Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/P6L0fBYDj8IBxJEoJbm691TYwMw.roa
File: P6L0fBYDj8IBxJEoJbm691TYwMw.roa (raw, json)
Hash identifier: BifoZefutaZBI86oij40OuzdS/Cb2ApJVW+4+OMVJ0A=
Subject key identifier: 3F:A2:F4:7C:16:03:8F:C2:01:C4:91:28:25:B9:BA:F7:54:D8:C0:CC
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA74FFA3BAC826028A653CDFFCC764
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/P6L0fBYDj8IBxJEoJbm691TYwMw.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24239
IP address blocks: 2a0c:b641:570::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:74:ff:a3:ba:c8:26:02:8a:65:3c:df:fc:c7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fa2f47c16038fc201c4912825b9baf754d8c0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:61:25:a3:54:88:aa:53:35:aa:ae:dc:c7:
d2:0f:a0:92:96:d8:bf:1c:4f:85:15:c1:52:37:fb:
8c:fd:45:ff:e4:5a:ed:82:ca:54:47:26:f4:18:db:
37:cf:13:9e:9c:40:a2:98:87:44:2e:86:72:f4:d9:
ac:70:af:08:bc:b5:c3:ae:d7:9a:6a:9f:6c:65:1a:
d5:fd:75:f2:8e:61:fb:6d:80:f2:e2:c5:ae:d9:77:
0d:ea:14:cb:7c:b8:9c:44:f8:f6:a4:9d:03:bd:ff:
c8:ee:c0:b7:e5:99:eb:ce:e2:07:f7:1b:34:78:33:
36:aa:8f:55:f7:21:93:74:ff:47:83:9d:3d:f9:53:
78:14:e0:cc:59:df:08:58:70:e6:90:4c:fb:00:e8:
ed:70:93:33:62:6e:c2:41:00:3e:18:db:e8:db:ad:
21:62:34:0e:0d:d4:d0:3e:7c:6e:87:7d:33:78:dc:
20:50:05:b1:7e:6e:ea:d4:9f:b9:d8:f2:ad:74:de:
0b:6a:b9:08:27:9f:fb:77:d5:47:75:8e:b7:c2:16:
0c:55:3a:93:6f:c0:4d:cd:dd:1f:80:37:ba:e2:f6:
58:17:ad:28:e1:1b:c0:15:1b:91:88:4b:3d:8a:18:
67:d8:e3:ac:62:e0:37:b8:42:33:9b:9b:9c:3f:f7:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:F4:7C:16:03:8F:C2:01:C4:91:28:25:B9:BA:F7:54:D8:C0:CC
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/P6L0fBYDj8IBxJEoJbm691TYwMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:570::/44
Signature Algorithm: sha256WithRSAEncryption
55:c6:4b:76:ce:e0:2d:0f:ff:8d:de:a2:75:6b:79:b3:cb:1e:
15:35:f4:dc:bd:40:25:52:08:52:fa:7a:b9:be:c5:94:0d:8c:
92:5c:08:57:96:53:53:86:41:fe:c3:21:9a:cd:89:38:5e:03:
24:a3:e4:d0:33:57:7d:03:71:51:18:90:aa:29:c9:85:e7:fc:
19:8b:dd:5c:9f:39:86:bd:b0:e0:86:6b:b6:bb:22:e2:a2:8c:
49:1a:4b:83:fe:b1:39:de:f3:cb:c5:d4:68:4e:86:d8:ed:39:
72:ff:b4:fc:3a:1e:85:d6:a3:c1:cd:a2:d0:1d:e3:68:91:d3:
90:f0:bd:08:87:3e:0b:ef:4a:f7:42:e1:5e:e6:f0:5a:0b:4b:
b0:0e:9b:ab:e0:53:42:d0:ec:d4:4a:98:25:53:27:9b:11:fd:
00:26:6e:51:19:1e:d8:0c:e5:1d:78:6d:ed:00:18:e7:31:46:
0c:b4:45:56:1f:cf:fd:a5:1b:20:bf:04:28:a4:6f:87:c6:bc:
db:af:8c:b0:88:ac:57:e5:2b:b4:f7:6b:50:36:f6:3a:ae:f7:
ee:b3:f6:52:db:56:ec:b8:3c:f6:da:78:ac:3f:ac:26:23:fe:
a2:67:8c:62:b6:31:d5:75:05:09:fb:c1:8d:eb:50:b7:dc:02:
29:6d:1d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:38:09 2025 by rpki-client