c:17:c7:be:17:1b:29:0e:f9:74:0d:62:53:0c:bf:f5:e2:
dc:ef:8a:d0:c7:47:61:df:37:6d:de:a2:be:fb:89:c8:21:b0:
c4:87:9e:92:73:68:85:d7:c8:0e:6b:cb:ba:a3:07:a6:19:7f:
fb:64:6d:fd:3b:b6:b1:dd:2b:9a:ee:3a:ef:dc:2a:e8:68:8c:
c9:f1:76:9b:e3:7c:5f:1f:92:54:79:3e:b5:f5:f1:5d:9b:7f:
cc:66:74:8f:2b:5f:83:ea:2a:fc:7d:b1:09:80:4b:2c:78:0c:
d1:d7:3b:95:63:24:ae:0d:34:82:80:75:99:ec:1f:ff:4a:ee:
cb:02:35:c4:66:92:b7:39:e3:99:ad:43:03:cd:49:74:ba:7c:
f2:d8:1b:9e:00:c4:66:eb:57:ed:ce:ea:05:cb:e9:ac:11:34:
c3:82:42:c1:74:93:77:96:a4:15:47:e9:56:a7:63:88:1e:77:
76:56:4b:69:f3:c6:4e:50:24:8d:0e:eb:87:7c:2e:15:b9:67:
dd:13:c5:a8:dd:1f:96:76:4b:3a:3e:12:6b:08:68:d9:56:03:
71:fd:ae:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:48 2025 by rpki-client