Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/0bVZzhMFVS1g8jzWdISxg74CDIY.roa
File: 0bVZzhMFVS1g8jzWdISxg74CDIY.roa (raw, json)
Hash identifier: 0CO5Cokq43YXaFcPiFBIU+s3WfK4TaB7E8kyWwFMXGc=
Subject key identifier: D1:B5:59:CE:13:05:55:2D:60:F2:3C:D6:74:84:B1:83:BE:02:0C:86
Certificate issuer: /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial: 0194206877606EA79D4B6A729A0304040B5F
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/0bVZzhMFVS1g8jzWdISxg74CDIY.roa
Signing time: Wed 01 Jan 2025 05:48:24 +0000
ROA not before: Wed 01 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215060
IP address blocks: 2001:67c:e84::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:77:60:6e:a7:9d:4b:6a:72:9a:03:04:04:0b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1b559ce1305552d60f23cd67484b183be020c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:a7:31:d7:40:73:bf:f1:66:76:85:4c:6d:
b5:48:f5:d9:12:a6:f3:31:14:29:72:69:52:ed:c7:
3b:85:34:c0:ec:43:44:e1:dc:25:58:d8:3d:5e:0f:
7b:de:61:c3:11:7c:8a:c3:1d:a0:01:de:96:0e:56:
9c:e6:98:5b:6a:6f:72:07:54:3f:c8:ee:87:6f:09:
d9:d3:ea:e6:2b:70:03:b7:0e:23:17:fc:28:c1:ca:
6c:47:6a:28:95:6b:2c:78:92:33:ca:08:e3:2f:a1:
6d:26:a7:55:ed:4e:0d:b5:38:cd:21:76:8e:4d:85:
ff:d2:bf:64:bf:d8:7e:76:28:4a:42:88:5d:8f:43:
2a:07:68:9f:17:92:a7:dd:c5:11:de:2f:0e:9f:1d:
60:a6:ed:14:36:57:39:96:10:37:83:23:cd:8b:4d:
40:a8:ad:0b:15:ff:c7:61:e9:99:2a:3f:b1:27:fd:
5a:32:f5:03:67:85:bf:22:c8:6c:a9:16:61:8c:fa:
58:54:6a:c8:2a:63:e8:c1:08:af:b8:a2:c6:71:71:
53:3e:5d:28:0f:59:14:c2:6f:b0:6d:4e:5e:b4:2e:
91:fb:32:b6:0c:af:4b:1b:0b:59:47:6b:3f:5b:93:
1d:fa:bb:2e:d4:9a:1a:34:5b:df:45:8d:bd:d3:94:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:59:CE:13:05:55:2D:60:F2:3C:D6:74:84:B1:83:BE:02:0C:86
X509v3 Authority Key Identifier:
keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/0bVZzhMFVS1g8jzWdISxg74CDIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e84::/48
Signature Algorithm: sha256WithRSAEncryption
1d:2c:d4:7d:68:33:53:40:6e:55:78:e9:62:fa:68:11:8f:df:
dc:6d:a6:d1:88:90:6d:30:27:99:bc:c8:b9:7d:0c:82:c4:39:
96:21:75:2b:01:f7:4e:a3:42:9f:e1:ff:63:94:35:65:ee:3a:
29:80:84:b1:85:7e:22:b2:43:c5:07:e7:07:ad:d4:9b:8e:c2:
34:bf:1a:a2:89:04:5c:ad:8b:78:d8:bc:6b:9e:c5:e9:ba:cf:
f0:ad:6c:fb:6c:45:76:62:f1:e3:4d:4b:09:bd:d6:b0:9a:e5:
98:d2:76:94:ae:cf:a6:18:3b:7f:ec:fd:5b:dd:e5:e3:3c:f1:
5e:d3:d7:6e:f3:f8:87:0a:6f:30:d1:6c:f6:ce:14:dd:b2:f6:
99:c0:ef:08:32:6b:59:60:8c:6d:4e:1b:36:c2:c8:da:4f:57:
68:ee:6b:68:fd:b2:32:89:4c:53:a8:bf:1e:01:88:8c:aa:03:
de:36:06:5e:64:7f:bd:5b:a2:94:f2:f7:7b:6c:9f:a4:ff:77:
ce:7f:01:6c:1a:34:f5:28:53:e6:31:8d:b7:b9:1a:0b:07:ee:
66:fa:72:a5:1e:a9:e5:93:77:e8:56:1b:eb:25:00:53:55:ba:
4f:ec:ce:16:d6:2f:e4:79:7b:71:5a:15:76:3d:52:a8:3d:dd:
61:75:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:22 2025 by rpki-client