Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/b5W9tj1kPXvhGs7OG-junuOb_F0.roa
File: b5W9tj1kPXvhGs7OG-junuOb_F0.roa (raw, json)
Hash identifier: nDJ2R6E+EsutyeZWXaIBCtwaoyXGXSKNoY0kUTvcg54=
Subject key identifier: 6F:95:BD:B6:3D:64:3D:7B:E1:1A:CE:CE:1B:E8:EE:9E:E3:9B:FC:5D
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747CA032791C6EFBB6031CFBEE4F1AF
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/b5W9tj1kPXvhGs7OG-junuOb_F0.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0b:b87:ffb0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ca:03:27:91:c6:ef:bb:60:31:cf:be:e4:f1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f95bdb63d643d7be11acece1be8ee9ee39bfc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:50:91:ad:3a:8a:06:98:18:19:04:c9:f8:2d:
32:5c:62:a4:ff:83:cf:df:22:f3:8a:41:63:d0:2b:
58:41:b9:a7:90:d0:81:6c:a4:bb:0d:83:c1:e0:46:
30:aa:08:a2:da:17:c5:25:a6:42:dc:9d:5e:68:bf:
27:f8:08:c1:ea:87:2c:a5:66:8a:3d:7a:a9:dc:ef:
46:8f:be:4b:00:62:79:f8:25:26:92:0d:a2:c1:37:
26:71:2c:b9:19:a9:88:6d:78:1f:10:df:f4:9d:04:
6a:2a:c7:dd:61:48:ff:08:bd:02:ce:0f:02:11:eb:
7d:2f:23:c7:80:12:b1:4b:fc:4b:4c:f6:1b:d0:c1:
56:93:5e:6b:61:02:55:ef:c1:b6:00:13:e6:71:4a:
0f:c1:d8:fb:f2:00:40:56:9a:04:88:1d:1d:35:f3:
7b:a4:44:07:9c:aa:76:6c:94:8a:e7:4f:4d:fc:5a:
32:dc:a2:47:53:40:5d:6a:a9:28:ee:0b:57:f3:57:
3c:f5:0c:04:4f:52:55:95:b3:dc:08:c6:a2:e2:ed:
cb:46:73:b6:90:23:66:19:cc:55:ec:ed:ef:22:5b:
b1:36:ea:67:38:b7:5c:93:f6:9a:a8:f0:0a:62:d7:
27:0e:5d:9a:1e:fe:a4:f4:a4:e0:1c:bb:02:b2:0f:
55:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:95:BD:B6:3D:64:3D:7B:E1:1A:CE:CE:1B:E8:EE:9E:E3:9B:FC:5D
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/b5W9tj1kPXvhGs7OG-junuOb_F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb0::/48
Signature Algorithm: sha256WithRSAEncryption
0e:06:ed:f1:6c:32:c2:37:2e:92:8b:5b:8f:a5:10:56:23:e2:
9a:18:48:a5:c1:ee:3b:68:23:03:a8:be:8c:cb:c3:ca:8f:cd:
83:d0:b4:3e:8a:9d:41:88:6f:13:e6:df:1d:d7:5e:f4:6a:05:
69:d0:48:a1:78:6f:15:4b:a2:8e:bf:d3:0c:53:5e:70:b3:46:
82:52:31:56:1a:8d:63:56:18:b6:83:9d:11:7c:b3:b4:4f:ae:
41:4f:62:4f:8f:80:d7:51:36:15:6a:7b:f6:c4:e5:c4:42:7f:
cb:28:cc:64:49:29:76:57:40:16:f5:27:19:7c:9c:2c:40:7c:
7f:30:d4:20:7f:40:9a:b6:1d:5d:05:be:93:b2:56:ae:73:37:
1d:55:d1:64:32:cb:63:52:29:bd:f8:bb:f0:11:bc:b9:64:04:
6b:20:79:35:a8:bc:78:df:6c:02:e7:93:7d:25:30:14:fc:03:
a7:b8:9f:ab:64:57:cc:1b:ee:35:dc:03:63:ed:5f:56:52:3c:
22:6e:f8:3b:ff:5a:25:ec:3d:ce:73:45:7f:8e:d5:c1:b9:04:
c7:bc:ab:2c:f6:de:eb:c8:c8:16:18:a3:63:2b:46:e2:6a:31:
e5:05:60:e0:f1:e5:54:71:df:2f:22:e7:21:c2:e4:e9:82:5b:
08:7b:fc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:40 2025 by rpki-client