Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/bt6q6PTF8ueRiqJegnWl0jfi6G4.roa
File: bt6q6PTF8ueRiqJegnWl0jfi6G4.roa (raw, json)
Hash identifier: 8TVgggZ1XLtgR7AATYFo0DWz6MeX2DZ1/wik7k03eIU=
Subject key identifier: 6E:DE:AA:E8:F4:C5:F2:E7:91:8A:A2:5E:82:75:A5:D2:37:E2:E8:6E
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 019425214F757E27BFBB2B69EE81EE4C3D7D
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/bt6q6PTF8ueRiqJegnWl0jfi6G4.roa
Signing time: Thu 02 Jan 2025 03:48:47 +0000
ROA not before: Thu 02 Jan 2025 03:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1136
IP address blocks: 2a10:dac0:101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4f:75:7e:27:bf:bb:2b:69:ee:81:ee:4c:3d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Jan 2 03:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6edeaae8f4c5f2e7918aa25e8275a5d237e2e86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:ee:0c:f3:b3:57:be:44:4d:e3:26:d6:6b:
d0:c8:56:94:e1:76:d1:1f:e7:d5:a2:4f:2a:f7:f1:
f6:3a:85:d1:ad:79:41:75:af:df:bd:1a:b1:43:4d:
7c:5e:de:1f:b8:d6:b5:07:cb:c7:7a:05:12:60:43:
0e:0e:39:7e:4d:73:4b:bb:19:cc:60:e4:0c:7d:ee:
50:d0:25:af:bc:18:96:e5:c0:fe:3c:ee:e1:9d:23:
43:c9:eb:ef:33:52:6a:18:03:7a:ce:1c:0e:c2:6f:
ab:86:6c:79:60:95:23:a9:a9:46:43:e6:70:9e:8a:
d0:d4:f4:aa:0e:7a:05:4b:88:5d:88:80:b2:c9:75:
81:53:6e:e0:4d:66:18:04:d4:2d:3e:27:51:2a:3f:
43:49:c4:af:9e:bc:9f:f6:7d:09:ff:b2:23:e6:14:
7a:65:3f:2f:97:f5:31:57:91:cd:4d:0b:fd:cd:8e:
3b:c9:37:bc:21:20:57:c1:00:f6:3a:cc:9f:98:a1:
1a:22:a9:6e:89:63:44:76:bb:30:eb:c6:52:d7:ca:
54:f2:df:47:41:26:44:24:9e:85:a3:d1:52:53:2b:
79:4a:f3:01:fb:81:ac:ca:df:b3:fb:bf:68:85:aa:
43:c1:34:b7:08:bf:80:e1:65:36:68:93:d6:3c:b2:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DE:AA:E8:F4:C5:F2:E7:91:8A:A2:5E:82:75:A5:D2:37:E2:E8:6E
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/bt6q6PTF8ueRiqJegnWl0jfi6G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:dac0:101::/48
Signature Algorithm: sha256WithRSAEncryption
3a:02:b1:61:af:2a:d8:e2:8e:c7:14:36:d8:c2:bd:fc:ca:49:
74:84:f0:44:69:a0:73:12:c3:64:91:bb:cb:64:3d:ac:67:cb:
4d:5f:16:5d:bf:0a:55:1e:f9:7c:1d:eb:96:5a:0e:8b:f7:7f:
29:f5:76:f5:e0:78:a6:95:64:70:5f:5b:aa:cb:30:e6:f7:1e:
fc:04:56:ee:24:a1:c6:bb:a1:88:0c:ce:bd:4e:a8:6f:c5:44:
d6:37:81:cb:08:e3:a0:ce:83:19:0f:84:78:ee:dd:fc:07:f9:
1b:4d:ce:2b:6b:47:2f:70:38:33:83:9a:74:a1:dc:3a:8e:71:
6e:c5:c0:ed:e5:a0:67:17:42:e9:1c:36:28:16:b1:bc:09:b8:
c7:77:0c:7f:df:66:b7:86:26:c7:4e:8e:74:bd:f7:96:74:76:
4b:53:d5:54:4d:cf:de:de:0c:e4:ee:e1:1f:9b:40:84:29:92:
a1:e6:f3:3b:17:0d:b1:ba:75:17:15:f8:a5:48:83:18:b8:de:
30:33:dc:f0:ed:a3:a4:a4:ba:38:50:ff:bf:87:34:94:7b:d9:
90:47:54:18:27:65:2f:95:5f:7e:1b:15:e9:7b:3d:03:0f:13:
6c:98:99:3d:c4:cb:c4:35:13:56:3f:c9:98:f1:27:ce:53:0d:
ba:5d:6d:c2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIU91fie/uytp7oHuTD19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjQyYTZkZTRlMDFmYzMxMjUwZDFiYmUzMjIyODEwNDZl
ZTYxYWEwHhcNMjUwMTAyMDM0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWRlYWFlOGY0YzVmMmU3OTE4YWEyNWU4Mjc1YTVkMjM3ZTJlODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwvuDPOzV75ETeMm1mvQyFaU4XbR
H+fVok8q9/H2OoXRrXlBda/fvRqxQ018Xt4fuNa1B8vHegUSYEMODjl+TXNLuxnM
YOQMfe5Q0CWvvBiW5cD+PO7hnSNDyevvM1JqGAN6zhwOwm+rhmx5YJUjqalGQ+Zw
norQ1PSqDnoFS4hdiICyyXWBU27gTWYYBNQtPidRKj9DScSvnryf9n0J/7Ij5hR6
ZT8vl/UxV5HNTQv9zY47yTe8ISBXwQD2OsyfmKEaIqluiWNEdrsw68ZS18pU8t9H
QSZEJJ6Fo9FSUyt5SvMB+4Gsyt+z+79ohapDwTS3CL+A4WU2aJPWPLJzRQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG7equj0xfLnkYqiXoJ1pdI34uhuMB8GA1UdIwQY
MBaAFHS0Km3k4B/DElDRu+MiKBBG7mGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgt
MTdhMWRjZGNjNmUwLzEvYnQ2cTZQVEY4dWVSaXFKZWduV2wwamZpNkc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgtMTdhMWRjZGNjNmUw
LzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDawAEB
MA0GCSqGSIb3DQEBCwUAA4IBAQA6ArFhryrY4o7HFDbYwr38ykl0hPBEaaBzEsNk
kbvLZD2sZ8tNXxZdvwpVHvl8HeuWWg6L938p9Xb14HimlWRwX1uqyzDm9x78BFbu
JKHGu6GIDM69TqhvxUTWN4HLCOOgzoMZD4R47t38B/kbTc4ra0cvcDgzg5p0odw6
jnFuxcDt5aBnF0LpHDYoFrG8CbjHdwx/32a3hibHTo50vfeWdHZLU9VUTc/e3gzk
7uEfm0CEKZKh5vM7Fw2xunUXFfilSIMYuN4wM9zw7aOkpLo4UP+/hzSUe9mQR1QY
J2UvlV9+GxXpez0DDxNsmJk9xMvENRNWP8mY8SfOUw26XW3C
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:52 2025 by rpki-client