Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ct6DAXWIL9BLmitsRLREq1639xc.roa
File: ct6DAXWIL9BLmitsRLREq1639xc.roa (raw, json)
Hash identifier: CMP9kusnZRscZI9JjaFTvNpkssf3iIocsbMXdB6oxuE=
Subject key identifier: 72:DE:83:01:75:88:2F:D0:4B:9A:2B:6C:44:B4:44:AB:5E:B7:F7:17
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAB27062A777B71007AFA70061B120
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ct6DAXWIL9BLmitsRLREq1639xc.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214879
IP address blocks: 2a0c:b641:c60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b2:70:62:a7:77:b7:10:07:af:a7:00:61:b1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72de830175882fd04b9a2b6c44b444ab5eb7f717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:57:27:fa:ce:78:49:e2:33:36:8b:c6:7f:
69:1f:24:97:6a:91:5c:b5:fc:da:e9:05:fe:71:07:
c2:cd:71:fb:d6:11:8e:57:05:ed:3d:ab:5e:d1:4b:
2c:22:a3:e7:12:c2:49:37:32:0b:8c:90:5d:33:29:
fb:a0:e4:62:4b:bf:1e:cd:d1:68:e4:ee:3e:d7:a6:
34:34:7b:54:c7:1c:10:dc:7a:af:71:84:16:dd:9d:
08:2d:0c:2d:08:75:79:36:0f:57:69:7b:f7:0e:50:
78:e7:92:cb:f4:cf:62:cd:8c:89:c7:66:64:9a:26:
fd:c3:be:4b:aa:6e:cb:1d:07:46:71:d7:3d:bf:89:
d5:f5:57:7f:19:e2:ea:16:f8:1e:41:11:c3:4e:00:
9e:61:99:53:59:f7:74:44:81:94:0b:b2:62:1a:6f:
cf:45:2e:79:c5:de:f9:dd:9a:09:34:2f:3a:33:07:
33:01:14:10:f8:56:19:f0:77:1f:fb:5c:b1:f2:dd:
6e:7a:38:79:59:03:c5:c0:40:6c:d2:24:4f:22:08:
f9:9c:59:ce:54:3b:c3:a2:01:1f:d1:7a:01:e5:35:
93:64:ed:1f:15:10:d6:4d:39:63:ad:0c:9d:1d:26:
f3:c3:d6:4d:ff:c0:1a:61:7f:33:9e:9c:25:c5:ce:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DE:83:01:75:88:2F:D0:4B:9A:2B:6C:44:B4:44:AB:5E:B7:F7:17
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ct6DAXWIL9BLmitsRLREq1639xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:c60::/44
Signature Algorithm: sha256WithRSAEncryption
20:2d:0b:68:fc:b6:e2:d9:c8:44:d8:df:e0:21:cc:e3:b3:bb:
c0:8b:94:19:65:06:d7:d5:ac:58:87:14:62:e1:f0:bc:9c:86:
77:eb:02:ba:4b:cc:ea:9f:e1:68:53:20:a2:32:38:0e:5b:fd:
3b:dc:e8:74:70:b2:31:21:9a:b7:f6:60:27:3e:2a:fa:4b:76:
0c:54:29:2f:d0:f8:9a:26:c0:63:fc:53:85:41:9a:cd:bc:13:
1b:69:0f:7a:7e:f9:bf:bd:d3:5b:c3:24:77:21:7a:a1:92:cc:
f8:73:0d:23:4b:ac:b7:1b:bf:f2:62:22:eb:c2:2c:24:64:39:
05:86:cd:7c:d4:9b:3d:5d:ad:7f:ea:a8:8b:7f:5d:80:16:99:
e6:e3:c6:c8:04:0a:70:ef:08:3a:8a:c1:8c:5c:f0:48:97:c6:
16:2a:4f:c2:b2:e1:d4:95:d4:f6:60:ff:06:53:93:16:28:07:
d6:bf:68:b3:dc:b1:03:0f:3d:b6:9c:2a:02:db:01:4c:63:12:
78:73:8d:1b:5b:1d:74:d9:89:04:fd:b9:2e:0c:bc:7f:d3:fc:
bb:34:fb:98:aa:78:98:b0:ef:05:46:a2:9a:44:b1:ba:ee:08:
0b:81:63:6b:1a:41:6a:fa:ca:07:dc:d0:cd:84:99:2b:e7:74:
ec:c8:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:01 2025 by rpki-client