Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa
File: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (raw, json)
Hash identifier: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=
Subject key identifier: 6C:9E:7F:DD:00:40:4A:C8:0A:AD:86:F5:7C:43:8F:DA:94:D1:97:E0
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B6570347F2CC4C7046683718BABD4D
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa
Signing time: Thu 02 Jan 2025 15:50:48 +0000
ROA not before: Thu 02 Jan 2025 15:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398105
IP address blocks: 2a01:488:bb10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:57:03:47:f2:cc:4c:70:46:68:37:18:ba:bd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c9e7fdd00404ac80aad86f57c438fda94d197e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:bf:fb:59:28:49:31:24:56:a0:da:fe:df:
6a:24:f3:69:90:52:f2:77:ec:e5:e2:6f:44:25:14:
c8:53:98:3e:c8:14:45:2c:df:23:62:0f:2e:00:2c:
8a:d3:01:dc:9f:fc:73:25:f1:99:9a:56:a3:90:98:
e7:c3:ff:8c:86:8d:a2:e0:59:4a:9c:56:31:df:51:
c9:3f:aa:bc:bd:c4:ed:94:b9:b6:32:1f:e9:39:69:
16:30:f8:c4:65:ac:af:32:65:a3:8f:83:74:5d:05:
9b:9d:b0:c1:be:31:4b:3f:57:9d:fe:4c:cd:f4:91:
bb:a3:20:20:f6:9d:b4:39:9e:22:d0:8a:e1:ef:5b:
91:dd:c3:f7:85:25:f1:d7:fd:77:f6:b9:37:5c:09:
5f:b4:ac:c3:93:52:e5:e9:8a:44:d8:14:a4:74:83:
77:99:2d:b6:ed:b1:8d:62:c0:4e:76:1b:0b:94:1e:
69:52:cb:ca:03:ef:7c:9f:07:cf:a2:e7:e0:55:6c:
3c:95:98:86:1a:6d:9b:e4:b3:f4:8b:39:39:55:59:
d2:d1:1f:49:87:2d:6e:33:37:b6:85:f6:2a:c4:0b:
ae:d5:47:fc:4c:f8:d4:db:aa:39:22:06:df:b4:2f:
63:ba:66:f5:36:c9:80:f1:0b:6a:d5:70:03:e2:f1:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9E:7F:DD:00:40:4A:C8:0A:AD:86:F5:7C:43:8F:DA:94:D1:97:E0
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb10::/48
Signature Algorithm: sha256WithRSAEncryption
ae:a6:45:94:22:71:30:ed:a9:c0:b7:26:d4:ee:ab:f0:84:40:
51:52:3a:b1:ea:bc:9b:0b:c6:68:cf:c3:e8:5b:2e:9b:20:08:
13:42:a4:c8:5b:aa:af:b2:dc:92:7b:9a:7a:6b:3c:f7:24:0c:
50:82:75:0d:27:be:3c:bc:ab:04:d2:4a:54:14:e9:dc:00:cf:
3d:f6:ae:85:8d:e7:46:42:e1:85:aa:ea:27:ef:30:27:15:26:
5d:a2:03:b3:b1:0b:f4:8f:86:2b:41:85:f6:3f:17:91:8f:ff:
d3:dd:a8:a5:7c:df:e7:c7:cd:d7:3e:44:b9:92:65:c5:14:b9:
2e:79:27:76:8b:18:ef:87:94:54:8a:1d:18:ad:f1:31:0e:32:
de:f2:c4:e5:7e:f5:7b:c3:10:9d:27:49:cf:5d:ef:94:9c:8f:
d1:e3:39:c8:23:27:aa:cc:43:8a:3d:b9:ae:96:fd:0c:40:20:
47:38:e6:2a:89:38:a3:2f:df:0b:bc:e5:a2:4b:e9:a3:6b:b2:
80:f0:82:6d:8d:7f:80:b4:f2:86:82:99:89:31:f9:b8:90:0c:
e1:97:42:b1:e9:db:a7:a8:05:ba:b3:cd:75:71:50:db:23:f0:
6f:6e:3e:2d:3e:0f:d7:04:0c:66:4b:57:e4:61:74:c9:a3:aa:
59:67:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:07 2025 by rpki-client