Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b0jV7NfjZB_ltlQMdGFBrigqCuw.roa
File: b0jV7NfjZB_ltlQMdGFBrigqCuw.roa (raw, json)
Hash identifier: reDO71R4zUAV0RCF5XhugoKLAFm9gzbF2TxUziajC1M=
Subject key identifier: 6F:48:D5:EC:D7:E3:64:1F:E5:B6:54:0C:74:61:41:AE:28:2A:0A:EC
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA77ED7C20BD4487964483A304CEE4
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b0jV7NfjZB_ltlQMdGFBrigqCuw.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43927
IP address blocks: 2a0c:b642:1a06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:77:ed:7c:20:bd:44:87:96:44:83:a3:04:ce:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f48d5ecd7e3641fe5b6540c746141ae282a0aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bd:f1:a2:97:f2:f6:ca:b4:49:48:ab:48:11:
67:36:34:0c:8d:6e:dc:bb:9a:6e:9f:ee:66:2c:6b:
d5:c2:9d:ba:97:86:f5:83:b2:6a:54:0f:f8:24:91:
3d:3b:58:43:23:52:c9:ba:b5:d8:49:48:de:9f:cb:
40:c8:f9:da:09:e4:f7:d1:c5:e1:78:e3:27:17:5e:
a3:29:9d:17:c5:0f:47:6a:38:86:23:26:e7:64:45:
15:5a:b4:b8:7e:3e:e4:c1:52:49:c9:45:88:dd:c8:
02:16:68:78:01:b9:7c:a1:38:0f:40:33:1a:cb:a1:
ac:9f:01:02:a8:df:61:2a:3b:7a:b3:73:ca:33:67:
4e:a9:af:4a:3d:bc:6a:7f:17:31:9a:ec:59:13:73:
8f:f2:7d:6b:9c:05:4f:9d:c5:5a:f2:54:b7:4b:3b:
6d:22:db:cc:f5:68:c2:9c:21:0a:80:15:cf:05:10:
fb:52:fb:85:07:98:6c:db:ed:f0:89:68:fb:c1:a3:
93:3b:4e:b6:d6:00:58:43:f4:57:e0:40:72:f8:cc:
14:56:72:01:18:88:41:fe:38:cf:f3:98:9d:20:0b:
35:c5:b7:de:b6:c3:03:9f:78:17:61:67:87:62:38:
78:b3:3d:7e:c6:22:a5:22:28:a4:0f:18:73:b8:11:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:48:D5:EC:D7:E3:64:1F:E5:B6:54:0C:74:61:41:AE:28:2A:0A:EC
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/b0jV7NfjZB_ltlQMdGFBrigqCuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a06::/48
Signature Algorithm: sha256WithRSAEncryption
8d:12:d9:aa:f5:96:68:4c:d1:fb:9b:23:6e:54:ca:b5:1c:2c:
8b:32:ad:2e:c6:09:e8:94:80:3f:b0:52:7e:50:18:69:a4:67:
01:97:2d:bf:bc:86:22:59:8a:2d:8b:d3:fb:3b:a4:f4:50:26:
f2:2c:df:b0:7a:57:b9:6e:d0:5c:20:6f:3c:f3:b1:a2:87:9d:
ba:18:47:01:11:0e:07:ef:5a:5f:ac:d0:54:17:18:26:af:76:
f2:39:58:e3:6a:00:3e:c9:51:26:28:0e:d3:a7:72:d8:47:bd:
f5:b5:d8:bc:8d:46:bf:e0:30:61:cb:c9:fb:63:69:c1:38:7f:
06:ba:8c:24:85:0d:fe:16:ff:80:27:0a:0a:1d:0d:a0:f1:fb:
6c:f7:51:47:25:76:18:c9:79:f7:c8:ae:c6:cb:ad:a4:39:50:
52:a8:63:d2:13:7f:74:9a:80:ca:95:31:77:c6:7f:4c:98:04:
05:74:2c:86:b5:86:3a:fc:a7:21:b4:d0:46:94:e3:8a:5a:5d:
ce:d8:81:d4:b0:e9:50:d2:92:5d:f9:dd:52:c7:a9:95:89:6f:
4e:aa:ba:27:4c:84:f4:96:2d:51:8f:ba:b2:84:10:2c:02:8d:
79:2b:32:6d:35:38:cf:90:c4:27:fe:dc:35:ad:94:74:58:01:
9a:b7:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:47 2025 by rpki-client